Bug 239080

Summary:	Konqueror crashes when changing view mode to webkit
Product:	[Frameworks and Libraries] kwebkitpart	Reporter:	Stephen Dunn <nzlbob2332>
Component:	general	Assignee:	webkit-devel
Status:	RESOLVED FIXED
Severity:	crash	CC:	adawit, nzlbob2332
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	openSUSE
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	New crash information added by DrKonqi

Description Stephen Dunn 2010-05-28 02:07:50 UTC

Application: konqueror (4.4.80 (KDE 4.4.80 (KDE 4.5 Beta1)) "release 2")
KDE Platform Version: 4.4.80 (KDE 4.4.80 (KDE 4.5 Beta1)) "release 2"
Qt Version: 4.6.2
Operating System: Linux 2.6.34-8-desktop x86_64
Distribution: "openSUSE 11.3 Milestone 7 (x86_64)"

-- Information about the crash:
- What I was doing when the application crashed:

Clicked on view mode > webkit

This happens in both browsing and tab browsing modes.

Crash happened after upgrade to 4.5b1

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0x7f1c017f5760 (LWP 6764))]

Thread 2 (Thread 0x7f1bdfd1b710 (LWP 6877)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007f1bf690f020 in WTF::TCMalloc_PageHeap::scavengerThread() () from /usr/lib64/libQtWebKit.so.4
#2  0x00007f1bf690f059 in WTF::TCMalloc_PageHeap::runScavengerThread(void*) () from /usr/lib64/libQtWebKit.so.4
#3  0x00007f1c0017ba4f in start_thread (arg=0x7f1bdfd1b710) at pthread_create.c:297
#4  0x00007f1bfef7079d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7f1c017f5760 (LWP 6764)):
[KCrash Handler]
#6  0x00007f1bf69113d8 in WTF::fastMalloc(unsigned long) () from /usr/lib64/libQtWebKit.so.4
#7  0x00007f1bf6c97bdc in WebCore::StringImpl::createUninitialized(unsigned int, unsigned short*&) () from /usr/lib64/libQtWebKit.so.4
#8  0x00007f1bf6c98015 in WebCore::StringImpl::create(unsigned short const*, unsigned int) () from /usr/lib64/libQtWebKit.so.4
#9  0x00007f1bf6c94c7e in WebCore::String::String(unsigned short const*, unsigned int) () from /usr/lib64/libQtWebKit.so.4
#10 0x00007f1bf69e6b39 in WebCore::CSSParser::parseContent(int, bool) () from /usr/lib64/libQtWebKit.so.4
#11 0x00007f1bf69e89d5 in WebCore::CSSParser::parseValue(int, bool) () from /usr/lib64/libQtWebKit.so.4
#12 0x00007f1bf720751e in cssyyparse(void*) () from /usr/lib64/libQtWebKit.so.4
#13 0x00007f1bf69e1cc8 in WebCore::CSSParser::parseSheet(WebCore::CSSStyleSheet*, WebCore::String const&) () from /usr/lib64/libQtWebKit.so.4
#14 0x00007f1bf6a2b238 in WebCore::CSSStyleSheet::parseString(WebCore::String const&, bool) () from /usr/lib64/libQtWebKit.so.4
#15 0x00007f1bf6a0a890 in WebCore::parseUASheet(WebCore::String const&) () from /usr/lib64/libQtWebKit.so.4
#16 0x00007f1bf6a161f9 in WebCore::loadFullDefaultStyle() () from /usr/lib64/libQtWebKit.so.4
#17 0x00007f1bf6a2a06a in WebCore::CSSStyleSelector::styleForElement(WebCore::Element*, WebCore::RenderStyle*, bool, bool) () from /usr/lib64/libQtWebKit.so.4
#18 0x00007f1bf6a6d949 in WebCore::Node::styleForRenderer() () from /usr/lib64/libQtWebKit.so.4
#19 0x00007f1bf6a6fdc1 in WebCore::Node::createRendererIfNeeded() () from /usr/lib64/libQtWebKit.so.4
#20 0x00007f1bf6a5de7e in WebCore::Element::attach() () from /usr/lib64/libQtWebKit.so.4
#21 0x00007f1bf6b670c3 in WebCore::HTMLParser::insertNode(WebCore::Node*, bool) () from /usr/lib64/libQtWebKit.so.4
#22 0x00007f1bf6b67887 in WebCore::HTMLParser::parseToken(WebCore::Token*) () from /usr/lib64/libQtWebKit.so.4
#23 0x00007f1bf6b76be4 in WebCore::HTMLTokenizer::processToken() () from /usr/lib64/libQtWebKit.so.4
#24 0x00007f1bf6b7d0c8 in WebCore::HTMLTokenizer::parseTag(WebCore::SegmentedString&, WebCore::HTMLTokenizer::State) () from /usr/lib64/libQtWebKit.so.4
#25 0x00007f1bf6b80052 in WebCore::HTMLTokenizer::write(WebCore::SegmentedString const&, bool) () from /usr/lib64/libQtWebKit.so.4
#26 0x00007f1bf6bcc3fc in WebCore::FrameLoader::write(char const*, int, bool) () from /usr/lib64/libQtWebKit.so.4
#27 0x00007f1bf6daa959 in WebCore::FrameLoaderClientQt::committedLoad(WebCore::DocumentLoader*, char const*, int) () from /usr/lib64/libQtWebKit.so.4
#28 0x00007f1bf6bbe295 in WebCore::DocumentLoader::commitLoad(char const*, int) () from /usr/lib64/libQtWebKit.so.4
#29 0x00007f1bf6bfa35d in WebCore::ResourceLoader::didReceiveData(char const*, int, long long, bool) () from /usr/lib64/libQtWebKit.so.4
#30 0x00007f1bf6bec0a8 in WebCore::MainResourceLoader::didReceiveData(char const*, int, long long, bool) () from /usr/lib64/libQtWebKit.so.4
#31 0x00007f1bf6d8e4a6 in WebCore::QNetworkReplyHandler::forwardData() () from /usr/lib64/libQtWebKit.so.4
#32 0x00007f1bf6d8ed04 in WebCore::QNetworkReplyHandler::qt_metacall(QMetaObject::Call, int, void**) () from /usr/lib64/libQtWebKit.so.4
#33 0x00007f1c00503cb9 in QObject::event (this=0x829a60, e=0x3c146e0) at kernel/qobject.cpp:1248
#34 0x00007f1bff6c9a34 in QApplicationPrivate::notify_helper (this=0x68f230, receiver=0x829a60, e=0x3c146e0) at kernel/qapplication.cpp:4300
#35 0x00007f1bff6d202a in QApplication::notify (this=<value optimized out>, receiver=0x829a60, e=0x3c146e0) at kernel/qapplication.cpp:4183
#36 0x00007f1c012097c6 in KApplication::notify (this=0x7fff93778120, receiver=0x829a60, event=0x3c146e0) at /usr/src/debug/kdelibs-4.4.80/kdeui/kernel/kapplication.cpp:302
#37 0x00007f1c004f27ec in QCoreApplication::notifyInternal (this=0x7fff93778120, receiver=0x829a60, event=0x3c146e0) at kernel/qcoreapplication.cpp:704
#38 0x00007f1c004f5e8d in sendEvent (receiver=0x0, event_type=0, data=0x615240) at kernel/qcoreapplication.h:215
#39 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x615240) at kernel/qcoreapplication.cpp:1345
#40 0x00007f1c0051a883 in sendPostedEvents (s=<value optimized out>) at kernel/qcoreapplication.h:220
#41 postEventSourceDispatch (s=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:276
#42 0x00007f1bfc082a93 in g_main_dispatch (context=0x691d20) at gmain.c:1960
#43 IA__g_main_context_dispatch (context=0x691d20) at gmain.c:2513
#44 0x00007f1bfc083270 in g_main_context_iterate (context=0x691d20, block=1, dispatch=1, self=<value optimized out>) at gmain.c:2591
#45 0x00007f1bfc083510 in IA__g_main_context_iteration (context=0x691d20, may_block=1) at gmain.c:2654
#46 0x00007f1c0051adbf in QEventDispatcherGlib::processEvents (this=0x617340, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:412
#47 0x00007f1bff76a25e in QGuiEventDispatcherGlib::processEvents (this=<value optimized out>, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:204
#48 0x00007f1c004f1c32 in QEventLoop::processEvents (this=<value optimized out>, flags=...) at kernel/qeventloop.cpp:149
#49 0x00007f1c004f1e35 in QEventLoop::exec (this=0x7fff93777ed0, flags=...) at kernel/qeventloop.cpp:201
#50 0x00007f1c004f613b in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#51 0x00007f1bf0a59c8a in kdemain (argc=<value optimized out>, argv=<value optimized out>) at /usr/src/debug/kdebase-4.4.80/apps/konqueror/src/konqmain.cpp:228
#52 0x0000000000406ad9 in _start ()

Reported using DrKonqi

Comment 1 Maksim Orlovich 2010-05-28 03:08:59 UTC

Please do not report WebKit bugs under konqueror, but rather under kdelibs->webkitkde.

Comment 2 Stephen Dunn 2010-05-28 03:57:08 UTC

Created attachment 47410 [details]
New crash information added by DrKonqi

amarok (2.3-GIT) on KDE Platform 4.4.80 (KDE 4.4.80 (KDE 4.5 Beta1)) "release 2" using Qt 4.6.2

- What I was doing when the application crashed:

This webkit problem also seemed to occur with the wikipedia applet enabled in Amarok.

-- Backtrace (Reduced):
#6  0x00007ff5ee30f3d8 in WTF::fastMalloc(unsigned long) () from /usr/lib64/libQtWebKit.so.4
#7  0x00007ff5ee695bdc in WebCore::StringImpl::createUninitialized(unsigned int, unsigned short*&) () from /usr/lib64/libQtWebKit.so.4
#8  0x00007ff5ee696015 in WebCore::StringImpl::create(unsigned short const*, unsigned int) () from /usr/lib64/libQtWebKit.so.4
#9  0x00007ff5ee692c7e in WebCore::String::String(unsigned short const*, unsigned int) () from /usr/lib64/libQtWebKit.so.4
#10 0x00007ff5ee3d690c in WebCore::CSSParser::parseColorFromValue(WebCore::CSSParserValue*, unsigned int&, bool) () from /usr/lib64/libQtWebKit.so.4

Comment 3 Dawit Alemayehu 2010-05-28 16:26:30 UTC

(In reply to comment #1)
> Please do not report WebKit bugs under konqueror, but rather under
> kdelibs->webkitkde.

Incorrect. It should be reported under kwebkitpart/general since that is what the user interacts with. Not kdelibs/kdewebkit.

Comment 4 Dawit Alemayehu 2010-05-28 16:30:35 UTC

Is there any specific site you were visiting when this occurs ? I cannot reproduce the bug with the upcoming QtWebKit 2.0 and Qt 4.6.2. The QtWebKit in Qt will be updated to the version 2.0 in the upcoming 4.7 release...

Comment 5 Stephen Dunn 2010-05-28 21:04:34 UTC

(In reply to comment #4)
> Is there any specific site you were visiting when this occurs ? I cannot
> reproduce the bug with the upcoming QtWebKit 2.0 and Qt 4.6.2. The QtWebKit in
> Qt will be updated to the version 2.0 in the upcoming 4.7 release...

No, it's crashing for every application that uses it konqueror, rekonq,amarok (wikipedia plugin).

Comment 6 Dawit Alemayehu 2010-05-31 17:20:54 UTC

I am unable to reproduce this problem locally with KDE 4.4.81, but my QtWebKit version is 2.0 ; the one that will be in Qt 4.7. The backtrace you provided shows that the crash occurs in QtWebKit and as such this should be reported upstream:

https://trac.webkit.org/wiki/QtWebKitBugs

Comment 7 Stephen Dunn 2010-06-11 08:52:44 UTC

This now works for me in beta 2