Bug 95775

[Andras Mantia]

Andras Mantia wrote:

> I will run valgrind through Quanta and will post the results.
> 
In valgrind the crash is survived, but the log indicates the double
deletion:

==9250==
==9250== Invalid read of size 4
==9250==    at 0x4074A241: KHTMLPart::clear() (khtml_part.cpp:1372)
==9250==    by 0x4074C3F3: KHTMLPart::begin(KURL const&, int, int)
(khtml_part.cpp:1782)
==9250==    by 0x4074AB18: KHTMLPart::slotData(KIO::Job*, QMemArray<char>
const&) (khtml_part.cpp:1501)
==9250==    by 0x40765C91: KHTMLPart::qt_invoke(int, QUObject*)
(khtml_part.moc:487)
==9250==    Address 0x4CF58024 is 0 bytes inside a block of size 184 free'd
==9250==    at 0x40027FA3: __builtin_delete (vg_replace_malloc.c:244)
==9250==    by 0x40027FC1: operator delete(void*) (vg_replace_malloc.c:253)
==9250==    by 0x4076DCFE: khtml::ChildFrame::~ChildFrame()
(khtmlpart_p.h:91)
==9250==    by 0x40745534: KHTMLPart::~KHTMLPart() (khtml_part.cpp:496)
==9250==
==9250== Invalid write of size 4
==9250==    at 0x4189FAC1: QObject::~QObject()
(in /usr/lib/qt-copy-3.3/lib/libqt-mt.so.3.3.3)
==9250==    by 0x4074A24C: KHTMLPart::clear() (khtml_part.cpp:1372)
==9250==    by 0x4074C3F3: KHTMLPart::begin(KURL const&, int, int)
(khtml_part.cpp:1782)
==9250==    by 0x4074AB18: KHTMLPart::slotData(KIO::Job*, QMemArray<char>
const&) (khtml_part.cpp:1501)
==9250==    Address 0x4CF58024 is 0 bytes inside a block of size 184 free'd
==9250==    at 0x40027FA3: __builtin_delete (vg_replace_malloc.c:244)
==9250==    by 0x40027FC1: operator delete(void*) (vg_replace_malloc.c:253)
==9250==    by 0x4076DCFE: khtml::ChildFrame::~ChildFrame()
(khtmlpart_p.h:91)
==9250==    by 0x40745534: KHTMLPart::~KHTMLPart() (khtml_part.cpp:496)
==9250==
==9250== Invalid read of size 1
==9250==    at 0x4189FAC3: QObject::~QObject()
(in /usr/lib/qt-copy-3.3/lib/libqt-mt.so.3.3.3)
==9250==    by 0x4074A24C: KHTMLPart::clear() (khtml_part.cpp:1372)
==9250==    by 0x4074C3F3: KHTMLPart::begin(KURL const&, int, int)
(khtml_part.cpp:1782)
==9250==    by 0x4074AB18: KHTMLPart::slotData(KIO::Job*, QMemArray<char>
const&) (khtml_part.cpp:1501)
==9250==    Address 0x4CF58028 is 4 bytes inside a block of size 184 free'd
==9250==    at 0x40027FA3: __builtin_delete (vg_replace_malloc.c:244)
==9250==    by 0x40027FC1: operator delete(void*) (vg_replace_malloc.c:253)
==9250==    by 0x4076DCFE: khtml::ChildFrame::~ChildFrame()
(khtmlpart_p.h:91)
==9250==    by 0x40745534: KHTMLPart::~KHTMLPart() (khtml_part.cpp:496)
==9250==
==9250== Invalid free() / delete / delete[]
==9250==    at 0x40027FA3: __builtin_delete (vg_replace_malloc.c:244)
==9250==    by 0x40027FC1: operator delete(void*) (vg_replace_malloc.c:253)
==9250==    by 0x4189FC3E: QObject::~QObject()
(in /usr/lib/qt-copy-3.3/lib/libqt-mt.so.3.3.3)
==9250==    by 0x4074A24C: KHTMLPart::clear() (khtml_part.cpp:1372)
==9250==    Address 0x4CF58024 is 0 bytes inside a block of size 184 free'd
==9250==    at 0x40027FA3: __builtin_delete (vg_replace_malloc.c:244)
==9250==    by 0x40027FC1: operator delete(void*) (vg_replace_malloc.c:253)
==9250==    by 0x4076DCFE: khtml::ChildFrame::~ChildFrame()
(khtmlpart_p.h:91)
==9250==    by 0x40745534: KHTMLPart::~KHTMLPart() (khtml_part.cpp:496)

-- 
Quanta Plus developer - http://quanta.sourceforge.net
K Desktop Environment - http://www.kde.org