Bug 188777

Summary: Crash in Google Groups when signed in
Product: [Applications] konqueror Reporter: Albert Astals Cid <aacid>
Component: generalAssignee: Konqueror Developers <konq-bugs>
Status: RESOLVED WORKSFORME    
Severity: crash CC: andresbajotierra, joao_neto, Ronny.Standtke, sreich, windu.2b
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: unspecified   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Albert Astals Cid 2009-04-04 01:48:59 UTC 
Version:           4.2.2 (KDE 4.2.2) (using 4.2.2 (KDE 4.2.2), Kubuntu packages)
Compiler:          cc
OS:                Linux (x86_64) release 2.6.28-11-generic

Crash when going to http://groups.google.com/group/reviewboard?hl=en and being logged in

Valgrind trace:
==863== Jump to the invalid address stated on the next line                                                                                                                         
==863==    at 0x16C9F0A0: ???                                                                                                                                                       
==863==    by 0x17A2FDC2: khtml::RenderObject::remove() (render_object.h:847)                                                                                                       
==863==    by 0x17A23501: khtml::RenderObject::detach() (render_object.cpp:2365)                                                                                                    
==863==    by 0x17A3F45E: khtml::RenderBox::detach() (render_box.cpp:224)                                                                                                           
==863==    by 0x17A42363: khtml::RenderFlow::detach() (render_flow.cpp:361)                                                                                                         
==863==    by 0x17A35855: khtml::RenderBox::detachRemainingChildren() (render_box.cpp:242)                                                                                          
==863==    by 0x17A421FB: khtml::RenderFlow::detach() (render_flow.cpp:326)                                                                                                         
==863==    by 0x17A421F2: khtml::RenderFlow::detach() (render_flow.cpp:322)                                                                                                         
==863==    by 0x1793781C: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:971)                                                                                                            
==863==    by 0x1793789E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1735)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==  Address 0x16c9f0a0 is 0 bytes inside a block of size 32 free'd                                                                                                             
==863==    at 0x4C260AD: operator delete(void*) (vg_replace_malloc.c:342)                                                                                                           
==863==    by 0x17944043: khtml::Shared<DOM::DOMStringImpl>::deref() (shared.h:41)                                                                                                  
==863==    by 0x17A47557: khtml::RenderText::~RenderText() (render_text.cpp:707)                                                                                                    
==863==    by 0x17A23474: khtml::RenderObject::arenaDelete(khtml::RenderArena*, void*) (render_object.cpp:2381)                                                                     
==863==    by 0x17A23567: khtml::RenderObject::detach() (render_object.cpp:2372)                                                                                                    
==863==    by 0x17A4751B: khtml::RenderText::detach() (render_text.cpp:727)                                                                                                         
==863==    by 0x1793781C: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:971)                                                                                                            
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
vex amd64->IR: unhandled instruction bytes: 0xF0 0xCC 0xE1 0x1A 0x0 0x0                                                                                                             
==863==                                                                                                                                                                             
==863== Invalid read of size 1                                                                                                                                                      
==863==    at 0x16C9F0A0: ???                                                                                                                                                       
==863==    by 0x17A2FDC2: khtml::RenderObject::remove() (render_object.h:847)                                                                                                       
==863==    by 0x17A23501: khtml::RenderObject::detach() (render_object.cpp:2365)                                                                                                    
==863==    by 0x17A3F45E: khtml::RenderBox::detach() (render_box.cpp:224)                                                                                                           
==863==    by 0x17A42363: khtml::RenderFlow::detach() (render_flow.cpp:361)                                                                                                         
==863==    by 0x17A35855: khtml::RenderBox::detachRemainingChildren() (render_box.cpp:242)                                                                                          
==863==    by 0x17A421FB: khtml::RenderFlow::detach() (render_flow.cpp:326)                                                                                                         
==863==    by 0x17A421F2: khtml::RenderFlow::detach() (render_flow.cpp:322)                                                                                                         
==863==    by 0x1793781C: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:971)                                                                                                            
==863==    by 0x1793789E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1735)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==  Address 0x16c9f0a0 is 0 bytes inside a block of size 32 free'd                                                                                                             
==863==    at 0x4C260AD: operator delete(void*) (vg_replace_malloc.c:342)                                                                                                           
==863==    by 0x17944043: khtml::Shared<DOM::DOMStringImpl>::deref() (shared.h:41)                                                                                                  
==863==    by 0x17A47557: khtml::RenderText::~RenderText() (render_text.cpp:707)                                                                                                    
==863==    by 0x17A23474: khtml::RenderObject::arenaDelete(khtml::RenderArena*, void*) (render_object.cpp:2381)                                                                     
==863==    by 0x17A23567: khtml::RenderObject::detach() (render_object.cpp:2372)                                                                                                    
==863==    by 0x17A4751B: khtml::RenderText::detach() (render_text.cpp:727)                                                                                                         
==863==    by 0x1793781C: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:971)                                                                                                            
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==                                                                                                                                                                             
==863== Invalid read of size 1                                                                                                                                                      
==863==    at 0x16C9F0A2: ???                                                                                                                                                       
==863==    by 0x17A2FDC2: khtml::RenderObject::remove() (render_object.h:847)                                                                                                       
==863==    by 0x17A23501: khtml::RenderObject::detach() (render_object.cpp:2365)                                                                                                    
==863==    by 0x17A3F45E: khtml::RenderBox::detach() (render_box.cpp:224)                                                                                                           
==863==    by 0x17A42363: khtml::RenderFlow::detach() (render_flow.cpp:361)                                                                                                         
==863==    by 0x17A35855: khtml::RenderBox::detachRemainingChildren() (render_box.cpp:242)                                                                                          
==863==    by 0x17A421FB: khtml::RenderFlow::detach() (render_flow.cpp:326)                                                                                                         
==863==    by 0x17A421F2: khtml::RenderFlow::detach() (render_flow.cpp:322)                                                                                                         
==863==    by 0x1793781C: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:971)                                                                                                            
==863==    by 0x1793789E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1735)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==  Address 0x16c9f0a0 is 0 bytes inside a block of size 32 free'd                                                                                                             
==863==    at 0x4C260AD: operator delete(void*) (vg_replace_malloc.c:342)                                                                                                           
==863==    by 0x17944043: khtml::Shared<DOM::DOMStringImpl>::deref() (shared.h:41)                                                                                                  
==863==    by 0x17A47557: khtml::RenderText::~RenderText() (render_text.cpp:707)                                                                                                    
==863==    by 0x17A23474: khtml::RenderObject::arenaDelete(khtml::RenderArena*, void*) (render_object.cpp:2381)                                                                     
==863==    by 0x17A23567: khtml::RenderObject::detach() (render_object.cpp:2372)                                                                                                    
==863==    by 0x17A4751B: khtml::RenderText::detach() (render_text.cpp:727)                                                                                                         
==863==    by 0x1793781C: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:971)                                                                                                            
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==                                                                                                                                                                             
==863== Invalid read of size 1                                                                                                                                                      
==863==    at 0x16C9F0A6: ???                                                                                                                                                       
==863==    by 0x17A2FDC2: khtml::RenderObject::remove() (render_object.h:847)                                                                                                       
==863==    by 0x17A23501: khtml::RenderObject::detach() (render_object.cpp:2365)                                                                                                    
==863==    by 0x17A3F45E: khtml::RenderBox::detach() (render_box.cpp:224)                                                                                                           
==863==    by 0x17A42363: khtml::RenderFlow::detach() (render_flow.cpp:361)                                                                                                         
==863==    by 0x17A35855: khtml::RenderBox::detachRemainingChildren() (render_box.cpp:242)                                                                                          
==863==    by 0x17A421FB: khtml::RenderFlow::detach() (render_flow.cpp:326)                                                                                                         
==863==    by 0x17A421F2: khtml::RenderFlow::detach() (render_flow.cpp:322)                                                                                                         
==863==    by 0x1793781C: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:971)                                                                                                            
==863==    by 0x1793789E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1735)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==  Address 0x16c9f0a0 is 0 bytes inside a block of size 32 free'd                                                                                                             
==863==    at 0x4C260AD: operator delete(void*) (vg_replace_malloc.c:342)                                                                                                           
==863==    by 0x17944043: khtml::Shared<DOM::DOMStringImpl>::deref() (shared.h:41)                                                                                                  
==863==    by 0x17A47557: khtml::RenderText::~RenderText() (render_text.cpp:707)                                                                                                    
==863==    by 0x17A23474: khtml::RenderObject::arenaDelete(khtml::RenderArena*, void*) (render_object.cpp:2381)                                                                     
==863==    by 0x17A23567: khtml::RenderObject::detach() (render_object.cpp:2372)                                                                                                    
==863==    by 0x17A4751B: khtml::RenderText::detach() (render_text.cpp:727)                                                                                                         
==863==    by 0x1793781C: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:971)                                                                                                            
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863==    by 0x179479D2: DOM::ElementImpl::detach() (dom_elementimpl.cpp:856)                                                                                                      
==863==    by 0x1793788E: DOM::NodeBaseImpl::detach() (dom_nodeimpl.cpp:1733)                                                                                                       
==863== valgrind: Unrecognised instruction at address 0x16c9f0a8.                                                                                                                   
==863== Your program just tried to execute an instruction that Valgrind                                                                                                             
==863== did not recognise.  There are two possible reasons for this.                                                                                                                
==863== 1. Your program has a bug and erroneously jumped to a non-code                                                                                                              
==863==    location.  If you are running Memcheck and you just saw a                                                                                                                
==863==    warning about a bad jump, it's probably your program's fault.                                                                                                            
==863== 2. The instruction is legitimate but Valgrind doesn't handle it,                                                                                                            
==863==    i.e. it's Valgrind's fault.  If you think this is the case or                                                                                                            
==863==    you are not sure, please let us know and we'll try to fix it.                                                                                                            
==863== Either way, Valgrind will now raise a SIGILL signal which will                                                                                                              
==863== probably kill your program.                                      






GDB backtrace
*************

Thread 1 (Thread 0x7fd0429b4750 (LWP 6081)):
#0  0x0000000001babb40 in ?? ()             
#1  0x00007fd02c972e6c in khtml::RenderBlock::removeChild (this=0x7fd0300067a0, oldChild=0x7fd0300a6410) at /home/kde42/kdelibs/khtml/rendering/render_block.cpp:617
#2  0x00007fd02c997dc3 in khtml::RenderObject::remove (this=0x7fd0300a6410) at /home/kde42/kdelibs/khtml/rendering/render_object.h:847                              
#3  0x00007fd02c98b502 in khtml::RenderObject::detach (this=0x7fd0300a6410) at /home/kde42/kdelibs/khtml/rendering/render_object.cpp:2365                           
#4  0x00007fd02c9a745f in khtml::RenderBox::detach (this=0x7fd0300a6410) at /home/kde42/kdelibs/khtml/rendering/render_box.cpp:224                                  
#5  0x00007fd02c9aa364 in khtml::RenderFlow::detach (this=0x7fd0300a6410) at /home/kde42/kdelibs/khtml/rendering/render_flow.cpp:361                                
#6  0x00007fd02c99d856 in khtml::RenderBox::detachRemainingChildren (this=0x7fd0300067a0) at /home/kde42/kdelibs/khtml/rendering/render_box.cpp:242                 
#7  0x00007fd02c9aa1fc in khtml::RenderFlow::detach (this=0x7fd0300067a0) at /home/kde42/kdelibs/khtml/rendering/render_flow.cpp:326                                
#8  0x00007fd02c9aa1f3 in khtml::RenderFlow::detach (this=0x7fd030006668) at /home/kde42/kdelibs/khtml/rendering/render_flow.cpp:322                                
#9  0x00007fd02c89f81d in DOM::NodeImpl::detach (this=0x1bce6a0) at /home/kde42/kdelibs/khtml/xml/dom_nodeimpl.cpp:971                                              
#10 0x00007fd02c89f89f in DOM::NodeBaseImpl::detach (this=0x1bce6a0) at /home/kde42/kdelibs/khtml/xml/dom_nodeimpl.cpp:1735                                         
#11 0x00007fd02c8af9d3 in DOM::ElementImpl::detach (this=0x1bce6a0) at /home/kde42/kdelibs/khtml/xml/dom_elementimpl.cpp:856                                        
#12 0x00007fd02c89f88f in DOM::NodeBaseImpl::detach (this=0x1bce090) at /home/kde42/kdelibs/khtml/xml/dom_nodeimpl.cpp:1733                                         
#13 0x00007fd02c8af9d3 in DOM::ElementImpl::detach (this=0x1bce090) at /home/kde42/kdelibs/khtml/xml/dom_elementimpl.cpp:856                                        
#14 0x00007fd02c8a684c in DOM::NodeBaseImpl::removeChild (this=0x1bcddb0, oldChild=0x1bce090, exceptioncode=@0x7fff4a9eb6d8) at /home/kde42/kdelibs/khtml/xml/dom_nodeimpl.cpp:1518
#15 0x00007fd02cad20f6 in DOMNodeProtoFunc::callAsFunction (this=0x7fd034191440, exec=0x7fff4a9ed9a0, thisObj=0x7fd034192180, args=@0x7fff4a9ed370)                                
    at /home/kde42/kdelibs/khtml/ecma/kjs_dom.cpp:636                                                                                                                              
#16 0x00007fd02c359554 in KJS::JSObject::call (this=0x7fd034191440, exec=0x7fff4a9ed9a0, thisObj=0x7fd034192180, args=@0x7fff4a9ed370) at /home/kde42/kdelibs/kjs/object.cpp:69    
#17 0x00007fd02c37edf3 in KJS::Machine::runBlock (exec=0x7fff4a9ed9a0, codeBlock=@0x1d16500, parentExec=0x7fff4a9efe80) at codes.def:1192                                          
#18 0x00007fd02c35454a in KJS::FunctionImp::callAsFunction (this=0x7fd0341c17c0, exec=0x7fff4a9efe80, thisObj=0x7fd0341c3c40, args=@0x7fff4a9edc10)                                
    at /home/kde42/kdelibs/kjs/function.cpp:144                                                                                                                                    
#19 0x00007fd02c359554 in KJS::JSObject::call (this=0x7fd0341c17c0, exec=0x7fff4a9efe80, thisObj=0x7fd0341c3c40, args=@0x7fff4a9edc10) at /home/kde42/kdelibs/kjs/object.cpp:69    
#20 0x00007fd02c336f6d in KJS::FunctionProtoFunc::callAsFunction (this=0x7fd0341cf900, exec=0x7fff4a9efe80, thisObj=0x7fd0341c17c0, args=@0x7fff4a9ef850)                          
    at /home/kde42/kdelibs/kjs/function_object.cpp:123                                                                                                                             
#21 0x00007fd02c359554 in KJS::JSObject::call (this=0x7fd0341cf900, exec=0x7fff4a9efe80, thisObj=0x7fd0341c17c0, args=@0x7fff4a9ef850) at /home/kde42/kdelibs/kjs/object.cpp:69    
#22 0x00007fd02c37edf3 in KJS::Machine::runBlock (exec=0x7fff4a9efe80, codeBlock=@0x2239fb0, parentExec=0x7fff4a9f21f0) at codes.def:1192
#23 0x00007fd02c35454a in KJS::FunctionImp::callAsFunction (this=0x7fd0341917c0, exec=0x7fff4a9f21f0, thisObj=0x7fd042810000, args=@0x7fff4a9f1bc0)
    at /home/kde42/kdelibs/kjs/function.cpp:144
#24 0x00007fd02c359554 in KJS::JSObject::call (this=0x7fd0341917c0, exec=0x7fff4a9f21f0, thisObj=0x7fd042810000, args=@0x7fff4a9f1bc0) at /home/kde42/kdelibs/kjs/object.cpp:69
#25 0x00007fd02c37edf3 in KJS::Machine::runBlock (exec=0x7fff4a9f21f0, codeBlock=@0x1f519a0, parentExec=0x7fff4a9f46d0) at codes.def:1192
#26 0x00007fd02c35454a in KJS::FunctionImp::callAsFunction (this=0x7fd0341c1340, exec=0x7fff4a9f46d0, thisObj=0x7fd0341c3c40, args=@0x7fff4a9f2460)
    at /home/kde42/kdelibs/kjs/function.cpp:144
#27 0x00007fd02c359554 in KJS::JSObject::call (this=0x7fd0341c1340, exec=0x7fff4a9f46d0, thisObj=0x7fd0341c3c40, args=@0x7fff4a9f2460) at /home/kde42/kdelibs/kjs/object.cpp:69
#28 0x00007fd02c336f6d in KJS::FunctionProtoFunc::callAsFunction (this=0x7fd0341cf900, exec=0x7fff4a9f46d0, thisObj=0x7fd0341c1340, args=@0x7fff4a9f40a0)
    at /home/kde42/kdelibs/kjs/function_object.cpp:123
#29 0x00007fd02c359554 in KJS::JSObject::call (this=0x7fd0341cf900, exec=0x7fff4a9f46d0, thisObj=0x7fd0341c1340, args=@0x7fff4a9f40a0) at /home/kde42/kdelibs/kjs/object.cpp:69
#30 0x00007fd02c37edf3 in KJS::Machine::runBlock (exec=0x7fff4a9f46d0, codeBlock=@0x2239fb0, parentExec=0x1b70f40) at codes.def:1192
#31 0x00007fd02c35454a in KJS::FunctionImp::callAsFunction (this=0x7fd0341c38c0, exec=0x1b70f40, thisObj=0x7fd042810000, args=@0x1d17018)
    at /home/kde42/kdelibs/kjs/function.cpp:144
---Type <return> to continue, or q <return> to quit---
#32 0x00007fd02c359554 in KJS::JSObject::call (this=0x7fd0341c38c0, exec=0x1b70f40, thisObj=0x7fd042810000, args=@0x1d17018) at /home/kde42/kdelibs/kjs/object.cpp:69
#33 0x00007fd02cb089c4 in KJS::ScheduledAction::execute (this=0x1d17010, window=0x7fd042810000) at /home/kde42/kdelibs/khtml/ecma/kjs_window.cpp:2192
#34 0x00007fd02cb08cc7 in KJS::WindowQObject::timerEvent (this=0x1bc1710) at /home/kde42/kdelibs/khtml/ecma/kjs_window.cpp:2368
#35 0x00007fd03fefd0f5 in QObject::event (this=0x1bc1710, e=0x7fd0300a6410) at kernel/qobject.cpp:1111
#36 0x00007fd03f1e5c0f in QApplicationPrivate::notify_helper (this=0x15d69f0, receiver=0x1bc1710, e=0x7fff4a9f5080) at kernel/qapplication.cpp:3803
#37 0x00007fd03f1e7dc5 in QApplication::notify (this=0x7fff4a9f54f0, receiver=0x1bc1710, e=0x7fff4a9f5080) at kernel/qapplication.cpp:3768
#38 0x00007fd040d4efa4 in KApplication::notify (this=0x7fff4a9f54f0, receiver=0x1bc1710, event=0x7fff4a9f5080) at /home/kde42/kdelibs/kdeui/kernel/kapplication.cpp:307
#39 0x00007fd03feee5f9 in QCoreApplication::notifyInternal (this=0x7fff4a9f54f0, receiver=0x1bc1710, event=0x7fff4a9f5080) at kernel/qcoreapplication.cpp:587
#40 0x00007fd03ff1988c in QTimerInfoList::activateTimers (this=0x15da760) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:209
#41 0x00007fd03ff173fd in timerSourceDispatch (source=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:160
#42 0x00007fd03baa50ca in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#43 0x00007fd03baa87a0 in ?? () from /usr/lib/libglib-2.0.so.0
#44 0x00007fd03baa893c in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#45 0x00007fd03ff1785f in QEventDispatcherGlib::processEvents (this=0x15d6bd0, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:319
#46 0x00007fd03f26e8cf in QGuiEventDispatcherGlib::processEvents (this=0x7fd0300a62d0, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:198
#47 0x00007fd03feeda75 in QEventLoop::processEvents (this=<value optimized out>, flags=@0x7fff4a9f52f0) at kernel/qeventloop.cpp:143
#48 0x00007fd03feedbcb in QEventLoop::exec (this=0x7fff4a9f5330, flags=@0x7fff4a9f5340) at kernel/qeventloop.cpp:194
#49 0x00007fd03feefc19 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:845
#50 0x00007fd042591f24 in kdemain (argc=2, argv=0x7fff4a9f5f68) at /home/kde42/kdebase/apps/konqueror/src/konqmain.cpp:257
#51 0x0000000000400883 in main (argc=2, argv=0x7fff4a9f5f68) at /home/kde42/build-cmake/kdebase/apps/konqueror/src/konqueror_dummy.cpp:3

This is KDE 4.2 branch from today
Comment 1 Dario Andres 2009-04-04 14:43:46 UTC 
This looks related to bug 187938 comment 3.
Comment 2 Kevin Kofler 2009-04-25 05:52:04 UTC 
*** Bug 190091 has been marked as a duplicate of this bug. ***
Comment 3 Ronny Standtke 2009-06-16 22:24:54 UTC 
I am using Kubuntu 9.04 with KDE-4.2.2. I just clicked on the following link in KMail (configured to open http links in konqueror):
http://groups.google.com/group/lernstick?hl=de

The result was that konqueror crashed with the following backtrace (similar to the one above):

Anwendung: Konqueror (konqueror), Signal SIGSEGV
[Current thread is 0 (LWP 4723)]

Thread 2 (Thread 0xb3debb90 (LWP 4730)):
#0  0xb7fb2430 in __kernel_vsyscall ()
#1  0xb6283412 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb64ca344 in __pthread_cond_timedwait (cond=0x9662120, mutex=0x9662108, abstime=0xb3deb2ac) at forward.c:152
#3  0xb71e398c in QWaitCondition::wait (this=0x9662070, mutex=0x966206c, time=30000) at thread/qwaitcondition_unix.cpp:85
#4  0xb71d8e76 in QThreadPoolThread::run (this=0x965b540) at concurrent/qthreadpool.cpp:140
#5  0xb71e296e in QThreadPrivate::start (arg=0x965b540) at thread/qthread_unix.cpp:189
#6  0xb627f4ff in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0xb64bb49e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 1 (Thread 0xb5e45b50 (LWP 4723)):
[KCrash Handler]
#6  0x0964be3d in ?? ()
#7  0xb25bb9f5 in khtml::RenderObject::detach (this=0x964) at /build/buildd/kde4libs-4.2.2/khtml/rendering/render_object.h:847
#8  0xb25c7fcb in khtml::RenderBox::detach (this=0x99ddd6c) at /build/buildd/kde4libs-4.2.2/khtml/rendering/render_box.cpp:224
#9  0xb25d06e0 in khtml::RenderFlow::detach (this=0x99ddd6c) at /build/buildd/kde4libs-4.2.2/khtml/rendering/render_flow.cpp:361
#10 0xb25c5f92 in khtml::RenderBox::detachRemainingChildren (this=0x99ddb18) at /build/buildd/kde4libs-4.2.2/khtml/rendering/render_box.cpp:242
#11 0xb25d067e in khtml::RenderFlow::detach (this=0x99ddb18) at /build/buildd/kde4libs-4.2.2/khtml/rendering/render_flow.cpp:326
#12 0xb25d0676 in khtml::RenderFlow::detach (this=0x99dda50) at /build/buildd/kde4libs-4.2.2/khtml/rendering/render_flow.cpp:322
#13 0xb24ff8cc in DOM::NodeImpl::detach (this=0x9644f90) at /build/buildd/kde4libs-4.2.2/khtml/xml/dom_nodeimpl.cpp:971
#14 0xb250c9ab in DOM::ElementImpl::detach (this=0x9644f90) at /build/buildd/kde4libs-4.2.2/khtml/xml/dom_elementimpl.cpp:856
#15 0xb25000b8 in DOM::NodeBaseImpl::detach (this=0x9724028) at /build/buildd/kde4libs-4.2.2/khtml/xml/dom_nodeimpl.cpp:1733
#16 0xb250c9ab in DOM::ElementImpl::detach (this=0x9724028) at /build/buildd/kde4libs-4.2.2/khtml/xml/dom_elementimpl.cpp:856
#17 0xb25047bb in DOM::NodeBaseImpl::removeChild (this=0x989efe0, oldChild=0x9724028, exceptioncode=@0xbffcd4c8) at /build/buildd/kde4libs-4.2.2/khtml/xml/dom_nodeimpl.cpp:1518
#18 0xb26b2d4f in DOMNodeProtoFunc::callAsFunction (this=0xb0ea98a0, exec=0xbffcdbdc, thisObj=0xb0ea9200, args=@0xbffcdb64) at /build/buildd/kde4libs-4.2.2/khtml/ecma/kjs_dom.cpp:636
#19 0xb23355cd in KJS::JSObject::call (this=0x99ddb18, exec=0xbffcdbdc, thisObj=0xb0ea9200, args=@0xbffcdb64) at /build/buildd/kde4libs-4.2.2/kjs/object.cpp:69
#20 0xb2351f0b in KJS::Machine::runBlock (exec=0xbffcdbdc, codeBlock=@0x99ddca4, parentExec=0xbffce40c) at codes.def:1192
#21 0xb2331823 in KJS::FunctionImp::callAsFunction (this=0xb0ea8e00, exec=0xbffce40c, thisObj=0xb0ea8da0, args=@0xbffcdd20) at /build/buildd/kde4libs-4.2.2/kjs/function.cpp:144
#22 0xb23355cd in KJS::JSObject::call (this=0x99ddb18, exec=0xbffce40c, thisObj=0xb0ea8da0, args=@0xbffcdd20) at /build/buildd/kde4libs-4.2.2/kjs/object.cpp:69
#23 0xb2315a34 in KJS::FunctionProtoFunc::callAsFunction (this=0xb0ea0040, exec=0xbffce40c, thisObj=0xb0ea8e00, args=@0xbffce394) at /build/buildd/kde4libs-4.2.2/kjs/function_object.cpp:123
#24 0xb23355cd in KJS::JSObject::call (this=0x99ddb18, exec=0xbffce40c, thisObj=0xb0ea8e00, args=@0xbffce394) at /build/buildd/kde4libs-4.2.2/kjs/object.cpp:69
#25 0xb2351f0b in KJS::Machine::runBlock (exec=0xbffce40c, codeBlock=@0x99ddca4, parentExec=0xbffcec3c) at codes.def:1192
#26 0xb2331823 in KJS::FunctionImp::callAsFunction (this=0xb0ea96e0, exec=0xbffcec3c, thisObj=0xb0eb0000, args=@0xbffce550) at /build/buildd/kde4libs-4.2.2/kjs/function.cpp:144
#27 0xb23355cd in KJS::JSObject::call (this=0x99ddb18, exec=0xbffcec3c, thisObj=0xb0eb0000, args=@0xbffce550) at /build/buildd/kde4libs-4.2.2/kjs/object.cpp:69
#28 0xb2315a34 in KJS::FunctionProtoFunc::callAsFunction (this=0xb0ea0040, exec=0xbffcec3c, thisObj=0xb0ea96e0, args=@0xbffcebc4) at /build/buildd/kde4libs-4.2.2/kjs/function_object.cpp:123
#29 0xb23355cd in KJS::JSObject::call (this=0x99ddb18, exec=0xbffcec3c, thisObj=0xb0ea96e0, args=@0xbffcebc4) at /build/buildd/kde4libs-4.2.2/kjs/object.cpp:69
#30 0xb2351f0b in KJS::Machine::runBlock (exec=0xbffcec3c, codeBlock=@0x99ddca4, parentExec=0xbffcf46c) at codes.def:1192
#31 0xb2331823 in KJS::FunctionImp::callAsFunction (this=0xb0ea2260, exec=0xbffcf46c, thisObj=0xb0eb0000, args=@0xbffced80) at /build/buildd/kde4libs-4.2.2/kjs/function.cpp:144
#32 0xb23355cd in KJS::JSObject::call (this=0x99ddb18, exec=0xbffcf46c, thisObj=0xb0eb0000, args=@0xbffced80) at /build/buildd/kde4libs-4.2.2/kjs/object.cpp:69
#33 0xb2315a34 in KJS::FunctionProtoFunc::callAsFunction (this=0xb0ea0040, exec=0xbffcf46c, thisObj=0xb0ea2260, args=@0xbffcf3f4) at /build/buildd/kde4libs-4.2.2/kjs/function_object.cpp:123
#34 0xb23355cd in KJS::JSObject::call (this=0x99ddb18, exec=0xbffcf46c, thisObj=0xb0ea2260, args=@0xbffcf3f4) at /build/buildd/kde4libs-4.2.2/kjs/object.cpp:69
#35 0xb2351f0b in KJS::Machine::runBlock (exec=0xbffcf46c, codeBlock=@0x99ddca4, parentExec=0x970d3c8) at codes.def:1192
#36 0xb2331823 in KJS::FunctionImp::callAsFunction (this=0xb0ea9ba0, exec=0x970d3c8, thisObj=0xb0eb0000, args=@0xbffcf5b8) at /build/buildd/kde4libs-4.2.2/kjs/function.cpp:144
#37 0xb23355cd in KJS::JSObject::call (this=0x99ddb18, exec=0x970d3c8, thisObj=0xb0eb0000, args=@0xbffcf5b8) at /build/buildd/kde4libs-4.2.2/kjs/object.cpp:69
#38 0xb271649d in KJS::JSEventListener::handleEvent (this=0x97f5610, evt=@0xbffcf5f0) at /build/buildd/kde4libs-4.2.2/khtml/ecma/kjs_events.cpp:106
#39 0xb24ec3cd in DOM::DocumentImpl::defaultEventHandler (this=0x964be18, evt=0x970a820) at /build/buildd/kde4libs-4.2.2/khtml/xml/dom_docimpl.cpp:2745
#40 0xb250527f in DOM::NodeImpl::dispatchWindowEvent (this=0x9829760, _id=26, canBubbleArg=<value optimized out>, cancelableArg=<value optimized out>)
    at /build/buildd/kde4libs-4.2.2/khtml/xml/dom_nodeimpl.cpp:566
#41 0xb2580616 in DOM::HTMLPartContainerElementImpl::event (this=0x9829758, e=0x981a8c0) at /build/buildd/kde4libs-4.2.2/khtml/html/html_objectimpl.cpp:151
#42 0xb68dee9c in QApplicationPrivate::notify_helper (this=0x907b280, receiver=0x9829758, e=0x981a8c0) at kernel/qapplication.cpp:4084
#43 0xb68e719e in QApplication::notify (this=0xbffcfe28, receiver=0x9829758, e=0x981a8c0) at kernel/qapplication.cpp:3631
#44 0xb787a94d in KApplication::notify (this=0xbffcfe28, receiver=0x9829758, event=0x981a8c0) at /build/buildd/kde4libs-4.2.2/kdeui/kernel/kapplication.cpp:307
#45 0xb72d6a3b in QCoreApplication::notifyInternal (this=0xbffcfe28, receiver=0x9829758, event=0x981a8c0) at kernel/qcoreapplication.cpp:602
#46 0xb72d7695 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x9062b38) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:213
#47 0xb72d788d in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1132
#48 0xb73027ef in postEventSourceDispatch (s=0x907d510) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:218
#49 0xb61aeb88 in IA__g_main_context_dispatch (context=0x907d490) at /build/buildd/glib2.0-2.20.1/glib/gmain.c:1814
#50 0xb61b20eb in g_main_context_iterate (context=0x907d490, block=1, dispatch=1, self=0x907b0a0) at /build/buildd/glib2.0-2.20.1/glib/gmain.c:2448
#51 0xb61b2268 in IA__g_main_context_iteration (context=0x907d490, may_block=1) at /build/buildd/glib2.0-2.20.1/glib/gmain.c:2511
#52 0xb7302438 in QEventDispatcherGlib::processEvents (this=0x90687c0, flags={i = -1073939624}) at kernel/qeventdispatcher_glib.cpp:323
#53 0xb6980365 in QGuiEventDispatcherGlib::processEvents (this=0x90687c0, flags={i = -1073939576}) at kernel/qguieventdispatcher_glib.cpp:202
#54 0xb72d506a in QEventLoop::processEvents (this=0xbffcfc00, flags={i = -1073939512}) at kernel/qeventloop.cpp:149
#55 0xb72d54aa in QEventLoop::exec (this=0xbffcfc00, flags={i = -1073939448}) at kernel/qeventloop.cpp:200
#56 0xb72d7959 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:880
#57 0xb68ded17 in QApplication::exec () at kernel/qapplication.cpp:3553
#58 0xb7f8200f in kdemain (argc=4, argv=0xbffd01a4) at /build/buildd/kdebase-4.2.2/apps/konqueror/src/konqmain.cpp:257
#59 0x080486f2 in main (argc=-1298636056, argv=0x99e0fa0) at /build/buildd/kdebase-4.2.2/obj-i486-linux-gnu/apps/konqueror/src/konqueror_dummy.cpp:3
Comment 4 Tommi Tervo 2010-08-17 07:32:09 UTC 
*** Bug 188370 has been marked as a duplicate of this bug. ***
Comment 5 Tommi Tervo 2010-08-17 07:32:21 UTC 
*** Bug 189354 has been marked as a duplicate of this bug. ***
Comment 6 Tommi Tervo 2010-08-17 07:34:11 UTC 
This bug should be fixed, can anyone of you reproduce this crash?
https://bugs.kde.org/show_bug.cgi?id=187938
Comment 7 Albert Astals Cid 2013-08-01 22:42:29 UTC 
Doesn't crash for me anymore