Konqueror crash on http://www.shell.vesproshop.nl

[Martijn Klingens]

On Sunday 22 September 2002 14:19, Dirk Mueller wrote:
> On Son, 22 Sep 2002, Martijn Klingens wrote:
> > I got a bit scared away by all pointer indirections in render_table.h.
> > They are no doubt fast, but not very easy to grasp quickly.
>
> testcase ?

This is about as small as I can get it. Maybe I can strip off a bit more, but 
not much, or I won't trigger the problem anymore. Hope this helps, together 
with the valgrind output.

khtml (html): style sheet parse mode strict = false
konqueror: KonqView::slotCompleted
khtml (part): saveState!
khtml (part): KHTMLPart::saveState saving URL 
file:/home/martijn/khtml/index.html
libkonq: ## addToHistory: file:/home/martijn/khtml/index.htmlTyped URL: , 
Title: Shell
khtml (part): DONE: 56831
khtml (cache): Loader::slotFinished, url = 
file:/home/martijn/khtml/general.css expires Thu Jan  1 01:00:00 1970
khtml (cache):
==25259==
==25259== Invalid read of size 2
==25259==    at 0x47A8BB22: ??? 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_table.h:295)
==25259==    by 0x479F19F4: khtml::AutoTableLayout::recalcColumn(int) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/table_layout.cpp:371)
==25259==    by 0x479F212D: khtml::AutoTableLayout::fullRecalc(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/table_layout.cpp:505)
==25259==    by 0x479F2170: khtml::AutoTableLayout::calcMinMaxWidth(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/table_layout.cpp:514)
==25259==    by 0x479EC33E: khtml::RenderTable::calcMinMaxWidth(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_table.cpp:397)
==25259==    by 0x479D984F: khtml::RenderObject::recalcMinMaxWidths(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:1072)
==25259==    by 0x479D9761: khtml::RenderObject::recalcMinMaxWidths(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:1058)
==25259==    by 0x479D9761: khtml::RenderObject::recalcMinMaxWidths(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:1058)
==25259==    Address 0x43DBBF96 is 74 bytes inside a block of size 84 free'd
==25259==    at 0x40048E92: __builtin_delete (vg_clientfuncs.c:194)
==25259==    by 0x479D41F8: khtml::RenderObject::~RenderObject(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:122)
==25259==    by 0x479D99CB: khtml::RenderContainer::~RenderContainer(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_container.cpp:57)
==25259==    by 0x479DACDD: khtml::RenderBox::~RenderBox(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_box.cpp:87)
==25259==    by 0x479DEB9F: khtml::RenderFlow::~RenderFlow(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_flow.cpp:105)
==25259==    by 0x479EFCEF: khtml::RenderTableCell::~RenderTableCell(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_table.cpp:1291)
==25259==    by 0x479D84F6: khtml::RenderObject::detach(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:836)
==25259==    by 0x479915C6: DOM::NodeImpl::detach(void) 
(/home/martijn/src/kde3/kdelibs/khtml/xml/dom_nodeimpl.cpp:916)
==25259==
==25259== Invalid read of size 1
==25259==    at 0x47A8833A: ??? 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.h:153)
==25259==    by 0x479F1A0F: khtml::AutoTableLayout::recalcColumn(int) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/table_layout.cpp:372)
==25259==    by 0x479F212D: khtml::AutoTableLayout::fullRecalc(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/table_layout.cpp:505)
==25259==    by 0x479F2170: khtml::AutoTableLayout::calcMinMaxWidth(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/table_layout.cpp:514)
==25259==    by 0x479EC33E: khtml::RenderTable::calcMinMaxWidth(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_table.cpp:397)
==25259==    by 0x479D984F: khtml::RenderObject::recalcMinMaxWidths(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:1072)
==25259==    by 0x479D9761: khtml::RenderObject::recalcMinMaxWidths(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:1058)
==25259==    by 0x479D9761: khtml::RenderObject::recalcMinMaxWidths(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:1058)
==25259==    Address 0x43DBBF66 is 26 bytes inside a block of size 84 free'd
==25259==    at 0x40048E92: __builtin_delete (vg_clientfuncs.c:194)
==25259==    by 0x479D41F8: khtml::RenderObject::~RenderObject(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:122)
==25259==    by 0x479D99CB: khtml::RenderContainer::~RenderContainer(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_container.cpp:57)
==25259==    by 0x479DACDD: khtml::RenderBox::~RenderBox(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_box.cpp:87)
==25259==    by 0x479DEB9F: khtml::RenderFlow::~RenderFlow(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_flow.cpp:105)
==25259==    by 0x479EFCEF: khtml::RenderTableCell::~RenderTableCell(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_table.cpp:1291)
==25259==    by 0x479D84F6: khtml::RenderObject::detach(void) 
(/home/martijn/src/kde3/kdelibs/khtml/rendering/render_object.cpp:836)
==25259==    by 0x479915C6: DOM::NodeImpl::detach(void) 
(/home/martijn/src/kde3/kdelibs/khtml/xml/dom_nodeimpl.cpp:916)

-- 
Martijn