Version: 4.0 (using KDE 3.1.2) Installed from: compiled sources Compiler: gcc version 2.96 20000731 (Red Hat Linux 7.1 2.96-98) OS: Linux (i686) release 2.4.17 I had a crash in konqi, but I'm sorry to say that I have no idea how to reproduce it. Nevertheless, maybe a simple look inside the code shows where the problem lies. Here is the dump: [New Thread 1024 (LWP 7549)] 0x41038669 in __wait4 () from /lib/i686/libc.so.6 #0 0x41038669 in __wait4 () from /lib/i686/libc.so.6 #1 0x410b4154 in __DTOR_END__ () from /lib/i686/libc.so.6 #2 0x40ef8523 in waitpid (pid=7682, stat_loc=0x0, options=0) at wrapsyscall.c:172 #3 0x405ad4d8 in KCrash::defaultCrashHandler (sig=11) at kcrash.cpp:235 #4 0x40ef68d5 in pthread_sighandler (signo=11, ctx= {gs = 7, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 0, edi = 3221218224, esi = 3221218160, ebp = 3221218280, esp = 3221217632, ebx = 1078656156, edx = 0, ecx = 3, eax = 0, trapno = 14, err = 4, eip = 1078111850, cs = 35, __csh = 0, eflags = 66118, esp_at_signal = 3221217632, ss = 43, __ssh = 0, fpstate = 0xbfffdee0, oldmask = 2147483648, cr2 = 40}) at signals.c:97 #5 <signal handler called> #6 0x4042ae6a in KXMLGUIFactory::removeClient (this=0x0, client=0x83509e8) at /opt/qt3.1/include/qptrlist.h:71 #7 0x42f4bbb8 in KHTMLPart::slotActiveFrameChanged (this=0x8284220, part=0x0) at khtml_part.cpp:4973 #8 0x42f4c95c in KHTMLPart::qt_invoke (this=0x8284220, _id=37, _o=0xbfffe560) at /opt/qt3.1/include/private/qucom_p.h:312 #9 0x409832bf in QObject::activate_signal (this=0x82ed6c0, clist=0x830c290, o=0xbfffe560) at kernel/qobject.cpp:2226 #10 0x4003862f in KParts::PartManager::activePartChanged (this=0x82ed6c0, t0=0x0) at partmanager.moc:156 #11 0x40037e28 in KParts::PartManager::setActivePart (this=0x82ed6c0, part=0x0, widget=0x0) at partmanager.cpp:444 #12 0x42f3091a in KHTMLPart::~KHTMLPart (this=0xc3, __in_chrg=3) at khtml_part.cpp:271 #13 0x412c4e64 in KonqView::~KonqView (this=0x8283938, __in_chrg=3) at konq_view.cc:119 #14 0x412d0b9d in KonqViewManager::clear (this=0x812c288) at /opt/qt3.1/include/qptrlist.h:143 #15 0x412ca9ce in KonqViewManager::~KonqViewManager (this=0x812c288, __in_chrg=3) at konq_viewmgr.cc:70 #16 0x412a0d22 in KonqMainWindow::~KonqMainWindow (this=0x8127cc8, __in_chrg=3) at konq_mainwindow.cc:232 #17 0x40980e07 in QObject::event (this=0x8127cc8, e=0x8437f70) at kernel/qobject.cpp:683 #18 0x409b0e5e in QWidget::event (this=0x8127cc8, e=0x8437f70) at kernel/qwidget.cpp:4353 #19 0x40a49573 in QMainWindow::event (this=0x8127cc8, e=0x8437f70) at widgets/qmainwindow.cpp:1668 #20 0x40934f40 in QApplication::internalNotify (this=0xbffff3a0, receiver=0x8127cc8, e=0x8437f70) at kernel/qapplication.cpp:2418 #21 0x40934a25 in QApplication::notify (this=0xbffff3a0, receiver=0x8127cc8, e=0x8437f70) at kernel/qapplication.cpp:2311 #22 0x4053814e in KApplication::notify (this=0xbffff3a0, receiver=0x8127cc8, event=0x8437f70) at kapplication.cpp:455 #23 0x40c5f0ca in QApplication::sendEvent (receiver=0x8127cc8, event=0x8437f70) at kernel/qapplication.h:480 #24 0x40935f56 in QApplication::sendPostedEvents (receiver=0x0, event_type=52) at kernel/qapplication.cpp:3039 #25 0x40947066 in QEventLoop::enterLoop (this=0x80b03c8) at kernel/qeventloop.cpp:213 #26 0x40946ec4 in QEventLoop::exec (this=0x80b03c8) at kernel/qeventloop.cpp:145 #27 0x409350db in QApplication::exec (this=0xbffff3a0) at kernel/qapplication.cpp:2541 #28 0x4129e535 in main (argc=4, argv=0x805cde0) at konq_main.cc:131 #29 0x0804cb2c in launch (argc=4, _name=0x805ce0c "konqueror", args=0x805ce68 "/root", cwd=0x805ce68 "/root", envc=31, envs=0x805d1c5 "", reset_env=true, tty=0x0, avoid_loops=false, startup_id_str=0x805d1c9 "eiwnt048;1059048311;879913;9339") at kinit.cpp:547 #30 0x0804d873 in handle_launcher_request (sock=4) at kinit.cpp:1030 #31 0x0804dcc9 in handle_requests (waitForPid=0) at kinit.cpp:1186 #32 0x0804ec33 in main (argc=3, argv=0xbffffc14, envp=0xbffffc24) at kinit.cpp:1547 #33 0x40f9a507 in __libc_start_main (main=0x804e650 <main>, argc=3, ubp_av=0xbffffc14, init=0x804a8c8 <_init>, fini=0x804f364 <_fini>, rtld_fini=0x4000dc14 <_dl_fini>, stack_end=0xbffffc0c) at ../sysdeps/generic/libc-start.c:129
This is most likely fixed by the same change as #58946. pmax, what do you think?
It's the same bug and the same fix. The fix to #58946 makes this crash impossible (KXMLGUIFactory::removeClient be called with this = 0L) *** This bug has been marked as a duplicate of 58946 ***