Bug 29426 – [Qt] [REG] Webkit crash for some type of object (if the type contains +)

• Component: Page Loading
• Status: RESOLVED WORKSFORME

[Tor Arne Vestbø]

This bug report originated from issue QTBUG-3923
<http://bugreports.qt.nokia.com/browse/QTBUG-3923>

--- Description ---

Webkit crash when there is an object in the html if the type of this object contains the character plus (+).

Here is the minimal example to reproduce the problem:

int main(int argc, char **argv){
  QApplication app(argc, argv);
  QWebView view;
  view.setHtml("<object type=\"application/rss+xml\"></object>");
  view.show();
  return app.exec();
}

[Tor Arne Vestbø]

Reproducable in trunk

[Kimmo Kinnunen]

Created attachment 50096 [details]
backtrace of qt-master branch bundled webkit ("system webkit")

I cannot reproduce this crash with trunk WebKit of today. Tested with Linux 32bit and Mac 64bit.

I can reproduce it with WebKit from qt master branch compiled few days ago. Linux bt attached for interested parties.

--- pro file for convenient testing:
TEMPLATE=app
CONFIG-=app_bundle

TARGET=webkit-bug-29426
D=Release
CONFIG(debug): D=Debug

!isEmpty(WEBKIT_PATH) {
    #    include($$WEBKIT_PATH/WebKit.pri)

    OUTPUT_DIR=$$WEBKIT_PATH/WebKitBuild/$$D
    QMAKE_RPATHDIR = $$OUTPUT_DIR/lib $$QMAKE_RPATHDIR
    INCLUDEPATH+=$$OUTPUT_DIR/include/QtWebKit
    LIBS+=-L$$OUTPUT_DIR/lib -lQtWebKit
    DEFINES=USE_SYSTEM_WEBKIT=0
} else {
    QT += webkit
    DEFINES=USE_SYSTEM_WEBKIT=1
}

SOURCES=main.cpp

[Tor Arne Vestbø]

Qt master is ~ Qt 4.6 when it comes to src/3rdparty webkit. Could not reproduce this in trunk.