Bug 233593

Application: rekonq (0.4.0)
KDE Platform Version: 4.4.2 (KDE 4.4.2)
Qt Version: 4.6.2
Operating System: Linux 2.6.32-19-generic-pae i686
Distribution: Ubuntu lucid (development branch)

-- Information about the crash:
When installing Flash 10.1 RC, Reqonq will crash every time a flash-containing website is visited. This happens in both modes: Manual and automatic loading of plugins.


The crash can be reproduced every time.

 -- Backtrace:
Application: rekonq (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0xb56c3aa0 (LWP 1896))]

Thread 7 (Thread 0xb22c0b70 (LWP 1900)):
#0  0xb78bd430 in __kernel_vsyscall ()
#1  0xb6c29015 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb44df9d7 in WTF::TCMalloc_PageHeap::scavengerThread (this=0xb5288da0) at ../JavaScriptCore/wtf/FastMalloc.cpp:2299
#3  0xb44dfa21 in WTF::TCMalloc_PageHeap::runScavengerThread (context=0xb5288da0) at ../JavaScriptCore/wtf/FastMalloc.cpp:1433
#4  0xb6c2496e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#5  0xb601f9de in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 6 (Thread 0xb13abb70 (LWP 1901)):
#0  0xb78bd430 in __kernel_vsyscall ()
#1  0xb6c29015 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb6cb2287 in QWaitConditionPrivate::wait (this=0x8629d48, mutex=0x848d590, time=4294967295) at thread/qwaitcondition_unix.cpp:87
#3  QWaitCondition::wait (this=0x8629d48, mutex=0x848d590, time=4294967295) at thread/qwaitcondition_unix.cpp:159
#4  0xb44e5670 in WTF::ThreadCondition::wait (this=0xb1a07dd4, mutex=...) at ../JavaScriptCore/wtf/qt/ThreadingQt.cpp:238
#5  0xb4a1a924 in WebCore::IconDatabase::syncThreadMainLoop (this=0xb1a07d80) at loader/icon/IconDatabase.cpp:1412
#6  0xb4a1aac0 in WebCore::IconDatabase::iconDatabaseSyncThread (this=0xb1a07d80) at loader/icon/IconDatabase.cpp:1038
#7  0xb44e513f in threadEntryPoint (contextData=0xb19c5170) at ../JavaScriptCore/wtf/Threading.cpp:64
#8  0xb44e5543 in WTF::ThreadPrivate::run (this=0x87f8fd8) at ../JavaScriptCore/wtf/qt/ThreadingQt.cpp:64
#9  0xb6cb132e in QThreadPrivate::start (arg=0x87f8fd8) at thread/qthread_unix.cpp:248
#10 0xb6c2496e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#11 0xb601f9de in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 5 (Thread 0xb09ffb70 (LWP 1903)):
#0  0xb5af8e16 in clock_gettime () from /lib/tls/i686/cmov/librt.so.1
#1  0xb6ddc6fb in qt_gettime () at kernel/qcore_unix.cpp:111
#2  0xb6de1825 in QTimerInfoList::updateCurrentTime (this=0x81929c4) at kernel/qeventdispatcher_unix.cpp:340
#3  0xb6de186a in QTimerInfoList::timerWait (this=0x81929c4, tm=...) at kernel/qeventdispatcher_unix.cpp:443
#4  0xb6ddf818 in timerSourcePrepareHelper (src=<value optimized out>, timeout=0xb09ff0cc) at kernel/qeventdispatcher_glib.cpp:136
#5  0xb6ddf8a5 in timerSourcePrepare (source=0x0, timeout=0xb5afcff4) at kernel/qeventdispatcher_glib.cpp:169
#6  0xb5a69aca in g_main_context_prepare () from /lib/libglib-2.0.so.0
#7  0xb5a69ee9 in ?? () from /lib/libglib-2.0.so.0
#8  0xb5a6a4b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#9  0xb6ddf60f in QEventDispatcherGlib::processEvents (this=0x85f9410, flags=...) at kernel/qeventdispatcher_glib.cpp:414
#10 0xb6db2059 in QEventLoop::processEvents (this=0xb09ff290, flags=) at kernel/qeventloop.cpp:149
#11 0xb6db24aa in QEventLoop::exec (this=0xb09ff290, flags=...) at kernel/qeventloop.cpp:201
#12 0xb6cae5a8 in QThread::exec (this=0x87fb4f0) at thread/qthread.cpp:487
#13 0xb6d91c1b in QInotifyFileSystemWatcherEngine::run (this=0x87fb4f0) at io/qfilesystemwatcher_inotify.cpp:248
#14 0xb6cb132e in QThreadPrivate::start (arg=0x87fb4f0) at thread/qthread_unix.cpp:248
#15 0xb6c2496e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#16 0xb601f9de in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 4 (Thread 0xaefbbb70 (LWP 1904)):
#0  0xb78bd430 in __kernel_vsyscall ()
#1  0xb6c29342 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb6cb220f in QWaitConditionPrivate::wait (this=0x87f835c, mutex=0x87f8358, time=30000) at thread/qwaitcondition_unix.cpp:85
#3  QWaitCondition::wait (this=0x87f835c, mutex=0x87f8358, time=30000) at thread/qwaitcondition_unix.cpp:159
#4  0xb6ca62eb in QThreadPoolThread::run (this=0x87e9c80) at concurrent/qthreadpool.cpp:140
#5  0xb6cb132e in QThreadPrivate::start (arg=0x87e9c80) at thread/qthread_unix.cpp:248
#6  0xb6c2496e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0xb601f9de in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 3 (Thread 0xae13fb70 (LWP 1908)):
#0  0xb78bd430 in __kernel_vsyscall ()
#1  0xb6c29015 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb6cb2287 in QWaitConditionPrivate::wait (this=0x81b2288, mutex=0x81b92b8, time=4294967295) at thread/qwaitcondition_unix.cpp:87
#3  QWaitCondition::wait (this=0x81b2288, mutex=0x81b92b8, time=4294967295) at thread/qwaitcondition_unix.cpp:159
#4  0xb4241870 in ThreadWeaver::WeaverImpl::blockThreadUntilJobsAreBeingAssigned (this=0x81b2270, th=0x8685648) at ../../../threadweaver/Weaver/WeaverImpl.cpp:365
#5  0xb424438c in ThreadWeaver::WorkingHardState::waitForAvailableJob (this=0x81b8fe8, th=0x8685648) at ../../../threadweaver/Weaver/WorkingHardState.cpp:80
#6  0xb424027b in ThreadWeaver::WeaverImpl::waitForAvailableJob (this=0x81b2270, th=0x8685648) at ../../../threadweaver/Weaver/WeaverImpl.cpp:356
#7  0xb4244482 in ThreadWeaver::WorkingHardState::applyForWork (this=0x81b8fe8, th=0x8685648) at ../../../threadweaver/Weaver/WorkingHardState.cpp:71
#8  0xb42414d3 in ThreadWeaver::WeaverImpl::applyForWork (this=0x81b2270, th=0x8685648, previous=0x884e8d0) at ../../../threadweaver/Weaver/WeaverImpl.cpp:351
#9  0xb424251e in ThreadWeaver::ThreadRunHelper::run (this=0xae13f2f4, parent=0x81b2270, th=0x8685648) at ../../../threadweaver/Weaver/Thread.cpp:87
#10 0xb4242c3b in ThreadWeaver::Thread::run (this=0x8685648) at ../../../threadweaver/Weaver/Thread.cpp:142
#11 0xb6cb132e in QThreadPrivate::start (arg=0x8685648) at thread/qthread_unix.cpp:248
#12 0xb6c2496e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#13 0xb601f9de in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 2 (Thread 0xabd6db70 (LWP 1918)):
#0  0xb78bd430 in __kernel_vsyscall ()
#1  0xb6c29342 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb6cb220f in QWaitConditionPrivate::wait (this=0x87f835c, mutex=0x87f8358, time=30000) at thread/qwaitcondition_unix.cpp:85
#3  QWaitCondition::wait (this=0x87f835c, mutex=0x87f8358, time=30000) at thread/qwaitcondition_unix.cpp:159
#4  0xb6ca62eb in QThreadPoolThread::run (this=0x86ab590) at concurrent/qthreadpool.cpp:140
#5  0xb6cb132e in QThreadPrivate::start (arg=0x86ab590) at thread/qthread_unix.cpp:248
#6  0xb6c2496e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0xb601f9de in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 1 (Thread 0xb56c3aa0 (LWP 1896)):
[KCrash Handler]
#6  0xaa519705 in gdk_pixbuf_new_from_data () from /usr/lib/libgdk_pixbuf-2.0.so.0
#7  0xaa52100f in gdk_pixbuf_from_pixdata () from /usr/lib/libgdk_pixbuf-2.0.so.0
#8  0xaa5212d3 in gdk_pixbuf_new_from_inline () from /usr/lib/libgdk_pixbuf-2.0.so.0
#9  0xaaa3b2a5 in ?? () from /usr/lib/flashplugin-installer/libflashplayer.so
#10 0xaaa39d2e in ?? () from /usr/lib/flashplugin-installer/libflashplayer.so
#11 0xaaa3e14e in NP_Initialize () from /usr/lib/flashplugin-installer/libflashplayer.so
#12 0xb49db450 in WebCore::PluginPackage::load (this=0xabf0e380) at plugins/qt/PluginPackageQt.cpp:131
#13 0xb49dc292 in WebCore::PluginPackage::fetchInfo (this=0xabf0e380) at plugins/qt/PluginPackageQt.cpp:40
#14 0xb488ddc9 in WebCore::PluginPackage::createPackage (path=..., lastModified=@0xbfa388ec) at plugins/PluginPackage.cpp:159
#15 0xb488bf7a in WebCore::PluginDatabase::refresh (this=0x88da4b0) at plugins/PluginDatabase.cpp:121
#16 0xb488c9c1 in WebCore::PluginDatabase::installedPlugins (populate=true) at plugins/PluginDatabase.cpp:54
#17 0xb499e2dd in WebCore::PluginData::initPlugins (this=0xabf6be40) at plugins/qt/PluginDataQt.cpp:67
#18 0xb4836c9b in PluginData (this=0xabf6be40, page=0xb19c4f00) at plugins/PluginData.cpp:32
#19 0xb482676a in WebCore::PluginData::create (this=0xb19c4f00) at plugins/PluginData.h:49
#20 WebCore::Page::pluginData (this=0xb19c4f00) at page/Page.cpp:378
#21 0xb48370cc in WebCore::PluginArray::getPluginData (this=0xabf863b8) at plugins/PluginArray.cpp:97
#22 0xb48370f1 in WebCore::PluginArray::length (this=0xabf863b8) at plugins/PluginArray.cpp:42
#23 0xb4d5c97e in WebCore::jsPluginArrayLength (exec=0xae3bb160, slot=...) at generated/JSPluginArray.cpp:214
#24 0xb43f721c in JSC::JSValue::get(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&) const () from /usr/lib/libQtWebKit.so.4
#25 0xb43f748e in JSC::JSValue::get(JSC::ExecState*, JSC::Identifier const&) const () from /usr/lib/libQtWebKit.so.4
#26 0xb43ff57a in cti_op_get_by_val () from /usr/lib/libQtWebKit.so.4
#27 0xab563020 in ?? ()
#28 0xb441b50f in JSC::JITCode::execute (this=0xae3bb160, program=0xabf0ff50, callFrame=0x87bb224, scopeChain=0xb1a7b618, thisObj=0xae340000, exception=0xbfa38da4)
    at ../JavaScriptCore/jit/JITCode.h:79
#29 JSC::Interpreter::execute (this=0xae3bb160, program=0xabf0ff50, callFrame=0x87bb224, scopeChain=0xb1a7b618, thisObj=0xae340000, exception=0xbfa38da4)
    at ../JavaScriptCore/interpreter/Interpreter.cpp:613
#30 0xb44759b9 in JSC::evaluate (exec=0x87bb224, scopeChain=..., source=..., thisValue=...) at ../JavaScriptCore/runtime/Completion.cpp:60
#31 0xb454545e in WebCore::evaluateInWorld (exec=0x87bb224, scopeChain=..., sourceCode=..., thisValue=..., isolatedWorld=0x85f3e70) at bindings/js/JSDOMBinding.cpp:834
#32 0xb4552aea in WebCore::ScriptController::evaluateInWorld (this=0xb19dc8f8, sourceCode=..., world=0x85f3e70) at bindings/js/ScriptController.cpp:121
#33 0xb4552d39 in WebCore::ScriptController::evaluate (this=0xb19dc8f8, sourceCode=...) at bindings/js/ScriptController.cpp:142
#34 0xb45630a5 in WebCore::ScriptController::executeScript (this=0xb19dc8f8, sourceCode=...) at bindings/ScriptControllerBase.cpp:46
#35 0xb474dd98 in WebCore::HTMLTokenizer::scriptExecution (this=0xb1a00400, sourceCode=..., state=...) at html/HTMLTokenizer.cpp:571
#36 0xb4752875 in WebCore::HTMLTokenizer::scriptHandler (this=0xb1a00400, state=...) at html/HTMLTokenizer.cpp:507
#37 0xb475344b in WebCore::HTMLTokenizer::parseNonHTMLText (this=0xb1a00400, src=..., state=...) at html/HTMLTokenizer.cpp:353
#38 0xb4755a09 in WebCore::HTMLTokenizer::parseTag (this=0xb1a00400, src=..., state=...) at html/HTMLTokenizer.cpp:1573
#39 0xb4756180 in WebCore::HTMLTokenizer::write (this=0xb1a00400, str=..., appendData=false) at html/HTMLTokenizer.cpp:1770
#40 0xb474e6d5 in WebCore::HTMLTokenizer::notifyFinished (this=0xb1a00400) at html/HTMLTokenizer.cpp:2091
#41 0xb479092c in WebCore::CachedScript::checkNotify (this=0x88ef520) at loader/CachedScript.cpp:105
#42 0xb47cb7ba in WebCore::Loader::Host::didFinishLoading (this=0xae26a000, loader=0xabfac400) at loader/loader.cpp:367
#43 0xb47dfe20 in WebCore::SubresourceLoader::didFinishLoading (this=0xabfac400) at loader/SubresourceLoader.cpp:184
#44 0xb47dad01 in WebCore::ResourceLoader::didFinishLoading (this=0xabfac400) at loader/ResourceLoader.cpp:403
#45 0xb498477c in WebCore::QNetworkReplyHandler::finish (this=0x88b1010) at platform/network/qt/QNetworkReplyHandler.cpp:237
#46 0xb4984de3 in WebCore::QNetworkReplyHandler::qt_metacall (this=0x88b1010, _c=QMetaObject::InvokeMetaMethod, _id=5, _a=0x881bce0) at .moc/release-shared/moc_QNetworkReplyHandler.cpp:82
#47 0xb6db8c9a in QMetaObject::metacall (object=0x88b1010, cl=QMetaObject::InvokeMetaMethod, idx=5, argv=0x881bce0) at kernel/qmetaobject.cpp:237
#48 0xb6dc3336 in QMetaCallEvent::placeMetaCall (this=0x88e3c70, object=0x88b1010) at kernel/qobject.cpp:561
#49 0xb6dc43fe in QObject::event (this=0x88b1010, e=0x88e3c70) at kernel/qobject.cpp:1248
#50 0xb62d84dc in QApplicationPrivate::notify_helper (this=0x8131c90, receiver=0x88b1010, e=0x88e3c70) at kernel/qapplication.cpp:4300
#51 0xb62df05e in QApplication::notify (this=0xbfa3a118, receiver=0x88b1010, e=0x88e3c70) at kernel/qapplication.cpp:3704
#52 0xb70a8f2a in KApplication::notify (this=0xbfa3a118, receiver=0x88b1010, event=0x88e3c70) at ../../kdeui/kernel/kapplication.cpp:302
#53 0xb6db3a3b in QCoreApplication::notifyInternal (this=0xbfa3a118, receiver=0x88b1010, event=0x88e3c70) at kernel/qcoreapplication.cpp:704
#54 0xb6db6473 in QCoreApplication::sendEvent (receiver=0x0, event_type=0, data=0x80bcfc8) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#55 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x80bcfc8) at kernel/qcoreapplication.cpp:1345
#56 0xb6db65dd in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1238
#57 0xb6ddfadf in QCoreApplication::sendPostedEvents (s=0x8134110) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#58 postEventSourceDispatch (s=0x8134110) at kernel/qeventdispatcher_glib.cpp:276
#59 0xb5a665e5 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#60 0xb5a6a2d8 in ?? () from /lib/libglib-2.0.so.0
#61 0xb5a6a4b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#62 0xb6ddf5d5 in QEventDispatcherGlib::processEvents (this=0x81316a8, flags=...) at kernel/qeventdispatcher_glib.cpp:412
#63 0xb6397fd5 in QGuiEventDispatcherGlib::processEvents (this=0x81316a8, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#64 0xb6db2059 in QEventLoop::processEvents (this=0xbfa3a064, flags=) at kernel/qeventloop.cpp:149
#65 0xb6db24aa in QEventLoop::exec (this=0xbfa3a064, flags=...) at kernel/qeventloop.cpp:201
#66 0xb6db669f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#67 0xb62d8577 in QApplication::exec () at kernel/qapplication.cpp:3579
#68 0xb3a86a33 in kdemain () from /usr/lib/libkdeinit4_rekonq.so
#69 0x0804e133 in launch (argc=<value optimized out>, _name=<value optimized out>, args=<value optimized out>, cwd=0x0, envc=1, envs=0x80fb8f8 "DISPLAY=:0.0", reset_env=false, tty=0x0, 
    avoid_loops=false, startup_id_str=0x80fb909 "Linux;1270635366;450880;1535_TIME758539") at ../../kinit/kinit.cpp:717
#70 0x0804ec6d in handle_launcher_request (sock=<value optimized out>, who=<value optimized out>) at ../../kinit/kinit.cpp:1209
#71 0x0804f190 in handle_requests (waitForPid=<value optimized out>) at ../../kinit/kinit.cpp:1402
#72 0x0804fe4f in main (argc=4, argv=0xbfa3ac04, envp=0xbfa3ac18) at ../../kinit/kinit.cpp:1845

This bug may be a duplicate of or related to bug 230967.

Possible duplicates by query: bug 230967.

Reported using DrKonqi