[Webkit-unassigned] [Bug 29886] New: Reproducable crash in WebCore::RenderTableSection::paintObject ()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Sep 29 08:45:32 PDT 2009 

https://bugs.webkit.org/show_bug.cgi?id=29886

           Summary: Reproducable crash in
                    WebCore::RenderTableSection::paintObject ()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit Qt
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: bero at arklinux.org


Created an attachment (id=40305)
 --> (https://bugs.webkit.org/attachment.cgi?id=40305)
html that crashes QtWebKit

Opening the html page I'm attaching in a QtWebKit browser causes it to crash.

This is with QtWebKit from the qt 4.6 branch in qt git, checkout from
yesterday.

Backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x00007fd3e9a902be in WebCore::RenderTableSection::paintObject () from
/usr/lib64/libQtWebKit.so.4
(gdb) bt                                                                        
#0  0x00007fd3e9a902be in WebCore::RenderTableSection::paintObject () from
/usr/lib64/libQtWebKit.so.4
#1  0x00007fd3e9a907cf in WebCore::RenderTableSection::paint () from
/usr/lib64/libQtWebKit.so.4      
#2  0x00007fd3e9a87609 in WebCore::RenderTable::paintObject () from
/usr/lib64/libQtWebKit.so.4       
#3  0x00007fd3e9a8683f in WebCore::RenderTable::paint () from
/usr/lib64/libQtWebKit.so.4             
#4  0x00007fd3e9a17429 in WebCore::RenderBlock::paintChildren () from
/usr/lib64/libQtWebKit.so.4     
#5  0x00007fd3e9a1ca23 in WebCore::RenderBlock::paintObject () from
/usr/lib64/libQtWebKit.so.4       
#6  0x00007fd3e9a18f2c in WebCore::RenderBlock::paint () from
/usr/lib64/libQtWebKit.so.4             
#7  0x00007fd3e9a17429 in WebCore::RenderBlock::paintChildren () from
/usr/lib64/libQtWebKit.so.4     
#8  0x00007fd3e9a1ca23 in WebCore::RenderBlock::paintObject () from
/usr/lib64/libQtWebKit.so.4       
#9  0x00007fd3e9a18f2c in WebCore::RenderBlock::paint () from
/usr/lib64/libQtWebKit.so.4             
#10 0x00007fd3e9a17429 in WebCore::RenderBlock::paintChildren () from
/usr/lib64/libQtWebKit.so.4     
#11 0x00007fd3e9a1ca23 in WebCore::RenderBlock::paintObject () from
/usr/lib64/libQtWebKit.so.4       
#12 0x00007fd3e9a18f2c in WebCore::RenderBlock::paint () from
/usr/lib64/libQtWebKit.so.4             
#13 0x00007fd3e9a17429 in WebCore::RenderBlock::paintChildren () from
/usr/lib64/libQtWebKit.so.4     
#14 0x00007fd3e9a1ca23 in WebCore::RenderBlock::paintObject () from
/usr/lib64/libQtWebKit.so.4       
#15 0x00007fd3e9a18f2c in WebCore::RenderBlock::paint () from
/usr/lib64/libQtWebKit.so.4             
#16 0x00007fd3e9a62838 in WebCore::RenderLayer::paintLayer () from
/usr/lib64/libQtWebKit.so.4        
#17 0x00007fd3e9a6296b in WebCore::RenderLayer::paintLayer () from
/usr/lib64/libQtWebKit.so.4        
#18 0x00007fd3e9a63394 in WebCore::RenderLayer::paint () from
/usr/lib64/libQtWebKit.so.4             
#19 0x00007fd3e998aa8b in WebCore::FrameView::paintContents () from
/usr/lib64/libQtWebKit.so.4       
#20 0x00007fd3e99da6e4 in WebCore::ScrollView::paint () from
/usr/lib64/libQtWebKit.so.4              
#21 0x00007fd3e9b10aaa in QWebFramePrivate::renderPrivate () from
/usr/lib64/libQtWebKit.so.4         
#22 0x00007fd3e9b2376b in QWebView::paintEvent () from
/usr/lib64/libQtWebKit.so.4                    
#23 0x00007fd3e88cdd26 in QWidget::event (this=0x26b9fd0, event=0x7fff6adb1910)
at kernel/qwidget.cpp:8050
#24 0x00007fd3e9b2384d in QWebView::event () from /usr/lib64/libQtWebKit.so.4   
#25 0x00007fd3e887a9ce in QApplicationPrivate::notify_helper (this=<value
optimized out>, receiver=0x26b9fd0, e=0x7fff6adb1910) at
kernel/qapplication.cpp:4174
#26 0x00007fd3e8880f44 in QApplication::notify (this=0x7fff6adb3a40,
receiver=0x26b9fd0, e=0x7fff6adb1910) at kernel/qapplication.cpp:4122           
#27 0x00007fd3e85e0e3c in QCoreApplication::notifyInternal
(this=0x7fff6adb3a40, receiver=0x26b9fd0, event=0x7fff6adb1910) at
kernel/qcoreapplication.cpp:704  
#28 0x00007fd3e88d6884 in QWidgetPrivate::drawWidget (this=0x2683550,
pdev=<value optimized out>, rgn=@0x7fff6adb1df0, offset=<value optimized out>,  
    flags=<value optimized out>, sharedPainter=0x0, backingStore=0x2723e10) at
../../src/corelib/kernel/qcoreapplication.h:218                                 
#29 0x00007fd3e8a7f649 in QWidgetBackingStore::sync (this=0x2723e10) at
painting/qbackingstore.cpp:1280                                                 
#30 0x00007fd3e88c7de0 in QWidgetPrivate::syncBackingStore (this=0x259e720) at
kernel/qwidget.cpp:1662                                                         
#31 0x00007fd3e88ce11c in QWidget::event (this=0x259e4c0, event=0x7fff6adb25c0)
at kernel/qwidget.cpp:8196                                                     
#32 0x00007fd3e8c6616b in QMainWindow::event (this=0x259e4c0,
event=0x7fff6adb25c0) at widgets/qmainwindow.cpp:1434                           
#33 0x00007fd3e887a9ce in QApplicationPrivate::notify_helper (this=<value
optimized out>, receiver=0x259e4c0, e=0x7fff6adb25c0) at
kernel/qapplication.cpp:4174
#34 0x00007fd3e8880f44 in QApplication::notify (this=0x7fff6adb3a40,
receiver=0x259e4c0, e=0x7fff6adb25c0) at kernel/qapplication.cpp:4122           
#35 0x00007fd3e85e0e3c in QCoreApplication::notifyInternal
(this=0x7fff6adb3a40, receiver=0x259e4c0, event=0x7fff6adb25c0) at
kernel/qcoreapplication.cpp:704  
#36 0x00007fd3e8a7c947 in sendUpdateRequest (widget=0x259e4c0,
updateImmediately=<value optimized out>) at
../../src/corelib/kernel/qcoreapplication.h:215     
#37 0x00007fd3e8a7feb6 in QWidgetBackingStore::markDirty (this=0x2723e10,
rect=@0x7fff6adb2760, widget=0x25a4130, updateImmediately=true,
invalidateBuffer=176)
    at painting/qbackingstore.cpp:666                                           
#38 0x00007fd3e88c9e5b in QWidget::repaint (this=0x25a4130,
rect=@0x7fff6adb2760) at kernel/qwidget.cpp:9935
#39 0x00007fd3e8cadc18 in QStatusBar::hideOrShow (this=0x25a4130) at
widgets/qstatusbar.cpp:695
#40 0x00007fd3e8eda1a2 in QStatusBar::qt_metacall (this=0x25a4130, _c=<value
optimized out>, _id=-5, _a=0x7fff6adb28a0) at widgets/qstatusbar.h:88
#41 0x00007fd3e85f3fea in QMetaObject::activate (sender=0x25a0830, m=<value
optimized out>, local_signal_index=<value optimized out>, argv=0x2a7dc6000)
    at kernel/qobject.cpp:3390
#42 0x00000000004c7455 in ?? ()
#43 0x000000000046ded9 in ?? ()
#44 0x00000000004c7834 in ?? ()
#45 0x00007fd3e85f3fea in QMetaObject::activate (sender=0x26b9fd0, m=<value
optimized out>, local_signal_index=<value optimized out>, argv=0x2a7dc6000)
    at kernel/qobject.cpp:3390
#46 0x00007fd3e9b23471 in QWebView::loadProgress () from
/usr/lib64/libQtWebKit.so.4
#47 0x00007fd3e9b24266 in QWebView::qt_metacall () from
/usr/lib64/libQtWebKit.so.4
#48 0x00000000004c83c0 in ?? ()
#49 0x00007fd3e85f3fea in QMetaObject::activate (sender=0x266caa0, m=<value
optimized out>, local_signal_index=<value optimized out>, argv=0x2a7dc6000)
    at kernel/qobject.cpp:3390
#50 0x00007fd3e9b18ca1 in QWebPage::loadProgress () from
/usr/lib64/libQtWebKit.so.4
#51 0x00007fd3e9b22504 in QWebPage::qt_metacall () from
/usr/lib64/libQtWebKit.so.4
#52 0x00000000004c7ec0 in ?? ()
#53 0x00007fd3e85f3fea in QMetaObject::activate (sender=0x26763b0, m=<value
optimized out>, local_signal_index=<value optimized out>, argv=0x2a7dc6000)
    at kernel/qobject.cpp:3390
#54 0x00007fd3e9b062a1 in WebCore::FrameLoaderClientQt::loadProgress () from
/usr/lib64/libQtWebKit.so.4
#55 0x00007fd3e994925e in WebCore::ProgressTracker::finalProgressComplete ()
from /usr/lib64/libQtWebKit.so.4
#56 0x00007fd3e9949368 in WebCore::ProgressTracker::progressCompleted () from
/usr/lib64/libQtWebKit.so.4
#57 0x00007fd3e992cc43 in WebCore::FrameLoader::checkLoadCompleteForThisFrame
() from /usr/lib64/libQtWebKit.so.4
#58 0x00007fd3e992d072 in WebCore::FrameLoader::recursiveCheckLoadComplete ()
from /usr/lib64/libQtWebKit.so.4
#59 0x00007fd3e994d774 in WebCore::SubresourceLoader::didFail () from
/usr/lib64/libQtWebKit.so.4
#60 0x00007fd3e9ae9837 in WebCore::QNetworkReplyHandler::finish () from
/usr/lib64/libQtWebKit.so.4
#61 0x00007fd3e9ae9a94 in WebCore::QNetworkReplyHandler::qt_metacall () from
/usr/lib64/libQtWebKit.so.4
#62 0x00007fd3e85f0b57 in QObject::event (this=0x2a711a0, e=0x29f5810) at
kernel/qobject.cpp:1238
#63 0x00007fd3e887a9ce in QApplicationPrivate::notify_helper (this=<value
optimized out>, receiver=0x2a711a0, e=0x29f5810) at
kernel/qapplication.cpp:4174
---Type <return> to continue, or q <return> to quit---
#64 0x00007fd3e8880f44 in QApplication::notify (this=0x7fff6adb3a40,
receiver=0x2a711a0, e=0x29f5810) at kernel/qapplication.cpp:4122
#65 0x00007fd3e85e0e3c in QCoreApplication::notifyInternal
(this=0x7fff6adb3a40, receiver=0x2a711a0, event=0x29f5810) at
kernel/qcoreapplication.cpp:704
#66 0x00007fd3e85e2b07 in QCoreApplicationPrivate::sendPostedEvents
(receiver=0x0, event_type=<value optimized out>, data=0x24a5a50)
    at ../../src/corelib/kernel/qcoreapplication.h:215
#67 0x00007fd3e860dac0 in QEventDispatcherUNIX::processEvents (this=0x24a6ed0,
flags=DWARF-2 expression error: DW_OP_reg operations must be used either alone
or in conjuction with DW_OP_piece.
) at kernel/qeventdispatcher_unix.cpp:892
#68 0x00007fd3e891797c in QEventDispatcherX11::processEvents (this=<value
optimized out>, flags=DWARF-2 expression error: DW_OP_reg operations must be
used either alone or in conjuction with DW_OP_piece.
) at kernel/qeventdispatcher_x11.cpp:152
#69 0x00007fd3e85df762 in QEventLoop::processEvents (this=<value optimized
out>, flags=DWARF-2 expression error: DW_OP_reg operations must be used either
alone or in conjuction with DW_OP_piece.
) at kernel/qeventloop.cpp:149
#70 0x00007fd3e85dfb3f in QEventLoop::exec (this=0x7fff6adb39e0, flags=DWARF-2
expression error: DW_OP_reg operations must be used either alone or in
conjuction with DW_OP_piece.
) at kernel/qeventloop.cpp:201
#71 0x00007fd3e85e2dcb in QCoreApplication::exec () at
kernel/qcoreapplication.cpp:981
#72 0x00000000004c47f5 in ?? ()
#73 0x000000300de1e8ae in __libc_start_main () from /lib64/libc.so.6
#74 0x0000000000000000 in ?? ()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list