Bug 209812

Summary: Konqueror/KJS crash on exit after ajax input field problems
Product: [Applications] konqueror Reporter: Unknown <null>
Component: kjsAssignee: Konqueror Developers <konq-bugs>
Status: RESOLVED WORKSFORME    
Severity: crash CC: andresbajotierra, Regnaron
Priority: NOR    
Version: 4.3.1   
Target Milestone: ---   
Platform: Unlisted Binaries   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Unknown 2009-10-07 23:27:18 UTC 
Application that crashed: konqueror
Version of the application: 4.3.1 (KDE 4.3.1)
KDE Version: 4.3.1 (KDE 4.3.1)
Qt Version: 4.5.2
Operating System: Linux 2.6.30.8-64.fc11.x86_64 x86_64

What I was doing when the application crashed:
Konqueror/KJS crashes on exit when doing the following:

1) konqueror http://www.dd-wrt.com/site/support/router-database
2) Type "WBR2-G%" (without the quotes) into the search field
3) Try to delete the % with a backspace, note that the whole text field has become "stuck", backspace does nothing, can't select with mouse etc
4) Close konqueror from "X" in top-right corner, acknowledge the "data modified but not submitted" warning
5) Crash

 -- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
[KCrash Handler]
#5  0x00000037eea74eed in KJS::JSValue::marked (this=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/kjs/collector.h:133
#6  KJS::JSVariableObject::mark (this=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/kjs/JSVariableObject.cpp:84
#7  0x00000037eea352ef in KJS::Collector::markStackObjectsConservatively (start=<value optimized out>, end=0x7fff1e3f9000) at /usr/src/debug/kdelibs-4.3.1/kjs/collector.cpp:473
#8  0x00000037eea35a55 in KJS::Collector::markCurrentThreadConservatively () at /usr/src/debug/kdelibs-4.3.1/kjs/collector.cpp:553
#9  0x00000037eea35ad3 in KJS::Collector::collect () at /usr/src/debug/kdelibs-4.3.1/kjs/collector.cpp:687
#10 0x0000003dfaa45175 in KJS::KJSProxyImpl::~KJSProxyImpl (this=0x1454a10, __in_chrg=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/ecma/kjs_proxy.cpp:114
#11 0x0000003dfa814c57 in khtml::ChildFrame::~ChildFrame (this=0x157b520, __in_chrg=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/khtmlpart_p.h:99
#12 0x0000003dfa806527 in KHTMLPart::~KHTMLPart (this=0x13d70d0, __in_chrg=<value optimized out>, __vtt_parm=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/khtml_part.cpp:622
#13 0x00000037e8048f8f in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#14 0x00000037e804e095 in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#15 0x00000037e80a3f7f in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#16 0x00000037e80a45f8 in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#17 0x00000037e68e2051 in KMainWindow::closeEvent (this=0x1135490, e=0x7fff1e3eef20) at /usr/src/debug/kdelibs-4.3.1/kdeui/widgets/kmainwindow.cpp:598
#18 0x00000037e80963da in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#19 0x00000037e5bdd718 in QWidget::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#20 0x00000037e5f4ff6b in QMainWindow::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#21 0x00000037e691c803 in KXmlGuiWindow::event (this=0x0, ev=0x1) at /usr/src/debug/kdelibs-4.3.1/kdeui/xmlgui/kxmlguiwindow.cpp:131
#22 0x00000037e80a452c in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#23 0x00000037e5b8f69c in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#24 0x00000037e5b968fe in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#25 0x00000037e6811b56 in KApplication::notify (this=0x7fff1e3f7320, receiver=0x1135490, event=0x7fff1e3eef20) at /usr/src/debug/kdelibs-4.3.1/kdeui/kernel/kapplication.cpp:302
#26 0x00000037e3f3f59c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
#27 0x00000037e5be2ad1 in QWidgetPrivate::close_helper(QWidgetPrivate::CloseMode) () from /usr/lib64/libQtGui.so.4
#28 0x00000037e5be9f26 in QApplication::x11ClientMessage(QWidget*, _XEvent*, bool) () from /usr/lib64/libQtGui.so.4
#29 0x00000037e5bfa5d4 in QApplication::x11ProcessEvent(_XEvent*) () from /usr/lib64/libQtGui.so.4
#30 0x00000037e5c227dc in ?? () from /usr/lib64/libQtGui.so.4
#31 0x00000037e2e3790e in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#32 0x00000037e2e3b0e8 in ?? () from /lib64/libglib-2.0.so.0
#33 0x00000037e2e3b20a in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#34 0x00000037e3f67936 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#35 0x00000037e5c21f8e in ?? () from /usr/lib64/libQtGui.so.4
#36 0x00000037e3f3ded2 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#37 0x00000037e3f3e2a4 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#38 0x00000037e7784dec in KIO::NetAccess::enter_loop (this=0x7fff1e3f0bd0) at /usr/src/debug/kdelibs-4.3.1/kio/kio/netaccess.cpp:502
#39 0x00000037e778543f in KIO::NetAccess::synchronousRunInternal (this=0x7fff1e3f0bd0, job=0x13c8df0, window=<value optimized out>, data=0x7fff1e3f0e00, finalURL=0x7fff1e3f0d40, 
    metaData=0x7fff1e3f0de0) at /usr/src/debug/kdelibs-4.3.1/kio/kio/netaccess.cpp:487
#40 0x00000037e7785ac1 in KIO::NetAccess::synchronousRun (job=0x13c8df0, window=0x0, data=0x7fff1e3f0e00, finalURL=0x7fff1e3f0d40, metaData=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kio/kio/netaccess.cpp:277
#41 0x0000003dfaa6bad2 in KJS::XMLHttpRequest::send (this=0x7f8bc8870280, _body=<value optimized out>, ec=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/ecma/xmlhttprequest.cpp:481
#42 0x0000003dfaa6c56f in KJS::XMLHttpRequestProtoFunc::callAsFunction (this=<value optimized out>, exec=0x7fff1e3f19e0, thisObj=0x7f8bc8870280, args=@0x7fff1e3f10a0)
    at /usr/src/debug/kdelibs-4.3.1/khtml/ecma/xmlhttprequest.cpp:868
#43 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#44 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f19e0, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#45 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc87db540, exec=0x7fff1e3f23d0, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#46 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#47 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f23d0, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#48 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc885f840, exec=0x7fff1e3f2dc0, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#49 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#50 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f2dc0, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#51 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc885eac0, exec=0x7fff1e3f3880, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#52 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#53 0x00000037eea479d5 in KJS::FunctionProtoFunc::callAsFunction (this=<value optimized out>, exec=0x7fff1e3f3880, thisObj=0x7f8bc885eac0, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function_object.cpp:123
#54 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#55 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f3880, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#56 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc8833fc0, exec=0x7fff1e3f4340, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#57 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#58 0x00000037eea479d5 in KJS::FunctionProtoFunc::callAsFunction (this=<value optimized out>, exec=0x7fff1e3f4340, thisObj=0x7f8bc8833fc0, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function_object.cpp:123
#59 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#60 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f4340, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#61 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc885e8c0, exec=0x15805c0, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#62 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#63 0x0000003dfaa5e141 in KJS::JSEventListener::handleEvent (this=0x19c6a70, evt=@0x7fff1e3f45d0) at /usr/src/debug/kdelibs-4.3.1/khtml/ecma/kjs_events.cpp:106
#64 0x0000003dfa85e48c in DOM::NodeImpl::handleLocalEvents (this=<value optimized out>, evt=<value optimized out>, useCapture=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/khtml/xml/dom_nodeimpl.cpp:718
#65 0x0000003dfa85e941 in DOM::NodeImpl::dispatchGenericEvent (this=0x17e8400, evt=0x19bf2a0) at /usr/src/debug/kdelibs-4.3.1/khtml/xml/dom_nodeimpl.cpp:501
#66 0x0000003dfa85e9ce in DOM::NodeImpl::dispatchEvent (this=0x17e8400, evt=0x19bf2a0, exceptioncode=@0x7fff1e3f46dc, tempEvent=true) at /usr/src/debug/kdelibs-4.3.1/khtml/xml/dom_nodeimpl.cpp:453
#67 0x0000003dfa85f2c2 in DOM::NodeImpl::dispatchKeyEvent (this=<value optimized out>, key=0x7fff1e3f5020, keypress=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/khtml/xml/dom_nodeimpl.cpp:694
#68 0x0000003dfa7c6145 in KHTMLView::dispatchKeyEvent (this=0x1416fd0, _ke=0x7fff1e3f5020) at /usr/src/debug/kdelibs-4.3.1/khtml/khtmlview.cpp:1650
#69 0x0000003dfa7cd920 in KHTMLView::keyReleaseEvent (this=0x1416fd0, _ke=0x7fff1e3f5020) at /usr/src/debug/kdelibs-4.3.1/khtml/khtmlview.cpp:1987
#70 0x00000037e5bddd54 in QWidget::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#71 0x00000037e5f35916 in QFrame::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#72 0x00000037e5fc4bf1 in QAbstractScrollArea::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#73 0x0000003dfa7cd033 in KHTMLView::event (this=0x1416fd0, e=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/khtmlview.cpp:546
#74 0x00000037e5b8f69c in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#75 0x00000037e5b97413 in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#76 0x00000037e6811b56 in KApplication::notify (this=0x7fff1e3f7320, receiver=0x17e90b0, event=0x7fff1e3f5020) at /usr/src/debug/kdelibs-4.3.1/kdeui/kernel/kapplication.cpp:302
#77 0x00000037e3f3f59c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
#78 0x00000037e5c1e8ba in ?? () from /usr/lib64/libQtGui.so.4
#79 0x00000037e5c20e50 in ?? () from /usr/lib64/libQtGui.so.4
#80 0x00000037e5bfa4e4 in QApplication::x11ProcessEvent(_XEvent*) () from /usr/lib64/libQtGui.so.4
#81 0x00000037e5c227dc in ?? () from /usr/lib64/libQtGui.so.4
#82 0x00000037e2e3790e in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#83 0x00000037e2e3b0e8 in ?? () from /lib64/libglib-2.0.so.0
#84 0x00000037e2e3b20a in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#85 0x00000037e3f67936 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#86 0x00000037e5c21f8e in ?? () from /usr/lib64/libQtGui.so.4
#87 0x00000037e3f3ded2 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#88 0x00000037e3f3e2a4 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#89 0x00000037e3f40439 in QCoreApplication::exec() () from /usr/lib64/libQtCore.so.4
#90 0x00000037e80cf4e3 in kdemain () from /usr/lib64/libkdeinit4_konqueror.so
#91 0x0000003fdda1ea2d in __libc_start_main () from /lib64/libc.so.6
#92 0x0000000000400759 in _start ()

Reported using DrKonqi
Comment 1 Dario Andres 2009-10-09 03:02:00 UTC 
Backtrace looks related to bug 201117 / bug 198622.
Thanks
Comment 2 Andrew Crouthamel 2018-10-29 22:37:11 UTC 
Dear Bug Submitter,

This bug has been stagnant for a long time. Could you help us out and re-test if the bug is valid in the latest version? I am setting the status to NEEDSINFO pending your response, please change the Status back to REPORTED when you respond.

Thank you for helping us make KDE software even better for everyone!
Comment 3 Bug Janitor Service 2018-11-13 14:21:35 UTC 
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 4 Bug Janitor Service 2018-11-28 04:50:05 UTC 
This bug has been in NEEDSINFO status with no change for at least
30 days. The bug is now closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

Thank you for helping us make KDE software even better for everyone!