Bug 185172

Version:            (using KDE 4.2.0)
OS:                Linux
Installed from:    Ubuntu Packages


Freescale's site generally causes Konqueror to crash on Back/Forward:

To reproduce:
1. Go here:
http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=CW-SUITE-SPECIAL&tab=Design_Tools_Tab

2. Click the Back Button

3. Click the Forward Button

4. Watch the crash


See the attached backtrace:

Application: Konqueror (konqueror), signal SIGSEGV
[Current thread is 0 (LWP 30743)]

Thread 4 (Thread 0xb0c1db90 (LWP 21419)):
#0  0xb8006424 in __kernel_vsyscall ()
#1  0xb63f43a2 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb662fc14 in pthread_cond_timedwait () from /lib/tls/i686/cmov/libc.so.6
#3  0xb72586cc in QWaitCondition::wait () from /usr/lib/libQtCore.so.4
#4  0xb724d886 in ?? () from /usr/lib/libQtCore.so.4
#5  0xb72576ae in ?? () from /usr/lib/libQtCore.so.4
#6  0xb63f050f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0xb6621a0e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 3 (Thread 0xb1e91b90 (LWP 21425)):
#0  0xb8006424 in __kernel_vsyscall ()
#1  0xb6619df1 in select () from /lib/tls/i686/cmov/libc.so.6
#2  0xb7327150 in ?? () from /usr/lib/libQtCore.so.4
#3  0xb72576ae in ?? () from /usr/lib/libQtCore.so.4
#4  0xb63f050f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#5  0xb6621a0e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 2 (Thread 0xb286ab90 (LWP 21436)):
#0  0xb8006424 in __kernel_vsyscall ()
#1  0xb63f43a2 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb662fc14 in pthread_cond_timedwait () from /lib/tls/i686/cmov/libc.so.6
#3  0xb72586cc in QWaitCondition::wait () from /usr/lib/libQtCore.so.4
#4  0xb724d886 in ?? () from /usr/lib/libQtCore.so.4
#5  0xb72576ae in ?? () from /usr/lib/libQtCore.so.4
#6  0xb63f050f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0xb6621a0e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 1 (Thread 0xb5fedaf0 (LWP 30743)):
[KCrash Handler]
#6  KJS::PropertyMap::get (this=0x4, name=@0x88afe10) at /build/buildd/kde4libs-4.2.0/kjs/property_map.cpp:215
#7  0xb4212e19 in KJS::HTMLDocumentProto::self (exec=0xbff06a60) at /build/buildd/kde4libs-4.2.0/kjs/object.h:439
#8  0xb4212ec5 in HTMLDocument (this=0xb201d8e0, exec=0xbff06a60, d=0x94996e0) at /build/buildd/kde4libs-4.2.0/khtml/ecma/kjs_html.cpp:202
#9  0xb4202c8f in KJS::getDOMNode (exec=0xbff06a60, n=0x94996ec) at /build/buildd/kde4libs-4.2.0/khtml/ecma/kjs_dom.cpp:1760
#10 0xb423b9dd in KJS::Window::getValueProperty (this=0xb2020000, exec=0xbff06a60, token=4) at /build/buildd/kde4libs-4.2.0/khtml/ecma/kjs_window.cpp:734
#11 0xb3e595f4 in KJS::JSObject::get (this=0xb2020000, exec=0xbff06a60, propertyName=@0x8a2c104) at /build/buildd/kde4libs-4.2.0/kjs/property_slot.h:46
#12 0xb3e6ecc5 in KJS::Machine::runBlock (exec=0xbff06a60, codeBlock=@0x85d37a8, parentExec=0x0) at codes.def:673
#13 0xb3e297c0 in KJS::FunctionBodyNode::execute (this=0x9384b00, exec=0xbff06a60) at /build/buildd/kde4libs-4.2.0/kjs/nodes.cpp:927
#14 0xb3e5cb3a in KJS::Interpreter::evaluate (this=0x8887a48, sourceURL=@0xbff06be4, startingLineNumber=1, code=0x9442c08, codeLength=107, thisV=0xb2020040)
    at /build/buildd/kde4libs-4.2.0/kjs/interpreter.cpp:550
#15 0xb3e5ccb7 in KJS::Interpreter::evaluate (this=0x8887a48, sourceURL=@0xbff06be4, startingLineNumber=1, code=@0xbff06be8, thisV=0xb2020040) at /build/buildd/kde4libs-4.2.0/kjs/interpreter.cpp:493
#16 0xb4251179 in KJS::KJSProxyImpl::evaluate (this=0x8cea500, filename=
      {static null = {<No data fields>}, static shared_null = {ref = {_q_value = 11337}, alloc = 0, size = 0, data = 0xb742d9ba, clean = 0, simpletext = 0, righttoleft = 0, asciiCache = 0, capacity = 0, reserved = 0, array = {0}}, static shared_empty = {ref = {_q_value = 176}, alloc = 0, size = 0, data = 0xb742d9ce, clean = 0, simpletext = 0, righttoleft = 0, asciiCache = 0, capacity = 0, reserved = 0, array = {0}}, d = 0xbff06c78, static codecForCStrings = 0x0}, baseLine=1, str=@0xbff06ea8, n=@0xbff06cdc, completion=0xbff06c50) at /build/buildd/kde4libs-4.2.0/khtml/ecma/kjs_proxy.cpp:158
#17 0xb4002fbe in KHTMLPart::executeScript (this=0x92dea60, filename=@0xbff06cf8, baseLine=1, n=@0xbff06cdc, script=@0xbff06ea8) at /build/buildd/kde4libs-4.2.0/khtml/khtml_part.cpp:1303
#18 0xb4097319 in khtml::HTMLTokenizer::scriptExecution (this=0x970b7a8, str=@0xbff06ea8, scriptURL=@0xbff06ea4, baseLine=1) at /build/buildd/kde4libs-4.2.0/khtml/html/htmltokenizer.cpp:498
#19 0xb409c794 in khtml::HTMLTokenizer::scriptHandler (this=0x970b7a8) at /build/buildd/kde4libs-4.2.0/khtml/html/htmltokenizer.cpp:451
#20 0xb409e39d in khtml::HTMLTokenizer::parseSpecial (this=0x970b7a8, src=@0x970bca8) at /build/buildd/kde4libs-4.2.0/khtml/html/htmltokenizer.cpp:367
#21 0xb40a02f7 in khtml::HTMLTokenizer::parseTag (this=0x970b7a8, src=@0x970bca8) at /build/buildd/kde4libs-4.2.0/khtml/html/htmltokenizer.cpp:1548
#22 0xb40a18fe in khtml::HTMLTokenizer::write (this=0x970b7a8, str=@0xbff07208, appendData=true) at /build/buildd/kde4libs-4.2.0/khtml/html/htmltokenizer.cpp:1807
#23 0xb3fdd1e5 in KHTMLPart::write (this=0x92dea60, 
    data=0x9500690 "<html>\n<head><script>\nvar $wnd = parent;\nvar $doc = $wnd.document;\nvar $moduleName = \"com.mot.sps.cms.search.presentation.Serp\";\n</script></head>\n<body>\n<font face='arial' size='-1'>This script is par"..., len=4096) at /build/buildd/kde4libs-4.2.0/khtml/khtml_part.cpp:2070
#24 0xb3fd2bf8 in KHTMLPart::slotRestoreData (this=0x92dea60, data=@0xbff07404) at /build/buildd/kde4libs-4.2.0/khtml/khtml_part.cpp:1778
#25 0xb4000e97 in KHTMLPart::qt_metacall (this=0x92dea60, _c=QMetaObject::InvokeMetaMethod, _id=21, _a=0xbff073cc) at /build/buildd/kde4libs-4.2.0/obj-i486-linux-gnu/khtml/khtml_part.moc:266
#26 0xb735ca60 in QMetaObject::activate () from /usr/lib/libQtCore.so.4
#27 0xb735d7e2 in QMetaObject::activate () from /usr/lib/libQtCore.so.4
#28 0xb402ba43 in KHTMLPageCacheDelivery::emitData (this=0x8f4fed8, _t1=@0xbff07404) at /build/buildd/kde4libs-4.2.0/obj-i486-linux-gnu/khtml/khtml_pagecache.moc:131
#29 0xb402c1ff in KHTMLPageCache::sendData (this=0x83bf118) at /build/buildd/kde4libs-4.2.0/khtml/khtml_pagecache.cpp:250
#30 0xb402cddd in KHTMLPageCache::qt_metacall (this=0x83bf118, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0xbff074b8) at /build/buildd/kde4libs-4.2.0/obj-i486-linux-gnu/khtml/khtml_pagecache.moc:68
#31 0xb735ca60 in QMetaObject::activate () from /usr/lib/libQtCore.so.4
#32 0xb735d7e2 in QMetaObject::activate () from /usr/lib/libQtCore.so.4
#33 0xb7362db7 in ?? () from /usr/lib/libQtCore.so.4
#34 0xb7362edc in ?? () from /usr/lib/libQtCore.so.4
#35 0xb735753f in QObject::event () from /usr/lib/libQtCore.so.4
#36 0xb6a388ec in QApplicationPrivate::notify_helper () from /usr/lib/libQtGui.so.4
#37 0xb6a4072e in QApplication::notify () from /usr/lib/libQtGui.so.4
#38 0xb78c9fed in KApplication::notify (this=0xbff07da8, receiver=0x8f50730, event=0xbff0794c) at /build/buildd/kde4libs-4.2.0/kdeui/kernel/kapplication.cpp:307
#39 0xb7347e61 in QCoreApplication::notifyInternal () from /usr/lib/libQtCore.so.4
#40 0xb7375d81 in ?? () from /usr/lib/libQtCore.so.4
#41 0xb7372520 in ?? () from /usr/lib/libQtCore.so.4
#42 0xb63236f8 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#43 0xb6326da3 in ?? () from /usr/lib/libglib-2.0.so.0
#44 0xb6326f61 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#45 0xb7372478 in QEventDispatcherGlib::processEvents () from /usr/lib/libQtCore.so.4
#46 0xb6ad2ea5 in ?? () from /usr/lib/libQtGui.so.4
#47 0xb734652a in QEventLoop::processEvents () from /usr/lib/libQtCore.so.4
#48 0xb73466ea in QEventLoop::exec () from /usr/lib/libQtCore.so.4
#49 0xb7348da5 in QCoreApplication::exec () from /usr/lib/libQtCore.so.4
#50 0xb6a38767 in QApplication::exec () from /usr/lib/libQtGui.so.4
#51 0xb7fbc655 in kdemain (argc=2, argv=0xbff08124) at /build/buildd/kdebase-4.2.0/apps/konqueror/src/konqmain.cpp:257
#52 0x080486f2 in main (argc=) at /build/buildd/kdebase-4.2.0/obj-i486-linux-gnu/apps/konqueror/src/konqueror_dummy.cpp:3