Bug 240018

Application: konqueror (4.4.2 (KDE 4.4.2))
KDE Platform Version: 4.4.2 (KDE 4.4.2)
Qt Version: 4.6.2
Operating System: Linux 2.6.32-22-generic i686
Distribution: Ubuntu 10.04 LTS

-- Information about the crash:
I zoomed on a picture in a page, then hit back to return to the original page I came from and Konqueror crashed.

 -- Backtrace:
Application: Konqueror (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0xb776baa0 (LWP 7155))]

Thread 2 (Thread 0xb2c97b70 (LWP 7163)):
#0  0x024e8e16 in clock_gettime () from /lib/tls/i686/cmov/librt.so.1
#1  0x00a356fb in qt_gettime () at kernel/qcore_unix.cpp:111
#2  0x00a3a825 in QTimerInfoList::updateCurrentTime (this=0xa26a5dc) at kernel/qeventdispatcher_unix.cpp:340
#3  0x00a3a86a in QTimerInfoList::timerWait (this=0xa26a5dc, tm=...) at kernel/qeventdispatcher_unix.cpp:443
#4  0x00a38818 in timerSourcePrepareHelper (src=<value optimized out>, timeout=0xb2c970cc) at kernel/qeventdispatcher_glib.cpp:136
#5  0x00a388a5 in timerSourcePrepare (source=0x0, timeout=0x24ecff4) at kernel/qeventdispatcher_glib.cpp:169
#6  0x04a28aca in g_main_context_prepare () from /lib/libglib-2.0.so.0
#7  0x04a28ee9 in ?? () from /lib/libglib-2.0.so.0
#8  0x04a294b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#9  0x00a3860f in QEventDispatcherGlib::processEvents (this=0xa068358, flags=...) at kernel/qeventdispatcher_glib.cpp:414
#10 0x00a0b059 in QEventLoop::processEvents (this=0xb2c97290, flags=) at kernel/qeventloop.cpp:149
#11 0x00a0b4aa in QEventLoop::exec (this=0xb2c97290, flags=...) at kernel/qeventloop.cpp:201
#12 0x009075a8 in QThread::exec (this=0x9c50300) at thread/qthread.cpp:487
#13 0x009eac1b in QInotifyFileSystemWatcherEngine::run (this=0x9c50300) at io/qfilesystemwatcher_inotify.cpp:248
#14 0x0090a32e in QThreadPrivate::start (arg=0x9c50300) at thread/qthread_unix.cpp:248
#15 0x0011596e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#16 0x07260a4e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 1 (Thread 0xb776baa0 (LWP 7155)):
[KCrash Handler]
#6  DOM::DocumentImpl::paintDevice (value=0xa9e0ce0, style=0xb0fa078, part=0xad0eb38, op=MinPrefix) at ../../khtml/xml/dom_docimpl.h:378
#7  widthMediaFeatureEval (value=0xa9e0ce0, style=0xb0fa078, part=0xad0eb38, op=MinPrefix) at ../../khtml/css/css_mediaquery.cpp:585
#8  0xb525d74e in khtml::MediaQueryEvaluator::eval (this=0xabbda88, expr=0xa9e0c68) at ../../khtml/css/css_mediaquery.cpp:780
#9  0xb525d86b in khtml::MediaQueryEvaluator::eval (this=0xabbda88, mediaList=0xaa33bf8, styleSelector=0xa9f8228) at ../../khtml/css/css_mediaquery.cpp:296
#10 0xb5234834 in khtml::CSSStyleSelectorList::append (this=0xab3f0f0, sheet=0xa613570, medium=0xabbda88, styleSelector=0xa9f8228) at ../../khtml/css/cssstyleselector.cpp:2064
#11 0xb52457a2 in CSSStyleSelector (this=0xa9f8228, doc=0xa610c70, userStyleSheet=..., styleSheets=0xab40560, url=..., _strictParsing=false) at ../../khtml/css/cssstyleselector.cpp:282
#12 0xb50e984d in DOM::DocumentImpl::rebuildStyleSelector (this=0xa610c70) at ../../khtml/xml/dom_docimpl.cpp:2394
#13 0xb50e9984 in DOM::DocumentImpl::updateStyleSelector (this=0xa610c70, shallow=false) at ../../khtml/xml/dom_docimpl.cpp:2213
#14 0xb50e9dc0 in DOM::DocumentImpl::styleSheetLoaded (this=0xa610c70) at ../../khtml/xml/dom_docimpl.cpp:2129
#15 0xb5148327 in DOM::HTMLLinkElementImpl::finished (this=0xb11c2d8) at ../../khtml/html/html_headimpl.cpp:273
#16 0xb5148b03 in DOM::HTMLLinkElementImpl::setStyleSheet (this=0xb11c2d8, url=..., sheetStr=..., charset=..., mimetype=...) at ../../khtml/html/html_headimpl.cpp:264
#17 0xb5266f8c in khtml::CachedCSSStyleSheet::ref (this=0xab056e8, c=0xb11c2d8) at ../../khtml/misc/loader.cpp:271
#18 0xb514aba6 in DOM::HTMLLinkElementImpl::process (this=0xb11c2d8) at ../../khtml/html/html_headimpl.cpp:217
#19 0xb50f259b in DOM::NodeBaseImpl::addChild (this=0xa6f7fd8, newChild=0xb11c2dc) at ../../khtml/xml/dom_nodeimpl.cpp:1810
#20 0xb513357a in khtml::KHTMLParser::insertNode (this=0xaa41330, n=0xb11c2dc, flat=true) at ../../khtml/html/htmlparser.cpp:414
#21 0xb513600c in khtml::KHTMLParser::parseToken (this=0xaa41330, t=0xa9c1374) at ../../khtml/html/htmlparser.cpp:302
#22 0xb5136b03 in khtml::HTMLTokenizer::processToken (this=0xa9c1360) at ../../khtml/html/htmltokenizer.cpp:2056
#23 0xb513ea7c in khtml::HTMLTokenizer::parseTag (this=0xa9c1360, src=...) at ../../khtml/html/htmltokenizer.cpp:1529
#24 0xb5141621 in khtml::HTMLTokenizer::write (this=0xa9c1360, str=..., appendData=true) at ../../khtml/html/htmltokenizer.cpp:1810
#25 0xb5082b53 in KHTMLPart::write (this=0xad0eb38, 
    data=0xb0dd030 "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\">\n\n<html xmlns:dc=\"http://purl.org/dc/terms/\" xmlns:foaf=\"http://xmlns.com/foaf/0.1/\" xmlns:cc=\"http://creativecommons.org/ns#\">\n<head>\n\t<"..., len=54678) at ../../khtml/khtml_part.cpp:2099
#26 0xb50756ea in KHTMLPart::slotRestoreData (this=0xad0eb38, data=...) at ../../khtml/khtml_part.cpp:1804
#27 0xb50a2323 in KHTMLPart::qt_metacall (this=0xad0eb38, _c=QMetaObject::InvokeMetaMethod, _id=21, _a=0xbfab2f48) at ./khtml_part.moc:279
#28 0x00a11c9a in QMetaObject::metacall (object=0xad0eb38, cl=3042633736, idx=35, argv=0xbfab2f48) at kernel/qmetaobject.cpp:237
#29 0x00a203d5 in QMetaObject::activate (sender=0xa6943a8, m=0xb5589be8, local_signal_index=0, argv=0xbfab2f48) at kernel/qobject.cpp:3293
#30 0xb50c9f73 in KHTMLPageCacheDelivery::emitData (this=0xa6943a8, _t1=...) at ./khtml_pagecache.moc:147
#31 0xb50cafba in KHTMLPageCache::sendData (this=0xa6542e8) at ../../khtml/khtml_pagecache.cpp:250
#32 0xb50cb160 in KHTMLPageCache::qt_metacall (this=0xa6542e8, _c=QMetaObject::InvokeMetaMethod, _id=5, _a=0xbfab309c) at ./khtml_pagecache.moc:75
#33 0x00a11c9a in QMetaObject::metacall (object=0xa6542e8, cl=3042633736, idx=5, argv=0xbfab309c) at kernel/qmetaobject.cpp:237
#34 0x00a203d5 in QMetaObject::activate (sender=0xa7a90f8, m=0xb1f188, local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3293
#35 0x00a27fe7 in QSingleShotTimer::timeout (this=0xa7a90f8) at .moc/release-shared/qtimer.moc:82
#36 0x00a280fc in QSingleShotTimer::timerEvent (this=0xa7a90f8) at kernel/qtimer.cpp:308
#37 0x00a1d254 in QObject::event (this=0xa7a90f8, e=0xb55ae808) at kernel/qobject.cpp:1212
#38 0x0112c4dc in QApplicationPrivate::notify_helper (this=0x9a72840, receiver=0xa7a90f8, e=0xbfab35d0) at kernel/qapplication.cpp:4300
#39 0x0113305e in QApplication::notify (this=0xbfab3ab4, receiver=0xa7a90f8, e=0xbfab35d0) at kernel/qapplication.cpp:3704
#40 0x00e1ff2a in KApplication::notify (this=0xbfab3ab4, receiver=0xa7a90f8, event=0xbfab35d0) at ../../kdeui/kernel/kapplication.cpp:302
#41 0x00a0ca3b in QCoreApplication::notifyInternal (this=0xbfab3ab4, receiver=0xa7a90f8, event=0xbfab35d0) at kernel/qcoreapplication.cpp:704
#42 0x00a3bd66 in QCoreApplication::sendEvent (this=0x9a49634) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#43 QTimerInfoList::activateTimers (this=0x9a49634) at kernel/qeventdispatcher_unix.cpp:603
#44 0x00a388e4 in timerSourceDispatch (source=0x9a49600) at kernel/qeventdispatcher_glib.cpp:184
#45 0x04a255e5 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#46 0x04a292d8 in ?? () from /lib/libglib-2.0.so.0
#47 0x04a294b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#48 0x00a385d5 in QEventDispatcherGlib::processEvents (this=0x99feb48, flags=...) at kernel/qeventdispatcher_glib.cpp:412
#49 0x011ec135 in QGuiEventDispatcherGlib::processEvents (this=0x99feb48, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#50 0x00a0b059 in QEventLoop::processEvents (this=0xbfab3894, flags=) at kernel/qeventloop.cpp:149
#51 0x00a0b4aa in QEventLoop::exec (this=0xbfab3894, flags=...) at kernel/qeventloop.cpp:201
#52 0x00a0f69f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#53 0x0112c577 in QApplication::exec () at kernel/qapplication.cpp:3579
#54 0x087c41ee in kdemain (argc=2, argv=0x9a476a8) at ../../../../apps/konqueror/src/konqmain.cpp:271
#55 0x0804e133 in launch (argc=<value optimized out>, _name=<value optimized out>, args=<value optimized out>, cwd=0x0, envc=0, envs=0x9a30924 "", reset_env=false, tty=0x0, avoid_loops=false, 
    startup_id_str=0x9a30928 "EGO;1275151538;963982;1172_TIME35603533") at ../../kinit/kinit.cpp:717
#56 0x0804ec6d in handle_launcher_request (sock=<value optimized out>, who=<value optimized out>) at ../../kinit/kinit.cpp:1209
#57 0x0804f190 in handle_requests (waitForPid=<value optimized out>) at ../../kinit/kinit.cpp:1402
#58 0x0804fe4f in main (argc=4, argv=0xbfab4694, envp=0xbfab46a8) at ../../kinit/kinit.cpp:1845

This bug may be a duplicate of or related to bug 201326.

Possible duplicates by query: bug 237428, bug 227886, bug 226046, bug 225227, bug 212466.

Reported using DrKonqi