ルギア君の戯言

雑多な記事。

Konqueror のクラッシュについて

もっと詳しくわかったので、報告。(日記に報告してどうする)

English

Konqueror crashes when it render some (X)HTML code.
Sample is available on http://lugia.so.land.to/rdp/test.html (This Contains Japanese. Use UTF-8.)

Konqueror Version 3.5.8-6m.mo4.xanadu from Momonga Linux's Repository
Crash Place line 1042, in khtml_caret.cpp (this may means assertion fails.)
Crash Condition View a Page contains object tag which includes iframe tag and Click anywhere on the page.
(the bject tag must have data or class attribute.)
Crash Result Konqueror Sends SIGSEGV, and Exit with 0375.

日本語

一定の (X)HTML コードをレンダリングしたときに、クラッシュします。
サンプルページは http://lugia.so.land.to/rdp/test.html にあります。

Konqueror のバージョン 3.5.8-6m.mo4.xanadu Momonga Linux 4 の update-released レポジトリのもの
クラッシュ場所 khtml_caret.cpp の 1042 行目 (assert 失敗のようだ・・・)
クラッシュ条件 object タグ内に iframe タグを含むページを開き、ページのどこかをクリックするとクラッシュする。
(object タグが data 属性または class 属性を持っていない場合はおこらない)
クラッシュした結果 Konqueror は SIGSEGV (Segmentation Fault)を送り、終了コード 0375 で終了する。

BackTrace

By GDB.

#0  0x0178615f in ?? () from /usr/lib/libkhtml.so.4
#1  0x0198ea61 in ?? () from /usr/lib/libkhtml.so.4
#2  0x01991929 in ?? () from /usr/lib/libkhtml.so.4
#3  0x0198fd44 in ?? () from /usr/lib/libkhtml.so.4
#4  0x00000412 in ?? ()
#5  0xbf81699b in ?? ()
#6  0xbf81699a in ?? ()
#7  0xbf816958 in ?? ()
#8  0x01470cad in operator new[] () from /usr/lib/libstdc++.so.6
#9  0x017890ca in KHTMLView::moveCaretTo () from /usr/lib/libkhtml.so.4
#10 0x01789a59 in KHTMLPart::khtmlMousePressEvent () from /usr/lib/libkhtml.so.4
#11 0x0173b027 in KHTMLPart::customEvent () from /usr/lib/libkhtml.so.4
#12 0x00f7254e in QObject::event () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#13 0x00f12f67 in QApplication::internalNotify () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#14 0x00f13d11 in QApplication::notify () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#15 0x00c42f32 in KApplication::notify () from /usr/lib/libkdecore.so.4
#16 0x01768610 in KHTMLView::viewportMousePressEvent () from /usr/lib/libkhtml.so.4
#17 0x010873ca in QScrollView::eventFilter () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#18 0x01752d09 in KHTMLView::eventFilter () from /usr/lib/libkhtml.so.4
#19 0x00f7246c in QObject::activate_filters () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#20 0x00f724db in QObject::event () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#21 0x00fab2ec in QWidget::event () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#22 0x00f12f67 in QApplication::internalNotify () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#23 0x00f13ee9 in QApplication::notify () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#24 0x00c42f32 in KApplication::notify () from /usr/lib/libkdecore.so.4
#25 0x00eb0ce5 in QETWidget::translateMouseEvent () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#26 0x00eb015d in QApplication::x11ProcessEvent () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#27 0x00ec087b in QEventLoop::processEvents () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#28 0x00f29bd0 in QEventLoop::enterLoop () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#29 0x00f29a66 in QEventLoop::exec () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#30 0x00f12aff in QApplication::exec () from /usr/lib/qt-3.3.7/lib/libqt-mt.so.3
#31 0x001d8e54 in kdemain () from /usr/lib/libkdeinit_konqueror.so
#32 0x080484a2 in main ()