Bug 222680

Application: konqueror (4.3.90 (KDE 4.3.90 (KDE 4.4 RC1)))
KDE Platform Version: 4.3.90 (KDE 4.3.90 (KDE 4.4 RC1))
Qt Version: 4.6.0
Operating System: Linux 2.6.31-17-generic i686
Distribution: Ubuntu 9.10

-- Information about the crash:
konqueror crashes while clicking on the 'home' button at  facebook

 -- Backtrace:
Application: Konqueror (konqueror), signal: Aborted
[Current thread is 1 (Thread 0xb7739700 (LWP 4497))]

Thread 4 (Thread 0xb621db70 (LWP 4505)):
#0  0x00be7422 in __kernel_vsyscall ()
#1  0x00e96ae3 in inet_nsap_ntoa (binlen=<value optimized out>, binary=0x0, ascii=0x2 <Address 0x2 out of bounds>) at nsap_addr.c:88
#2  0x05135196 in g_free () from /lib/libglib-2.0.so.0
#3  0x0512c871 in ?? () from /lib/libglib-2.0.so.0
#4  0x07d5b6fa in ~QEventDispatcherGlib (this=0x9bc1b58, __in_chrg=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:361
#5  0x07c2cf1a in QThreadPrivate::finish (arg=0x7e448b0) at thread/qthread_unix.cpp:280
#6  0x07c2d3b6 in ~__pthread_cleanup_class (arg=0x7e448b0) at /usr/include/pthread.h:535
#7  QThreadPrivate::start (arg=0x7e448b0) at thread/qthread_unix.cpp:249
#8  0x002ac80e in start_thread (arg=0xb621db70) at pthread_create.c:300
#9  0x00e897ee in vmsplice () from /lib/tls/i686/cmov/libc.so.6
#10 0x00000000 in ?? ()

Thread 3 (Thread 0xb4308b70 (LWP 12315)):
#0  0x00be7422 in __kernel_vsyscall ()
#1  0x002b0e15 in pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_wait.S:122
#2  0x00e9678d in inet_pton4 (src=0xfffffe00 <Address 0xfffffe00 out of bounds>, dst=<value optimized out>) at inet_pton.c:104
#3  0x07233bb7 in WTF::TCMalloc_PageHeap::scavengerThread (this=0x730d1a0) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:2304
#4  0x07233c01 in WTF::TCMalloc_PageHeap::runScavengerThread (context=0x730d1a0) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:1438
#5  0x002ac80e in start_thread (arg=0xb4308b70) at pthread_create.c:300
#6  0x00e897ee in vmsplice () from /lib/tls/i686/cmov/libc.so.6
#7  0x00000000 in ?? ()

Thread 2 (Thread 0xa8b1fb70 (LWP 5729)):
#0  0x00be7422 in __kernel_vsyscall ()
#1  0x00e96ae3 in inet_nsap_ntoa (binlen=<value optimized out>, binary=0x0, ascii=0x2 <Address 0x2 out of bounds>) at nsap_addr.c:88
#2  0x05135196 in g_free () from /lib/libglib-2.0.so.0
#3  0x0512c871 in ?? () from /lib/libglib-2.0.so.0
#4  0x07d5b6fa in ~QEventDispatcherGlib (this=0x152856c8, __in_chrg=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:361
#5  0x07c2cf1a in QThreadPrivate::finish (arg=0xa621b38) at thread/qthread_unix.cpp:280
#6  0x07c2d3b6 in ~__pthread_cleanup_class (arg=0xa621b38) at /usr/include/pthread.h:535
#7  QThreadPrivate::start (arg=0xa621b38) at thread/qthread_unix.cpp:249
#8  0x002ac80e in start_thread (arg=0xa8b1fb70) at pthread_create.c:300
#9  0x00e897ee in vmsplice () from /lib/tls/i686/cmov/libc.so.6
#10 0x00000000 in ?? ()

Thread 1 (Thread 0xb7739700 (LWP 4497)):
[KCrash Handler]
#5  0x00be7422 in __kernel_vsyscall ()
#6  0x00de74d1 in *__GI___sigtimedwait (set=0x6, info=0x6, timeout=0x0) at ../nptl/sysdeps/unix/sysv/linux/../../../../../sysdeps/unix/sysv/linux/sigtimedwait.c:77
#7  0x00dea932 in __clearenv () at setenv.c:333
#8  0x00e1dee5 in _IO_wdoallocbuf (fp=0xbfd8352c) at wgenops.c:419
#9  0x00e27ff1 in top_check () at hooks.c:208
#10 0x00e296f2 in _int_malloc (av=<value optimized out>, bytes=<value optimized out>) at malloc.c:4381
#11 0x00e2c79d in *__GI___libc_realloc (oldmem=0x13800aa0, bytes=14862237) at malloc.c:3726
#12 0x0072a6f1 in operator delete(void*) () from /usr/lib/libstdc++.so.6
#13 0x03b41316 in KJS::VarAccessNode::~VarAccessNode() () from /usr/lib/libkjs.so.4
#14 0x03b0345c in KJS::Node::deref (this=0x13800aa0) at ../../kjs/nodes.cpp:121
#15 0x03b41479 in KJS::DotAccessorNode::~DotAccessorNode() () from /usr/lib/libkjs.so.4
#16 0x03b0345c in KJS::Node::deref (this=0x11f1c5f8) at ../../kjs/nodes.cpp:121
#17 0x03b5e8a1 in ~RefPtr (this=0x11f1c610, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#18 ~BinaryOperatorNode (this=0x11f1c610, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:659
#19 0x03b0345c in KJS::Node::deref (this=0x11f1c610) at ../../kjs/nodes.cpp:121
#20 0x03b5e37b in ~RefPtr (this=0x147d5b98, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#21 ~ForNode (this=0x147d5b98, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:865
#22 0x03b0345c in KJS::Node::deref (this=0x147d5b98) at ../../kjs/nodes.cpp:121
#23 0x03b5de2c in ~RefPtr (this=0x147d5bb8, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#24 ~SourceElementsNode (this=0x147d5bb8, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:1153
#25 0x03b0345c in KJS::Node::deref (this=0x147d5bb8) at ../../kjs/nodes.cpp:121
#26 0x03b5dbe5 in WTF::RefPtr<KJS::SourceElementsNode>::operator= (this=0x10c6fe38, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:128
#27 ~ListRefPtr (this=0x10c6fe38, __in_chrg=<value optimized out>) at ../../kjs/wtf/ListRefPtr.h:44
#28 0x03b5de1d in ~SourceElementsNode (this=0x10c6fe28, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:1153
#29 0x03b0345c in KJS::Node::deref (this=0x10c6fe28) at ../../kjs/nodes.cpp:121
#30 0x03b5ec00 in ~RefPtr (this=0x1635ed08, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#31 ~BlockNode (this=0x1635ed08, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:795
#32 ~FunctionBodyNode (this=0x1635ed08, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:1027
#33 0x03b0345c in KJS::Node::deref (this=0x1635ed08) at ../../kjs/nodes.cpp:121
#34 0x03b2fbb1 in ~RefPtr (this=0xaea5a840, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#35 ~FunctionImp (this=0xaea5a840, __in_chrg=<value optimized out>) at ../../kjs/function.cpp:72
#36 0x03b0194b in KJS::Collector::collect () at ../../kjs/collector.cpp:739
#37 0x03b36f27 in KJS::Interpreter::collect () at ../../kjs/interpreter.cpp:743
#38 0x037dd205 in KJS::KJSProxyImpl::clear (this=0x110cf030) at ../../khtml/ecma/kjs_proxy.cpp:224
#39 0x03566d87 in KHTMLPart::clear (this=0x102249e0) at ../../khtml/khtml_part.cpp:1565
#40 0x0356739e in KHTMLPart::begin (this=0x102249e0, url=..., xOffset=0, yOffset=0) at ../../khtml/khtml_part.cpp:2015
#41 0x03564467 in KHTMLPart::slotData (this=0x102249e0, kio_job=0x147a6208, data=...) at ../../khtml/khtml_part.cpp:1706
#42 0x03588da6 in KHTMLPart::qt_metacall (this=0x102249e0, _c=QMetaObject::InvokeMetaMethod, _id=19, _a=0xbfd84354) at ./khtml_part.moc:277
#43 0x07d3411a in QMetaObject::metacall (object=0x102249e0, cl=4497, idx=33, argv=0xbfd84354) at kernel/qmetaobject.cpp:237
#44 0x07d4289b in QMetaObject::activate (sender=0x147a6208, m=0x58e2d0, local_signal_index=0, argv=0xbfd84354) at kernel/qobject.cpp:3294
#45 0x003dad49 in KIO::TransferJob::data (this=0x147a6208, _t1=0x147a6208, _t2=...) at ./jobclasses.moc:388
#46 0x003ddb8f in KIO::TransferJob::slotData (this=0x147a6208, _data=...) at ../../kio/kio/job.cpp:930
#47 0x003e15a5 in KIO::TransferJob::qt_metacall (this=0x147a6208, _c=QMetaObject::InvokeMetaMethod, _id=48, _a=0xbfd844e8) at ./jobclasses.moc:368
#48 0x07d3411a in QMetaObject::metacall (object=0x147a6208, cl=4497, idx=48, argv=0xbfd844e8) at kernel/qmetaobject.cpp:237
#49 0x07d4289b in QMetaObject::activate (sender=0xed72b48, m=0x590f44, local_signal_index=0, argv=0xbfd844e8) at kernel/qobject.cpp:3294
#50 0x004aca93 in KIO::SlaveInterface::data (this=0xed72b48, _t1=...) at ./slaveinterface.moc:146
#51 0x004afd5f in KIO::SlaveInterface::dispatch (this=0xed72b48, _cmd=100, rawdata=...) at ../../kio/kio/slaveinterface.cpp:163
#52 0x004ace33 in KIO::SlaveInterface::dispatch (this=0xed72b48) at ../../kio/kio/slaveinterface.cpp:91
#53 0x004a01d8 in KIO::Slave::gotInput (this=0xed72b48) at ../../kio/kio/slave.cpp:324
#54 0x004a03e3 in KIO::Slave::qt_metacall (this=0xed72b48, _c=QMetaObject::InvokeMetaMethod, _id=30, _a=0xbfd847cc) at ./slave.moc:82
#55 0x07d3411a in QMetaObject::metacall (object=0xed72b48, cl=4497, idx=30, argv=0xbfd847cc) at kernel/qmetaobject.cpp:237
#56 0x07d4289b in QMetaObject::activate (sender=0xbbcec48, m=0x58d820, local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3294
#57 0x003abec7 in KIO::Connection::readyRead (this=0xbbcec48) at ./connection.moc:92
#58 0x003ae26e in KIO::ConnectionPrivate::dequeue (this=0xa905cf8) at ../../kio/kio/connection.cpp:82
#59 0x003ae39e in KIO::Connection::qt_metacall (this=0xbbcec48, _c=QMetaObject::InvokeMetaMethod, _id=5, _a=0x11dcebd0) at ./connection.moc:79
#60 0x07d3411a in QMetaObject::metacall (object=0xbbcec48, cl=4497, idx=5, argv=0x11dcebd0) at kernel/qmetaobject.cpp:237
#61 0x07d3e856 in QMetaCallEvent::placeMetaCall (this=0x15d8ebc0, object=0xbbcec48) at kernel/qobject.cpp:574
#62 0x07d3f8ae in QObject::event (this=0xbbcec48, e=0x15d8ebc0) at kernel/qobject.cpp:1260
#63 0x02b1d19c in QApplicationPrivate::notify_helper (this=0x9a616b0, receiver=0xbbcec48, e=0x15d8ebc0) at kernel/qapplication.cpp:4242
#64 0x02b23df7 in QApplication::notify (this=0xbfd85234, receiver=0xbbcec48, e=0x15d8ebc0) at kernel/qapplication.cpp:3661
#65 0x010de67a in KApplication::notify (this=0xbfd85234, receiver=0xbbcec48, event=0x15d8ebc0) at ../../kdeui/kernel/kapplication.cpp:302
#66 0x07d2eeab in QCoreApplication::notifyInternal (this=0xbfd85234, receiver=0xbbcec48, event=0x15d8ebc0) at kernel/qcoreapplication.cpp:704
#67 0x07d318e3 in QCoreApplication::sendEvent (receiver=0x0, event_type=0, data=0x9a498d8) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#68 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x9a498d8) at kernel/qcoreapplication.cpp:1345
#69 0x07d31a4d in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1238
#70 0x07d5b0df in QCoreApplication::sendPostedEvents (s=0x9a64360) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#71 postEventSourceDispatch (s=0x9a64360) at kernel/qeventdispatcher_glib.cpp:276
#72 0x0512ce88 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#73 0x05130730 in ?? () from /lib/libglib-2.0.so.0
#74 0x05130863 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#75 0x07d5abd5 in QEventDispatcherGlib::processEvents (this=0x9a49ab0, flags=...) at kernel/qeventdispatcher_glib.cpp:407
#76 0x02bdab75 in QGuiEventDispatcherGlib::processEvents (this=0x9a49ab0, flags=...) at kernel/qguieventdispatcher_glib.cpp:202
#77 0x07d2d4c9 in QEventLoop::processEvents (this=0xbfd85014, flags=) at kernel/qeventloop.cpp:149
#78 0x07d2d91a in QEventLoop::exec (this=0xbfd85014, flags=...) at kernel/qeventloop.cpp:201
#79 0x07d31b0f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#80 0x02b1d237 in QApplication::exec () at kernel/qapplication.cpp:3570
#81 0x0089988e in kdemain (argc=3, argv=0xbfd85564) at ../../../../apps/konqueror/src/konqmain.cpp:271
#82 0x080485cb in main (argc=3, argv=0xbfd85564) at konqueror_dummy.cpp:3

Reported using DrKonqi