[kde] [Bug 382457] New: null reference passed to strcmp whilst parsing xslt

Jon bugzilla_noreply at kde.org
Tue Jul 18 09:32:24 BST 2017 

https://bugs.kde.org/show_bug.cgi?id=382457

            Bug ID: 382457
           Summary: null reference passed to strcmp whilst parsing xslt
           Product: kde
           Version: unspecified
          Platform: unspecified
                OS: Linux
            Status: UNCONFIRMED
          Keywords: drkonqi
          Severity: crash
          Priority: NOR
         Component: general
          Assignee: unassigned-bugs at kde.org
          Reporter: jon at moozaad.co.uk
  Target Milestone: ---

Application: kdeinit5 (5.0.97)

Qt Version: 5.9.1
Frameworks Version: 5.35.0
Operating System: Linux 4.11.8-1-default x86_64
Distribution: "openSUSE Tumbleweed"

-- Information about the crash:
- What I was doing when the application crashed:

Opened a nmap generated xml file


  │0x7ffff785b360 <__strcmp_ssse3>         mov    %esi,%ecx                     
   │0x7ffff785b362 <__strcmp_ssse3+2>       mov    %edi,%eax                    
   │0x7ffff785b364 <__strcmp_ssse3+4>       and    $0x3f,%rcx                   
   │0x7ffff785b368 <__strcmp_ssse3+8>       and    $0x3f,%rax                   
   │0x7ffff785b36c <__strcmp_ssse3+12>      cmp    $0x30,%ecx                   
   │0x7ffff785b36f <__strcmp_ssse3+15>      ja     0x7ffff785b3b0
<__strcmp_ssse3+80>                                                             
   │0x7ffff785b371 <__strcmp_ssse3+17>      cmp    $0x30,%eax                   
   │0x7ffff785b374 <__strcmp_ssse3+20>      ja     0x7ffff785b3b0
<__strcmp_ssse3+80>                                                             
b+>│0x7ffff785b376 <__strcmp_ssse3+22>      movlpd (%rdi),%xmm1                 
   │0x7ffff785b37a <__strcmp_ssse3+26>      movlpd (%rsi),%xmm2                 
   │0x7ffff785b37e <__strcmp_ssse3+30>      movhpd 0x8(%rdi),%xmm1              
   │0x7ffff785b383 <__strcmp_ssse3+35>      movhpd 0x8(%rsi),%xmm2              
   │0x7ffff785b388 <__strcmp_ssse3+40>      pxor   %xmm0,%xmm0

rax            0x0      0
rbx            0x7fffffffb5d0   140737488336336
rcx            0x0      0
rdx            0x7fffffffb46c   140737488335980
rsi            0x555556c12b40   93825016081216
rdi            0x0      0
rbp            0x7fffffffb46c   0x7fffffffb46c
rsp            0x7fffffffb458   0x7fffffffb458
r8             0x5555569b0550   93825013581136
r9             0x7fffec1e12b8   140737154781880
r10            0x848    2120
r11            0x7ffff785b360   140737346122592
r12            0x7fffbe81ddc0   140736389569984
r13            0x0      0
r14            0xffffffff       4294967295
r15            0x7fffffffb668   140737488336488
rip            0x7ffff785b376   0x7ffff785b376 <__strcmp_ssse3+22>
eflags         0x10283  [ CF SF IF RF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (kdeinit5), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f5f97f68740 (LWP 7009))]

Thread 18 (Thread 0x7f5f037fe700 (LWP 7048)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f61c96ea3 in  () at /usr/lib64/libQt5WebKit.so.5
#2  0x00007f5f61fdb5b1 in  () at /usr/lib64/libQt5WebKit.so.5
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 17 (Thread 0x7f5f03fff700 (LWP 7047)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f61c96ea3 in  () at /usr/lib64/libQt5WebKit.so.5
#2  0x00007f5f61fdb5b1 in  () at /usr/lib64/libQt5WebKit.so.5
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 16 (Thread 0x7f5f18daf700 (LWP 7046)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f61c96ea3 in  () at /usr/lib64/libQt5WebKit.so.5
#2  0x00007f5f61fdb5b1 in  () at /usr/lib64/libQt5WebKit.so.5
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 15 (Thread 0x7f5f195b0700 (LWP 7045)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f61c96ea3 in  () at /usr/lib64/libQt5WebKit.so.5
#2  0x00007f5f61fdb5b1 in  () at /usr/lib64/libQt5WebKit.so.5
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 14 (Thread 0x7f5f19db1700 (LWP 7044)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f61c96ea3 in  () at /usr/lib64/libQt5WebKit.so.5
#2  0x00007f5f61fdb5b1 in  () at /usr/lib64/libQt5WebKit.so.5
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 13 (Thread 0x7f5f1a5b2700 (LWP 7043)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f61c96ea3 in  () at /usr/lib64/libQt5WebKit.so.5
#2  0x00007f5f61fdb5b1 in  () at /usr/lib64/libQt5WebKit.so.5
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 12 (Thread 0x7f5f1adb3700 (LWP 7042)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f61c95db7 in  () at /usr/lib64/libQt5WebKit.so.5
#2  0x00007f5f61fdb5b1 in  () at /usr/lib64/libQt5WebKit.so.5
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 11 (Thread 0x7f5f1c497700 (LWP 7041)):
#0  0x00007f5f9603308d in poll () at /lib64/libc.so.6
#1  0x00007f5f92b05d09 in  () at /usr/lib64/libglib-2.0.so.0
#2  0x00007f5f92b05e1c in g_main_context_iteration () at
/usr/lib64/libglib-2.0.so.0
#3  0x00007f5f965c96ab in
QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) ()
at /usr/lib64/libQt5Core.so.5
#4  0x00007f5f9657235a in
QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at
/usr/lib64/libQt5Core.so.5
#5  0x00007f5f963a231a in QThread::exec() () at /usr/lib64/libQt5Core.so.5
#6  0x00007f5f963a6d2e in  () at /usr/lib64/libQt5Core.so.5
#7  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#8  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 10 (Thread 0x7f5f5d3ba700 (LWP 7040)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f61fa6f24 in  () at /usr/lib64/libQt5WebKit.so.5
#2  0x00007f5f61fa6f49 in  () at /usr/lib64/libQt5WebKit.so.5
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 9 (Thread 0x7f5f6e1b3700 (LWP 7017)):
#0  0x00007f5f9603308d in poll () at /lib64/libc.so.6
#1  0x00007f5f92b05d09 in  () at /usr/lib64/libglib-2.0.so.0
#2  0x00007f5f92b05e1c in g_main_context_iteration () at
/usr/lib64/libglib-2.0.so.0
#3  0x00007f5f965c96ab in
QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) ()
at /usr/lib64/libQt5Core.so.5
#4  0x00007f5f9657235a in
QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at
/usr/lib64/libQt5Core.so.5
#5  0x00007f5f963a231a in QThread::exec() () at /usr/lib64/libQt5Core.so.5
#6  0x00007f5f8ee84a45 in  () at /usr/lib64/libQt5DBus.so.5
#7  0x00007f5f963a6d2e in  () at /usr/lib64/libQt5Core.so.5
#8  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#9  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 8 (Thread 0x7f5f6ee9b700 (LWP 7016)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f7973005b in  () at /usr/lib64/dri/radeonsi_dri.so
#2  0x00007f5f7972fd97 in  () at /usr/lib64/dri/radeonsi_dri.so
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 7 (Thread 0x7f5f6f69c700 (LWP 7015)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f7973005b in  () at /usr/lib64/dri/radeonsi_dri.so
#2  0x00007f5f7972fd97 in  () at /usr/lib64/dri/radeonsi_dri.so
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 6 (Thread 0x7f5f6fe9d700 (LWP 7014)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f7973005b in  () at /usr/lib64/dri/radeonsi_dri.so
#2  0x00007f5f7972fd97 in  () at /usr/lib64/dri/radeonsi_dri.so
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 5 (Thread 0x7f5f7069e700 (LWP 7013)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f7973005b in  () at /usr/lib64/dri/radeonsi_dri.so
#2  0x00007f5f7972fd97 in  () at /usr/lib64/dri/radeonsi_dri.so
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 4 (Thread 0x7f5f710a4700 (LWP 7012)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f7973005b in  () at /usr/lib64/dri/radeonsi_dri.so
#2  0x00007f5f7972fd97 in  () at /usr/lib64/dri/radeonsi_dri.so
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 3 (Thread 0x7f5f718a5700 (LWP 7011)):
#0  0x00007f5f946db5ed in pthread_cond_wait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x00007f5f7973005b in  () at /usr/lib64/dri/radeonsi_dri.so
#2  0x00007f5f7972fd97 in  () at /usr/lib64/dri/radeonsi_dri.so
#3  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 2 (Thread 0x7f5f813ca700 (LWP 7010)):
#0  0x00007f5f9603308d in poll () at /lib64/libc.so.6
#1  0x00007f5f973f2387 in  () at /usr/lib64/libxcb.so.1
#2  0x00007f5f973f417a in xcb_wait_for_event () at /usr/lib64/libxcb.so.1
#3  0x00007f5f83b59449 in  () at /usr/lib64/libQt5XcbQpa.so.5
#4  0x00007f5f963a6d2e in  () at /usr/lib64/libQt5Core.so.5
#5  0x00007f5f946d54e7 in start_thread () at /lib64/libpthread.so.0
#6  0x00007f5f9603ca2f in clone () at /lib64/libc.so.6

Thread 1 (Thread 0x7f5f97f68740 (LWP 7009)):
[KCrash Handler]
#6  0x00007f5f96080376 in __strcmp_ssse3 () at /lib64/libc.so.6
#7  0x00007f5f61fda098 in  () at /usr/lib64/libQt5WebKit.so.5
#8  0x00007f5f61fda1fb in WTF::Collator::collate(char16_t const*, unsigned
long, char16_t const*, unsigned long) const () at /usr/lib64/libQt5WebKit.so.5
#9  0x00007f5f60eb1325 in  () at /usr/lib64/libQt5WebKit.so.5
#10 0x00007f5f5f8f0072 in xsltForEach () at /usr/lib64/libxslt.so.1
#11 0x00007f5f5f8eebb3 in  () at /usr/lib64/libxslt.so.1
#12 0x00007f5f5f8eebb3 in  () at /usr/lib64/libxslt.so.1
#13 0x00007f5f5f8eebb3 in  () at /usr/lib64/libxslt.so.1
#14 0x00007f5f5f8f1431 in  () at /usr/lib64/libxslt.so.1
#15 0x00007f5f5f8f1a35 in xsltProcessOneNode () at /usr/lib64/libxslt.so.1
#16 0x00007f5f5f8f26d1 in xsltApplyTemplates () at /usr/lib64/libxslt.so.1
#17 0x00007f5f5f8eebb3 in  () at /usr/lib64/libxslt.so.1
#18 0x00007f5f5f8f1431 in  () at /usr/lib64/libxslt.so.1
#19 0x00007f5f5f8f1a35 in xsltProcessOneNode () at /usr/lib64/libxslt.so.1
#20 0x00007f5f5f8f26d1 in xsltApplyTemplates () at /usr/lib64/libxslt.so.1
#21 0x00007f5f5f8eebb3 in  () at /usr/lib64/libxslt.so.1
#22 0x00007f5f5f8f1431 in  () at /usr/lib64/libxslt.so.1
#23 0x00007f5f5f8f1a35 in xsltProcessOneNode () at /usr/lib64/libxslt.so.1
#24 0x00007f5f5f8f4b61 in  () at /usr/lib64/libxslt.so.1
#25 0x00007f5f60eaf42e in  () at /usr/lib64/libQt5WebKit.so.5
#26 0x00007f5f61ad3587 in  () at /usr/lib64/libQt5WebKit.so.5
#27 0x00007f5f60a90194 in  () at /usr/lib64/libQt5WebKit.so.5
#28 0x00007f5f60a91fcf in  () at /usr/lib64/libQt5WebKit.so.5
#29 0x00007f5f61af214a in  () at /usr/lib64/libQt5WebKit.so.5
#30 0x00007f5f61af2305 in  () at /usr/lib64/libQt5WebKit.so.5
#31 0x00007f5f61aabf9e in  () at /usr/lib64/libQt5WebKit.so.5
#32 0x00007f5f60b4fa34 in  () at /usr/lib64/libQt5WebKit.so.5
#33 0x00007f5f60b4fca1 in  () at /usr/lib64/libQt5WebKit.so.5
#34 0x00007f5f60ba0a83 in  () at /usr/lib64/libQt5WebKit.so.5
#35 0x00007f5f60dc7a86 in  () at /usr/lib64/libQt5WebKit.so.5
#36 0x00007f5f60dc75dc in  () at /usr/lib64/libQt5WebKit.so.5
#37 0x00007f5f965a125a in QMetaObject::activate(QObject*, int, int, void**) ()
at /usr/lib64/libQt5Core.so.5
#38 0x00007f5f8f87c595 in  () at /usr/lib64/libQt5Network.so.5
#39 0x00007f5f96583ca6 in QMetaMethod::invoke(QObject*, Qt::ConnectionType,
QGenericReturnArgument, QGenericArgument, QGenericArgument, QGenericArgument,
QGenericArgument, QGenericArgument, QGenericArgument, QGenericArgument,
QGenericArgument, QGenericArgument, QGenericArgument) const () at
/usr/lib64/libQt5Core.so.5
#40 0x00007f5f9658602d in QMetaObject::invokeMethod(QObject*, char const*,
Qt::ConnectionType, QGenericReturnArgument, QGenericArgument, QGenericArgument,
QGenericArgument, QGenericArgument, QGenericArgument, QGenericArgument,
QGenericArgument, QGenericArgument, QGenericArgument, QGenericArgument) () at
/usr/lib64/libQt5Core.so.5
#41 0x00007f5f8c330e22 in  () at /usr/lib64/libKF5KIOWidgets.so.5
#42 0x00007f5f8c333862 in  () at /usr/lib64/libKF5KIOWidgets.so.5
#43 0x00007f5f965a125a in QMetaObject::activate(QObject*, int, int, void**) ()
at /usr/lib64/libQt5Core.so.5
#44 0x00007f5f95cf8f7c in KJob::result(KJob*, KJob::QPrivateSignal) () at
/usr/lib64/libKF5CoreAddons.so.5
#45 0x00007f5f95cf9ab1 in KJob::finishJob(bool) () at
/usr/lib64/libKF5CoreAddons.so.5
#46 0x00007f5f8fe994f8 in KIO::SimpleJob::slotFinished() () at
/usr/lib64/libKF5KIOCore.so.5
#47 0x00007f5f8fea340f in KIO::TransferJob::slotFinished() () at
/usr/lib64/libKF5KIOCore.so.5
#48 0x00007f5f8fea2bb1 in  () at /usr/lib64/libKF5KIOCore.so.5
#49 0x00007f5f965a125a in QMetaObject::activate(QObject*, int, int, void**) ()
at /usr/lib64/libQt5Core.so.5
#50 0x00007f5f8fe74ed4 in KIO::SlaveInterface::dispatch(int, QByteArray const&)
() at /usr/lib64/libKF5KIOCore.so.5
#51 0x00007f5f8fe71537 in KIO::SlaveInterface::dispatch() () at
/usr/lib64/libKF5KIOCore.so.5
#52 0x00007f5f8fe769e1 in KIO::Slave::gotInput() () at
/usr/lib64/libKF5KIOCore.so.5
#53 0x00007f5f965a125a in QMetaObject::activate(QObject*, int, int, void**) ()
at /usr/lib64/libQt5Core.so.5
#54 0x00007f5f8fe1bb6f in  () at /usr/lib64/libKF5KIOCore.so.5
#55 0x00007f5f965a1c42 in QObject::event(QEvent*) () at
/usr/lib64/libQt5Core.so.5
#56 0x00007f5f94c5093c in QApplicationPrivate::notify_helper(QObject*, QEvent*)
() at /usr/lib64/libQt5Widgets.so.5
#57 0x00007f5f94c57cb4 in QApplication::notify(QObject*, QEvent*) () at
/usr/lib64/libQt5Widgets.so.5
#58 0x00007f5f96573d48 in QCoreApplication::notifyInternal2(QObject*, QEvent*)
() at /usr/lib64/libQt5Core.so.5
#59 0x00007f5f96576335 in QCoreApplicationPrivate::sendPostedEvents(QObject*,
int, QThreadData*) () at /usr/lib64/libQt5Core.so.5
#60 0x00007f5f965ca013 in  () at /usr/lib64/libQt5Core.so.5
#61 0x00007f5f92b05b57 in g_main_context_dispatch () at
/usr/lib64/libglib-2.0.so.0
#62 0x00007f5f92b05d88 in  () at /usr/lib64/libglib-2.0.so.0
#63 0x00007f5f92b05e1c in g_main_context_iteration () at
/usr/lib64/libglib-2.0.so.0
#64 0x00007f5f965c968f in
QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) ()
at /usr/lib64/libQt5Core.so.5
#65 0x00007f5f9657235a in
QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at
/usr/lib64/libQt5Core.so.5
#66 0x00007f5f9657abe4 in QCoreApplication::exec() () at
/usr/lib64/libQt5Core.so.5
#67 0x00007f5f870c7d36 in kdemain () at /usr/lib64/libkdeinit5_konqueror.so
#68 0x0000563460a98a1f in  ()
#69 0x0000563460a99d4c in  ()
#70 0x0000563460a9a6a4 in  ()
#71 0x0000563460a9556c in  ()
#72 0x00007f5f95f6f46a in __libc_start_main () at /lib64/libc.so.6
#73 0x0000563460a9619a in _start ()

Reported using DrKonqi

-- 
You are receiving this mail because:
You are the assignee for the bug.

More information about the Unassigned-bugs mailing list