[Bug 256583] New: Malformed email crashes kmail

jenspen jenspen at optusnet.com.au
Thu Nov 11 08:27:44 GMT 2010 

https://bugs.kde.org/show_bug.cgi?id=256583

           Summary: Malformed email crashes kmail
           Product: kontact
           Version: unspecified
          Platform: openSUSE RPMs
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: crash
          Priority: NOR
         Component: general
        AssignedTo: kdepim-bugs at kde.org
        ReportedBy: jenspen at optusnet.com.au


Application: kontact (4.4.7)
KDE Platform Version: 4.5.3 (KDE 4.5.3) "release 8"
Qt Version: 4.6.3
Operating System: Linux 2.6.34.7-0.5-desktop x86_64
Distribution: "openSUSE 11.3 (x86_64)"

-- Information about the crash:
I was activating the formatted HTML display for a message by clicking where
invited to by KMail.

The HTML message is too long for this report. It begins:
<BASE
HREF="http://maps.google.com/maps/ms?ie=UTF8&om=1&oe=UTF8&msa=0&msid=117384433128436191524.000437d3f98947517b657">
<!DOCTYPE html><html xmlns:v=urn:schemas-microsoft-com:vml class=""><head>
<meta content=text/html;charset=UTF-8 http-equiv=content-type /> <meta
http-equiv=X-UA-Compatible content=IE=EmulateIE7 /> <meta content="Find local
businesses, view maps and get driving directions in Google Maps"
name=description /> <link
href=http://maps.google.com/maps/ms?ie=UTF8&om=1&oe=UTF8&msa=0&msid=117384433128436191524.000437d3f98947517b657
rel=canonical /> <noscript> <meta content="0;
URL=/m?ie=UTF8&om=1&oe=UTF8&msa=0&msid=117384433128436191524.000437d3f98947517b657&oi=nojs"
http-equiv=refresh /> </noscript> <title>Map Chianti - Google Maps</title>
<script type=text/javascript>_pStart = (new Date()).getTime();
</script> <script type=text/javascript>(function(){function
a(d){this.t={};this.tick=function(e,f,c){this.t[e]=[c?c:(new
Date).getTime(),f]};this.tick("start",null,d)}var b=new
a;window.gmapstiming={Timer:a,load:b};try{var
g=null;if(window.chrome&&window.chrome.csi)g=Math.floor(window.chrome.csi().pageT);if(g==null)if(window.gtbExternal)g=window.gtbExternal.pageT();if(g==null)if(window.external)g=window.external.pageT;if(g)window.gmapstiming.pt=g}catch(h){};})();
</script> <script type=text/javascript>var timers = {};var cadObject =
{};function tickImpl(name, timerObj, opt_value) {var t = opt_value || (new
Date).getTime();timerObj[name] = t;var c = window.console;if (c &&
c.markTimeline) {c.markTimeline(&apsinline tick: &aps + name + &aps.&aps + (t -
timerObj[&apsstart&aps]));}}function tick(name, opt_value) {if
(window.gErrorLogger) gErrorLogger.tick(flowType_, name);tickImpl(name, timers,
opt_value);}function getTick(tick) {return timers[tick] || 0;}function
actionData(key, value) {cadObject[key] = value;}tick("start");var expected_ =
1;var flowType_ = null;var beforeReportFn_

The crash can be reproduced every time.

-- Backtrace:
Application: Kontact (kontact), signal: Segmentation fault
[KCrash Handler]
#6  KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=...,
childFrame=0x7fffdd5628c8) at
/usr/src/debug/kdelibs-4.5.3/khtml/khtml_part.cpp:5185
#7  0x00007f64344a6740 in KHTMLPart::findFrame (this=<value optimized out>,
f=<value optimized out>) at
/usr/src/debug/kdelibs-4.5.3/khtml/khtml_part.cpp:5215
#8  0x00007f643457bbe6 in DOM::HTMLFrameElementImpl::ensureUniqueName
(this=0x1e62ee0) at
/usr/src/debug/kdelibs-4.5.3/khtml/html/html_baseimpl.cpp:277
#9  0x00007f643457c3d3 in DOM::HTMLIFrameElementImpl::parseAttribute
(this=0x1e62ee0, attr=0x1e62d10) at
/usr/src/debug/kdelibs-4.5.3/khtml/html/html_baseimpl.cpp:748
#10 0x00007f6434527e45 in DOM::ElementImpl::setAttributeMap (this=0x1e62ef0,
list=<value optimized out>) at
/usr/src/debug/kdelibs-4.5.3/khtml/xml/dom_elementimpl.cpp:586
#11 0x00007f643455a3e3 in khtml::KHTMLParser::parseToken (this=0x863280,
t=0x2064d88) at /usr/src/debug/kdelibs-4.5.3/khtml/html/htmlparser.cpp:278
#12 0x00007f643455b081 in khtml::HTMLTokenizer::processToken (this=0x2064d60)
at /usr/src/debug/kdelibs-4.5.3/khtml/html/htmltokenizer.cpp:2040
#13 0x00007f64345608cd in khtml::HTMLTokenizer::parseTag (this=0x2064d60,
src=...) at /usr/src/debug/kdelibs-4.5.3/khtml/html/htmltokenizer.cpp:1501
#14 0x00007f6434563495 in khtml::HTMLTokenizer::write (this=0x2064d60,
str=<value optimized out>, appendData=<value optimized out>) at
/usr/src/debug/kdelibs-4.5.3/khtml/html/htmltokenizer.cpp:1798
#15 0x00007f643450fffe in DOM::DocumentImpl::write (this=<value optimized out>,
text=...) at /usr/src/debug/kdelibs-4.5.3/khtml/xml/dom_docimpl.cpp:1688
#16 0x00007f64345100b4 in DOM::DocumentImpl::write (this=0x1005480, text=<value
optimized out>) at /usr/src/debug/kdelibs-4.5.3/khtml/xml/dom_docimpl.cpp:1677
#17 0x00007f641bddea78 in KMail::HTMLQuoteColorer::process
(this=0x7fffdd5630f0, htmlSource=...) at
/usr/src/debug/kdepim-4.4.7/kmail/htmlquotecolorer.cpp:37
#18 0x00007f641bc745de in KMail::ObjectTreeParser::processTextHtmlSubtype
(this=0x7fffdd563490, curNode=0x1bdf670) at
/usr/src/debug/kdepim-4.4.7/kmail/objecttreeparser.cpp:1016
#19 0x00007f641bc7f73d in KMail::ObjectTreeParser::parseObjectTree
(this=0x7fffdd563490, node=0x1bdf670) at
/usr/src/debug/kdepim-4.4.7/kmail/objecttreeparser.cpp:318
#20 0x00007f641bc7fae5 in KMail::ObjectTreeParser::stdChildHandling
(this=0x7fffdd5637a0, child=0x1be34f0) at
/usr/src/debug/kdepim-4.4.7/kmail/objecttreeparser.cpp:1278
#21 0x00007f641bc7fe74 in KMail::ObjectTreeParser::processMultiPartMixedSubtype
(this=<value optimized out>, node=<value optimized out>) at
/usr/src/debug/kdepim-4.4.7/kmail/objecttreeparser.cpp:1291
#22 0x00007f641bc7f73d in KMail::ObjectTreeParser::parseObjectTree
(this=0x7fffdd5637a0, node=0x1be9490) at
/usr/src/debug/kdepim-4.4.7/kmail/objecttreeparser.cpp:318
#23 0x00007f641bb1fb77 in KMReaderWin::parseMsg (this=0xc3b8e0, aMsg=0x1dab070)
at /usr/src/debug/kdepim-4.4.7/kmail/kmreaderwin.cpp:1612
#24 0x00007f641bb1eeb0 in KMReaderWin::displayMessage (this=0xc3b8e0) at
/usr/src/debug/kdepim-4.4.7/kmail/kmreaderwin.cpp:1536
#25 0x00007f641bb1f081 in KMReaderWin::updateReaderWin (this=0xc3b8e0) at
/usr/src/debug/kdepim-4.4.7/kmail/kmreaderwin.cpp:1479
#26 0x00007f641bb2280c in KMReaderWin::setMsg (this=0xc3b8e0, aMsg=0x1dab070,
force=true) at /usr/src/debug/kdepim-4.4.7/kmail/kmreaderwin.cpp:1283
#27 0x00007f641bd28cb8 in (anonymous
namespace)::KMailProtocolURLHandler::handleClick (this=<value optimized out>,
url=..., w=0xc3b8e0) at
/usr/src/debug/kdepim-4.4.7/kmail/urlhandlermanager.cpp:390
#28 0x00007f641bd29ee5 in KMail::URLHandlerManager::handleClick
(this=0x1b608d0, url=..., w=0xc3b8e0) at
/usr/src/debug/kdepim-4.4.7/kmail/urlhandlermanager.cpp:317
#29 0x00007f641bb146f1 in KMReaderWin::slotUrlOpen (this=0xc3b8e0, aUrl=...) at
/usr/src/debug/kdepim-4.4.7/kmail/kmreaderwin.cpp:1980
#30 0x00007f641bb234ed in KMReaderWin::qt_metacall (this=0xc3b8e0,
_c=QMetaObject::InvokeMetaMethod, _id=15, _a=0xb76170) at
/usr/src/debug/kdepim-4.4.7/build/kmail/kmreaderwin.moc:188
#31 0x00007f64362a9509 in QObject::event (this=0xc3b8e0, e=0x933250) at
kernel/qobject.cpp:1248
#32 0x00007f64356d976d in QWidget::event (this=0xc3b8e0, event=0x933250) at
kernel/qwidget.cpp:8501
#33 0x00007f64356894d4 in QApplicationPrivate::notify_helper (this=0x63f2e0,
receiver=0xc3b8e0, e=0x933250) at kernel/qapplication.cpp:4302
#34 0x00007f6435691aca in QApplication::notify (this=<value optimized out>,
receiver=0xc3b8e0, e=0x933250) at kernel/qapplication.cpp:4185
#35 0x00007f6436bbd7b6 in KApplication::notify (this=0x7fffdd564e80,
receiver=0xc3b8e0, event=0x933250) at
/usr/src/debug/kdelibs-4.5.3/kdeui/kernel/kapplication.cpp:310
#36 0x00007f6436297e4c in QCoreApplication::notifyInternal
(this=0x7fffdd564e80, receiver=0xc3b8e0, event=0x933250) at
kernel/qcoreapplication.cpp:726
#37 0x00007f643629b5ba in sendEvent (receiver=0x0, event_type=0, data=0x60db90)
at kernel/qcoreapplication.h:215
#38 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0,
data=0x60db90) at kernel/qcoreapplication.cpp:1367
#39 0x00007f64362c0173 in sendPostedEvents (s=<value optimized out>) at
kernel/qcoreapplication.h:220
#40 postEventSourceDispatch (s=<value optimized out>) at
kernel/qeventdispatcher_glib.cpp:276
#41 0x00007f642d8e3a93 in g_main_context_dispatch () from
/usr/lib64/libglib-2.0.so.0
#42 0x00007f642d8e4270 in ?? () from /usr/lib64/libglib-2.0.so.0
#43 0x00007f642d8e4510 in g_main_context_iteration () from
/usr/lib64/libglib-2.0.so.0
#44 0x00007f64362c067f in QEventDispatcherGlib::processEvents (this=0x613220,
flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:412
#45 0x00007f643572a14e in QGuiEventDispatcherGlib::processEvents (this=<value
optimized out>, flags=<value optimized out>) at
kernel/qguieventdispatcher_glib.cpp:204
#46 0x00007f6436297292 in QEventLoop::processEvents (this=<value optimized
out>, flags=...) at kernel/qeventloop.cpp:149
#47 0x00007f6436297495 in QEventLoop::exec (this=0x7fffdd564dd0, flags=...) at
kernel/qeventloop.cpp:201
#48 0x00007f643629b88b in QCoreApplication::exec () at
kernel/qcoreapplication.cpp:1003
#49 0x000000000040417e in _start ()

This bug may be a duplicate of or related to bug 248465.

Possible duplicates by query: bug 256551, bug 256011, bug 255150, bug 254893,
bug 254583.

Reported using DrKonqi

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the Kdepim-bugs mailing list