Bug 240592

Summary:	Akregator crashes, when opening a link of in a feed in a new tab
Product:	[Applications] konqueror	Reporter:	Panagiotis Papadopoulos <pano9000>
Component:	kjs	Assignee:	Konqueror Bugs <konqueror-bugs-null>
Status:	RESOLVED FIXED
Severity:	crash	CC:	aiacovitti, alex.merry, lkjoel
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:	http://commits.kde.org/kdelibs/4af6e0a9	Version Fixed/Implemented In:	4.5.0
Sentry Crash Report:
Attachments:	Potential fix

Description Panagiotis Papadopoulos 2010-06-03 13:58:06 UTC

Application: akregator (1.6.3)
KDE Platform Version: 4.4.80 (KDE 4.4.80 (KDE 4.5 Beta1))
Qt Version: 4.6.2
Operating System: Linux 2.6.34-ARCH x86_64
Distribution (Platform): Archlinux Packages

-- Information about the crash:
- What I was doing when the application crashed:

I opened up a feed, which contained a link, then opened that link in a new tab.
Akregator then crashed…
it does not always happen, but it happens often enough, so that I need to open this bug report ;-)

I'll compile akregator + kdelibs later with debug option, and then attach a better backtrace

The crash can be reproduced some of the time.

-- Backtrace:
Application: Akregator (akregator), signal: Segmentation fault
[Current thread is 1 (Thread 0x7fa52340a760 (LWP 2578))]

Thread 2 (Thread 0x7fa50a231710 (LWP 10147)):
#0  0x00007fa51c7bb7a9 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00007fa520b161d2 in QWaitCondition::wait(QMutex*, unsigned long) () from /usr/lib/libQtCore.so.4
#2  0x00007fa520b0c6d0 in ?? () from /usr/lib/libQtCore.so.4
#3  0x00007fa520b15ba5 in ?? () from /usr/lib/libQtCore.so.4
#4  0x00007fa51c7b6cb0 in start_thread () from /lib/libpthread.so.0
#5  0x00007fa52007f78d in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7fa52340a760 (LWP 2578)):
[KCrash Handler]
#6  0x00007fa50d03bced in KJS::ScriptableOperations::mark() () from /usr/lib/libkhtml.so.5
#7  0x00007fa50c6cae11 in KJS::Collector::collect() () from /usr/lib/libkjs.so.4
#8  0x00007fa50c6cb433 in KJS::Collector::allocate(unsigned long) () from /usr/lib/libkjs.so.4
#9  0x00007fa50c6f7f4e in KJS::jsOwnedString(KJS::UString const&) () from /usr/lib/libkjs.so.4
#10 0x00007fa50c710653 in KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) () from /usr/lib/libkjs.so.4
#11 0x00007fa50c6f4d4e in KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) () from /usr/lib/libkjs.so.4
#12 0x00007fa50c715077 in KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) () from /usr/lib/libkjs.so.4
#13 0x00007fa50c6f4d4e in KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) () from /usr/lib/libkjs.so.4
#14 0x00007fa50c715077 in KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) () from /usr/lib/libkjs.so.4
#15 0x00007fa50c6f4d4e in KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) () from /usr/lib/libkjs.so.4
#16 0x00007fa50c715077 in KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) () from /usr/lib/libkjs.so.4
#17 0x00007fa50c6cd347 in KJS::FunctionBodyNode::execute(KJS::ExecState*) () from /usr/lib/libkjs.so.4
#18 0x00007fa50c6fd1aa in KJS::Interpreter::evaluate(KJS::UString const&, int, KJS::UChar const*, int, KJS::JSValue*) () from /usr/lib/libkjs.so.4
#19 0x00007fa50c6fd283 in KJS::Interpreter::evaluate(KJS::UString const&, int, KJS::UString const&, KJS::JSValue*) () from /usr/lib/libkjs.so.4
#20 0x00007fa50d002ca3 in KJSProxy::evaluate(QString, int, QString const&, DOM::Node const&, KJS::Completion*) () from /usr/lib/libkhtml.so.5
#21 0x00007fa50cda5028 in KHTMLPart::executeScript(QString const&, int, DOM::Node const&, QString const&) () from /usr/lib/libkhtml.so.5
#22 0x00007fa50ce63d92 in khtml::HTMLTokenizer::scriptExecution(QString const&, QString const&, int) () from /usr/lib/libkhtml.so.5
#23 0x00007fa50ce6cfc8 in khtml::HTMLTokenizer::notifyFinished(khtml::CachedObject*) () from /usr/lib/libkhtml.so.5
#24 0x00007fa50cf8677f in khtml::CachedScript::checkNotify() () from /usr/lib/libkhtml.so.5
#25 0x00007fa50cf8692c in khtml::CachedScript::data(QBuffer&, bool) () from /usr/lib/libkhtml.so.5
#26 0x00007fa50cf86e27 in khtml::Loader::slotFinished(KJob*) () from /usr/lib/libkhtml.so.5
#27 0x00007fa50cf872b3 in khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) () from /usr/lib/libkhtml.so.5
#28 0x00007fa520c1262f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#29 0x00007fa52103f0b2 in KJob::result(KJob*) () from /usr/lib/libkdecore.so.5
#30 0x00007fa52103f0f0 in KJob::emitResult() () from /usr/lib/libkdecore.so.5
#31 0x00007fa51fbfe07d in KIO::SimpleJob::slotFinished() () from /usr/lib/libkio.so.5
#32 0x00007fa51fc06d57 in KIO::TransferJob::slotFinished() () from /usr/lib/libkio.so.5
#33 0x00007fa51fc05521 in KIO::TransferJob::qt_metacall(QMetaObject::Call, int, void**) () from /usr/lib/libkio.so.5
#34 0x00007fa520c1262f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#35 0x00007fa51fca6dc1 in KIO::SlaveInterface::dispatch(int, QByteArray const&) () from /usr/lib/libkio.so.5
#36 0x00007fa51fca4013 in KIO::SlaveInterface::dispatch() () from /usr/lib/libkio.so.5
#37 0x00007fa51fc97ba6 in KIO::Slave::gotInput() () from /usr/lib/libkio.so.5
#38 0x00007fa51fc981bc in KIO::Slave::qt_metacall(QMetaObject::Call, int, void**) () from /usr/lib/libkio.so.5
#39 0x00007fa520c1262f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#40 0x00007fa51fbcfd07 in KIO::ConnectionPrivate::dequeue() () from /usr/lib/libkio.so.5
#41 0x00007fa51fbcfdbd in KIO::Connection::qt_metacall(QMetaObject::Call, int, void**) () from /usr/lib/libkio.so.5
#42 0x00007fa520c0fec9 in QObject::event(QEvent*) () from /usr/lib/libQtCore.so.4
#43 0x00007fa521574e84 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib/libQtGui.so.4
#44 0x00007fa521578f6a in QApplication::notify(QObject*, QEvent*) () from /usr/lib/libQtGui.so.4
#45 0x00007fa52223b8f6 in KApplication::notify(QObject*, QEvent*) () from /usr/lib/libkdeui.so.5
#46 0x00007fa520bfe79c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/libQtCore.so.4
#47 0x00007fa520c01e3d in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/lib/libQtCore.so.4
#48 0x00007fa520c26ad3 in ?? () from /usr/lib/libQtCore.so.4
#49 0x00007fa51ae94b33 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#50 0x00007fa51ae95310 in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#51 0x00007fa51ae955ad in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#52 0x00007fa520c2700f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#53 0x00007fa5216144be in ?? () from /usr/lib/libQtGui.so.4
#54 0x00007fa520bfdb82 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#55 0x00007fa520bfddbc in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#56 0x00007fa520c020eb in QCoreApplication::exec() () from /usr/lib/libQtCore.so.4
#57 0x0000000000408dd5 in _start ()

This bug may be a duplicate of or related to bug 237967.

Possible duplicates by query: bug 237967.

Reported using DrKonqi

Comment 1 Panagiotis Papadopoulos 2010-06-03 15:18:31 UTC

Application: Akregator (akregator), signal: Segmentation fault
[Current thread is 1 (Thread 0x7fed84a5f760 (LWP 12802))]

Thread 2 (Thread 0x7fed6a2ad710 (LWP 13812)):
#0  0x00007fed816ce093 in select () from /lib/libc.so.6
#1  0x00007fed822349cd in ?? () from /usr/lib/libQtCore.so.4
#2  0x00007fed8216aba5 in ?? () from /usr/lib/libQtCore.so.4
#3  0x00007fed7de0bcb0 in start_thread () from /lib/libpthread.so.0
#4  0x00007fed816d478d in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7fed84a5f760 (LWP 12802)):
[KCrash Handler]
#6  KJS::ScriptableOperations::mark (this=<value optimized out>) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/khtml/ecma/kjs_scriptable.cpp:741
#7  0x00007fed6da7bd61 in KJS::Collector::collect () at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/collector.cpp:672
#8  0x00007fed6da7c362 in KJS::Collector::allocate (s=16) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/collector.cpp:331
#9  0x00007fed6daa8b23 in KJS::jsString (s=0x7fff237241a0 "8") at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/value.cpp:187
#10 0x00007fed6da95804 in numberToString (exec=<value optimized out>, v=<value optimized out>, args=<value optimized out>)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/number_object.cpp:209
#11 0x00007fed6da969d5 in KJS::NumberProtoFunc::callAsFunction (this=0x7fed6ab3f840, exec=0x7fff23724f10, thisObj=<value optimized out>, args=...)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/number_object.cpp:431
#12 0x00007fed6dac5c60 in KJS::JSObject::call (exec=0x7fff23724f10, codeBlock=..., parentExec=0x7fff237257d0) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/object.h:616
#13 KJS::Machine::runBlock (exec=0x7fff23724f10, codeBlock=..., parentExec=0x7fff237257d0) at codes.def:1209
#14 0x00007fed6daa5b11 in KJS::FunctionImp::callAsFunction (this=0x7fed6ab362c0, exec=0x7fff237257d0, thisObj=<value optimized out>, args=...)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/function.cpp:172
#15 0x00007fed6dac5c60 in KJS::JSObject::call (exec=0x7fff237257d0, codeBlock=..., parentExec=0x7fff23726140) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/object.h:616
#16 KJS::Machine::runBlock (exec=0x7fff237257d0, codeBlock=..., parentExec=0x7fff23726140) at codes.def:1209
#17 0x00007fed6daa5b11 in KJS::FunctionImp::callAsFunction (this=0x7fed6ab3c500, exec=0x7fff23726140, thisObj=<value optimized out>, args=...)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/function.cpp:172
#18 0x00007fed6dac5c60 in KJS::JSObject::call (exec=0x7fff23726140, codeBlock=..., parentExec=0x0) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/object.h:616
#19 KJS::Machine::runBlock (exec=0x7fff23726140, codeBlock=..., parentExec=0x0) at codes.def:1209
#20 0x00007fed6da7e236 in KJS::FunctionBodyNode::execute (this=0x22d6dc0, exec=0x7fff23726140) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/nodes.cpp:927
#21 0x00007fed6daae09a in KJS::Interpreter::evaluate (this=0x508a8f0, sourceURL=..., startingLineNumber=0, code=0x53dce10, codeLength=<value optimized out>, thisV=0x7fed6add0000)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/interpreter.cpp:556
#22 0x00007fed6daae173 in KJS::Interpreter::evaluate (this=<value optimized out>, sourceURL=<value optimized out>, startingLineNumber=<value optimized out>, code=<value optimized out>, 
    thisV=<value optimized out>) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kjs/interpreter.cpp:496
#23 0x00007fed6e3b1172 in KJSProxy::evaluate (this=0x1dae650, filename=..., baseLine=0, str=..., n=<value optimized out>, completion=0x7fff23726560)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/khtml/ecma/kjs_proxy.cpp:126
#24 0x00007fed6e154f58 in KHTMLPart::executeScript (this=0x435c8d0, filename=..., baseLine=0, n=..., script=...) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/khtml/khtml_part.cpp:1248
#25 0x00007fed6e2137b2 in khtml::HTMLTokenizer::scriptExecution (this=0x3dad1b0, str=..., scriptURL=<value optimized out>, baseLine=0)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/khtml/html/htmltokenizer.cpp:517
#26 0x00007fed6e21ca33 in khtml::HTMLTokenizer::notifyFinished (this=0x3dad1b0, finishedObj=<value optimized out>)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/khtml/html/htmltokenizer.cpp:2117
#27 0x00007fed6e334cdf in khtml::CachedScript::checkNotify (this=0x3933c20) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/khtml/misc/loader.cpp:397
#28 0x00007fed6e334e8c in khtml::CachedScript::data (this=0x3933c20, buffer=<value optimized out>, eof=<value optimized out>)
    at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/khtml/misc/loader.cpp:389
#29 0x00007fed6e335387 in khtml::Loader::slotFinished (this=0x206ac80, job=0x31face0) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/khtml/misc/loader.cpp:1244
#30 0x00007fed6e335813 in khtml::Loader::qt_metacall (this=0x206ac80, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fff23726c10)
    at /home/pano/Projekte/build/kdelibs/src/build/khtml/loader.moc:141
#31 0x00007fed8226762f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#32 0x00007fed82694022 in KJob::result (this=<value optimized out>, _t1=0x31face0) at /home/pano/Projekte/build/kdelibs/src/build/kdecore/kjob.moc:194
#33 0x00007fed82694060 in KJob::emitResult (this=0x31face0) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kdecore/jobs/kjob.cpp:312
#34 0x00007fed81252f9d in KIO::SimpleJob::slotFinished (this=0x31face0) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kio/kio/job.cpp:522
#35 0x00007fed8125bc47 in KIO::TransferJob::slotFinished (this=0x31face0) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kio/kio/job.cpp:1111
#36 0x00007fed8125a411 in KIO::TransferJob::qt_metacall (this=0x31face0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fff23727020)
    at /home/pano/Projekte/build/kdelibs/src/build/kio/jobclasses.moc:367
#37 0x00007fed8226762f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#38 0x00007fed812fb8b1 in KIO::SlaveInterface::dispatch (this=<value optimized out>, _cmd=104, rawdata=...) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kio/kio/slaveinterface.cpp:175
#39 0x00007fed812f8b4d in KIO::SlaveInterface::dispatch (this=0x36e7fe0) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kio/kio/slaveinterface.cpp:91
#40 0x00007fed812ec6d6 in KIO::Slave::gotInput (this=0x36e7fe0) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kio/kio/slave.cpp:344
#41 0x00007fed812eccec in KIO::Slave::qt_metacall (this=0x36e7fe0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fff23727430)
    at /home/pano/Projekte/build/kdelibs/src/build/kio/slave.moc:82
#42 0x00007fed8226762f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#43 0x00007fed81224da7 in KIO::ConnectionPrivate::dequeue (this=0x3717c00) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kio/kio/connection.cpp:82
#44 0x00007fed81224e5d in KIO::Connection::qt_metacall (this=0x3588d70, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x2562d40)
    at /home/pano/Projekte/build/kdelibs/src/build/kio/connection.moc:79
#45 0x00007fed82264ec9 in QObject::event(QEvent*) () from /usr/lib/libQtCore.so.4
#46 0x00007fed82bc9e84 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib/libQtGui.so.4
#47 0x00007fed82bcdf6a in QApplication::notify(QObject*, QEvent*) () from /usr/lib/libQtGui.so.4
#48 0x00007fed838902d6 in KApplication::notify (this=0x7fff23727ec0, receiver=0x3588d70, event=0x3207110) at /home/pano/Projekte/build/kdelibs/src/kdelibs-4.4.80/kdeui/kernel/kapplication.cpp:302
#49 0x00007fed8225379c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/libQtCore.so.4
#50 0x00007fed82256e3d in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/lib/libQtCore.so.4
#51 0x00007fed8227bad3 in ?? () from /usr/lib/libQtCore.so.4
#52 0x00007fed7c4e9b33 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#53 0x00007fed7c4ea310 in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#54 0x00007fed7c4ea5ad in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#55 0x00007fed8227c00f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#56 0x00007fed82c694be in ?? () from /usr/lib/libQtGui.so.4
#57 0x00007fed82252b82 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#58 0x00007fed82252dbc in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#59 0x00007fed822570eb in QCoreApplication::exec() () from /usr/lib/libQtCore.so.4
#60 0x0000000000408dd5 in _start ()

Comment 2 Tommi Tervo 2010-06-05 16:33:29 UTC

Could you post valgrind log from the crash:
valgrind --error-limit=no --num-callers=50 --freelist-vol=100000000

Comment 3 Maksim Orlovich 2010-06-05 17:33:57 UTC

Created attachment 47706 [details]
Potential fix

Hi.. Could you please try with the attached patch and see if it fixes it?

Comment 4 Maksim Orlovich 2010-06-05 17:35:12 UTC

*** Bug 237967 has been marked as a duplicate of this bug. ***

Comment 5 Andrea Iacovitti 2013-11-17 09:56:06 UTC

*** Bug 246656 has been marked as a duplicate of this bug. ***