Bug 251449

Application: konqueror (4.4.5 (KDE 4.4.5))
KDE Platform Version: 4.4.5 (KDE 4.4.5)
Qt Version: 4.6.3
Operating System: Linux 2.6.32-5-686 i686
Distribution: Debian GNU/Linux testing (squeeze)

-- Information about the crash:
1) Open Konqueror with Webkit
2) Visit http://www.codeweavers.com/products/
3) Wait for the page to fully load

Expected Result:
    Page loads - or at least no crash.

Actual Result:
    BAAAANG.

The crash can be reproduced every time.

 -- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
[Current thread is 1 (Thread 0xb53d6710 (LWP 4038))]

Thread 3 (Thread 0xb14d8b70 (LWP 4039)):
#0  0xb7735424 in __kernel_vsyscall ()
#1  0xb5807f7f in __pthread_cond_wait (cond=0xb29a5c4c, mutex=0xb29a5c34) at pthread_cond_wait.c:153
#2  0xb75d70bd in __pthread_cond_wait (cond=0xb29a5c4c, mutex=0xb29a5c34) at forward.c:139
#3  0xb1bf5077 in WTF::TCMalloc_PageHeap::scavengerThread (this=0xb29a0b60) at ../JavaScriptCore/wtf/FastMalloc.cpp:2299
#4  0xb1bf50c1 in WTF::TCMalloc_PageHeap::runScavengerThread (context=0xb29a0b60) at ../JavaScriptCore/wtf/FastMalloc.cpp:1433
#5  0xb5803955 in start_thread (arg=0xb14d8b70) at pthread_create.c:300
#6  0xb75ca10e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 2 (Thread 0xb0b24b70 (LWP 4041)):
#0  0xb7735424 in __kernel_vsyscall ()
#1  0xb5808482 in pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_timedwait.S:179
#2  0xb75d7114 in __pthread_cond_timedwait (cond=0x876f7e0, mutex=0x876f7c8, abstime=0xb0b242a0) at forward.c:152
#3  0xb681af3f in QWaitConditionPrivate::wait (this=0x87a880c, mutex=0x87a8808, time=30000) at thread/qwaitcondition_unix.cpp:85
#4  QWaitCondition::wait (this=0x87a880c, mutex=0x87a8808, time=30000) at thread/qwaitcondition_unix.cpp:159
#5  0xb680ef6b in QThreadPoolThread::run (this=0x8776958) at concurrent/qthreadpool.cpp:140
#6  0xb6819fbe in QThreadPrivate::start (arg=0x8776958) at thread/qthread_unix.cpp:248
#7  0xb5803955 in start_thread (arg=0xb0b24b70) at pthread_create.c:300
#8  0xb75ca10e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 1 (Thread 0xb53d6710 (LWP 4038)):
[KCrash Handler]
#6  0xae7a55f5 in gdk_pixbuf_new_from_data () from /usr/lib/libgdk_pixbuf-2.0.so.0
#7  0xae7acdaf in gdk_pixbuf_from_pixdata () from /usr/lib/libgdk_pixbuf-2.0.so.0
#8  0xae7ad073 in gdk_pixbuf_new_from_inline () from /usr/lib/libgdk_pixbuf-2.0.so.0
#9  0xaecb3335 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#10 0xaecb1d8e in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#11 0xaecb628e in NP_Initialize () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#12 0xb20f1520 in WebCore::PluginPackage::load (this=0xafced1c0) at plugins/qt/PluginPackageQt.cpp:131
#13 0xb20f2362 in WebCore::PluginPackage::fetchInfo (this=0xafced1c0) at plugins/qt/PluginPackageQt.cpp:40
#14 0xb1fa3c29 in WebCore::PluginPackage::createPackage (path=..., lastModified=@0xbffe11cc) at plugins/PluginPackage.cpp:159
#15 0xb1fa1dba in WebCore::PluginDatabase::refresh (this=0x8a4bcd0) at plugins/PluginDatabase.cpp:121
#16 0xb1fa2821 in WebCore::PluginDatabase::installedPlugins (populate=true) at plugins/PluginDatabase.cpp:54
#17 0xb20b437d in WebCore::PluginData::initPlugins (this=0xaf9cd140) at plugins/qt/PluginDataQt.cpp:67
#18 0xb1f4cabb in PluginData (this=0xaf9cd140, page=0xb0bd3280) at plugins/PluginData.cpp:32
#19 0xb1f3c5ea in WebCore::PluginData::create (this=0xb0bd3280) at plugins/PluginData.h:49
#20 WebCore::Page::pluginData (this=0xb0bd3280) at page/Page.cpp:378
#21 0xb1f4ceec in WebCore::PluginArray::getPluginData (this=0xafa7e2e8) at plugins/PluginArray.cpp:97
#22 0xb1f4cf11 in WebCore::PluginArray::length (this=0xafa7e2e8) at plugins/PluginArray.cpp:42
#23 0xb247366e in WebCore::jsPluginArrayLength (exec=0xafdec160, slot=...) at generated/JSPluginArray.cpp:214
#24 0xb1b0cf0c in JSC::JSValue::get(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&) const () from /usr/lib/libQtWebKit.so.4
#25 0xb1b0d17e in JSC::JSValue::get(JSC::ExecState*, JSC::Identifier const&) const () from /usr/lib/libQtWebKit.so.4
#26 0xb1b1517a in cti_op_get_by_val () from /usr/lib/libQtWebKit.so.4
#27 0xafdd93dc in ?? ()
#28 0xb1b3108f in JSC::JITCode::execute (this=0xafdec160, program=0xaf9afbd0, callFrame=0x8a657fc, scopeChain=0xafaf5378, thisObj=0xafd91e00, exception=0xbffe1684)
    at ../JavaScriptCore/jit/JITCode.h:79
#29 JSC::Interpreter::execute (this=0xafdec160, program=0xaf9afbd0, callFrame=0x8a657fc, scopeChain=0xafaf5378, thisObj=0xafd91e00, exception=0xbffe1684)
    at ../JavaScriptCore/interpreter/Interpreter.cpp:613
#30 0xb1b8b519 in JSC::evaluate (exec=0x8a657fc, scopeChain=..., source=..., thisValue=...) at ../JavaScriptCore/runtime/Completion.cpp:60
#31 0xb1c5a4fe in WebCore::evaluateInWorld (exec=0x8a657fc, scopeChain=..., sourceCode=..., thisValue=..., isolatedWorld=0xb0209730) at bindings/js/JSDOMBinding.cpp:834
#32 0xb1c67b7a in WebCore::ScriptController::evaluateInWorld (this=0xb0be97f8, sourceCode=..., world=0xb0209730) at bindings/js/ScriptController.cpp:121
#33 0xb1c67dc9 in WebCore::ScriptController::evaluate (this=0xb0be97f8, sourceCode=...) at bindings/js/ScriptController.cpp:142
#34 0xb1c780d5 in WebCore::ScriptController::executeScript (this=0xb0be97f8, sourceCode=...) at bindings/ScriptControllerBase.cpp:46
#35 0xb1e64a68 in WebCore::HTMLTokenizer::scriptExecution (this=0xb0c10400, sourceCode=..., state=...) at html/HTMLTokenizer.cpp:571
#36 0xb1e66035 in WebCore::HTMLTokenizer::scriptHandler (this=0xb0c10400, state=...) at html/HTMLTokenizer.cpp:507
#37 0xb1e69c6b in WebCore::HTMLTokenizer::parseNonHTMLText (this=0xb0c10400, src=..., state=...) at html/HTMLTokenizer.cpp:353
#38 0xb1e6c221 in WebCore::HTMLTokenizer::parseTag (this=0xb0c10400, src=..., state=...) at html/HTMLTokenizer.cpp:1573
#39 0xb1e6c990 in WebCore::HTMLTokenizer::write (this=0xb0c10400, str=..., appendData=false) at html/HTMLTokenizer.cpp:1770
#40 0xb1e65225 in WebCore::HTMLTokenizer::notifyFinished (this=0xb0c10400) at html/HTMLTokenizer.cpp:2091
#41 0xb1ea65ac in WebCore::CachedScript::checkNotify (this=0x8a87f50) at loader/CachedScript.cpp:105
#42 0xb1ee14ca in WebCore::Loader::Host::didFinishLoading (this=0xafb600c0, loader=0xaf9b4a00) at loader/loader.cpp:367
#43 0xb1ef5930 in WebCore::SubresourceLoader::didFinishLoading (this=0xaf9b4a00) at loader/SubresourceLoader.cpp:184
#44 0xb1ef0811 in WebCore::ResourceLoader::didFinishLoading (this=0xaf9b4a00) at loader/ResourceLoader.cpp:403
#45 0xb209a81c in WebCore::QNetworkReplyHandler::finish (this=0x8a54cf0) at platform/network/qt/QNetworkReplyHandler.cpp:237
#46 0xb209ae83 in WebCore::QNetworkReplyHandler::qt_metacall (this=0x8a54cf0, _c=QMetaObject::InvokeMetaMethod, _id=5, _a=0x8963710) at .moc/release-shared/moc_QNetworkReplyHandler.cpp:82
#47 0xb691b7da in QMetaObject::metacall (object=0x8a54cf0, cl=QMetaObject::InvokeMetaMethod, idx=5, argv=0x8963710) at kernel/qmetaobject.cpp:237
#48 0xb6925d66 in QMetaCallEvent::placeMetaCall (this=0x8a000c0, object=0x8a54cf0) at kernel/qobject.cpp:561
#49 0xb6926e2e in QObject::event (this=0x8a54cf0, e=0x8a000c0) at kernel/qobject.cpp:1248
#50 0xb5de55cc in QApplicationPrivate::notify_helper (this=0x84128e0, receiver=0x8a54cf0, e=0x8a000c0) at kernel/qapplication.cpp:4302
#51 0xb5dec15e in QApplication::notify (this=0xbffe2af0, receiver=0x8a54cf0, e=0x8a000c0) at kernel/qapplication.cpp:3706
#52 0xb6e65c5a in KApplication::notify(QObject*, QEvent*) () from /usr/lib/libkdeui.so.5
#53 0xb69164fb in QCoreApplication::notifyInternal (this=0xbffe2af0, receiver=0x8a54cf0, event=0x8a000c0) at kernel/qcoreapplication.cpp:726
#54 0xb6919f5c in QCoreApplication::sendEvent (receiver=0x0, event_type=0, data=0x83faf48) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#55 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x83faf48) at kernel/qcoreapplication.cpp:1367
#56 0xb691a0dd in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1260
#57 0xb69425af in QCoreApplication::sendPostedEvents (s=0x8414d10) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#58 postEventSourceDispatch (s=0x8414d10) at kernel/qeventdispatcher_glib.cpp:276
#59 0xb57612f5 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#60 0xb5764fd8 in ?? () from /lib/libglib-2.0.so.0
#61 0xb57651b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#62 0xb69420a5 in QEventDispatcherGlib::processEvents (this=0x83fac08, flags=...) at kernel/qeventdispatcher_glib.cpp:412
#63 0xb5ea3f25 in QGuiEventDispatcherGlib::processEvents (this=0x83fac08, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#64 0xb6914b19 in QEventLoop::processEvents (this=0xbffe2944, flags=) at kernel/qeventloop.cpp:149
#65 0xb6914f6a in QEventLoop::exec (this=0xbffe2944, flags=...) at kernel/qeventloop.cpp:201
#66 0xb691a19f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1003
#67 0xb5de5667 in QApplication::exec () at kernel/qapplication.cpp:3581
#68 0xb771a9ff in kdemain () from /usr/lib/kde4/libkdeinit/libkdeinit4_konqueror.so
#69 0x080485fb in _start ()

This bug may be a duplicate of or related to bug 241702.

Possible duplicates by query: bug 250726, bug 246457, bug 246455, bug 246199, bug 245945.

Reported using DrKonqi