Bug 251653

Application: konqueror (4.4.2 (KDE 4.4.2))
KDE Platform Version: 4.4.2 (KDE 4.4.2)
Qt Version: 4.6.2
Operating System: Linux 2.6.32-24-generic i686
Distribution: Ubuntu 10.04.1 LTS

-- Information about the crash:
When clicking on a bookmark on my personal bookmarks toolbar konqeuror crashes. So far this happened twice. The site I was surfing when clicking was different as was the bookmark I was clicking. I cannot tell, if konqueror started to load the site. For me it seemed as if it crashed right after clicking on the bookmark. All of these bookmarks work most of the time.

The crash can be reproduced some of the time.

 -- Backtrace:
Application: Konqueror (kdeinit4), signal: Aborted
[Current thread is 1 (Thread 0xb77f0aa0 (LWP 30692))]

Thread 5 (Thread 0xb4ad5b70 (LWP 30693)):
#0  0x00ebb422 in __kernel_vsyscall ()
#1  0x06141d33 in ?? () from /lib/tls/i686/cmov/libc.so.6
#2  0x060d8697 in ?? () from /lib/tls/i686/cmov/libc.so.6
Backtrace stopped: previous frame identical to this frame (corrupt stack?)

Thread 4 (Thread 0xb0a3cb70 (LWP 30705)):
#0  0x00ebb422 in __kernel_vsyscall ()
#1  0x06141d33 in ?? () from /lib/tls/i686/cmov/libc.so.6
#2  0x060d8697 in ?? () from /lib/tls/i686/cmov/libc.so.6
Backtrace stopped: previous frame identical to this frame (corrupt stack?)

Thread 3 (Thread 0xa838eb70 (LWP 30786)):
#0  0x00ebb422 in __kernel_vsyscall ()
#1  0x0011a342 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0x0047620f in QWaitConditionPrivate::wait (this=0xa5936dc, mutex=0xa5936d8, time=30000) at thread/qwaitcondition_unix.cpp:85
#3  QWaitCondition::wait (this=0xa5936dc, mutex=0xa5936d8, time=30000) at thread/qwaitcondition_unix.cpp:159
#4  0x0046a2eb in QThreadPoolThread::run (this=0xa6483d8) at concurrent/qthreadpool.cpp:140
#5  0x0047532e in QThreadPrivate::start (arg=0xa6483d8) at thread/qthread_unix.cpp:248
#6  0x0011596e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0x06134a4e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 2 (Thread 0xb228fb70 (LWP 30790)):
#0  0x00ebb422 in __kernel_vsyscall ()
#1  0x0011a342 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0x0047620f in QWaitConditionPrivate::wait (this=0xa5936dc, mutex=0xa5936d8, time=30000) at thread/qwaitcondition_unix.cpp:85
#3  QWaitCondition::wait (this=0xa5936dc, mutex=0xa5936d8, time=30000) at thread/qwaitcondition_unix.cpp:159
#4  0x0046a2eb in QThreadPoolThread::run (this=0xa597798) at concurrent/qthreadpool.cpp:140
#5  0x0047532e in QThreadPrivate::start (arg=0xa597798) at thread/qthread_unix.cpp:248
#6  0x0011596e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#7  0x06134a4e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 1 (Thread 0xb77f0aa0 (LWP 30692)):
[KCrash Handler]
#6  0x00ebb422 in __kernel_vsyscall ()
#7  0x06091651 in raise () from /lib/tls/i686/cmov/libc.so.6
#8  0x06094a82 in abort () from /lib/tls/i686/cmov/libc.so.6
#9  0x060c849d in ?? () from /lib/tls/i686/cmov/libc.so.6
#10 0x060d2591 in ?? () from /lib/tls/i686/cmov/libc.so.6
#11 0x060d3de8 in ?? () from /lib/tls/i686/cmov/libc.so.6
#12 0x060d6ecd in free () from /lib/tls/i686/cmov/libc.so.6
#13 0x02894c9a in WTF::fastFree (this=0xbf8fb240, __in_chrg=<value optimized out>) at ../../kjs/wtf/FastMalloc.h:45
#14 WTF::VectorBufferBase<KJS::FunctionBodyNode::SymbolInfo>::deallocateBuffer (this=0xbf8fb240, __in_chrg=<value optimized out>) at ../../kjs/wtf/Vector.h:263
#15 ~VectorBuffer (this=0xbf8fb240, __in_chrg=<value optimized out>) at ../../kjs/wtf/Vector.h:319
#16 ~Vector (this=0xbf8fb240, __in_chrg=<value optimized out>) at ../../kjs/wtf/Vector.h:421
#17 ~FunctionBodyNode (this=0xbf8fb240, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:1027
#18 0x028394ac in KJS::Node::deref (this=0xb756208) at ../../kjs/nodes.cpp:121
#19 0x02894f5d in ~RefPtr (this=0xb756270, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#20 ~FuncExprNode (this=0xb756270, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:1113
#21 0x028394ac in KJS::Node::deref (this=0xb756270) at ../../kjs/nodes.cpp:121
#22 0x02876731 in KJS::PropertyNode::~PropertyNode() () from /usr/lib/libkjs.so.4
#23 0x028394ac in KJS::Node::deref (this=0xc6f9f40) at ../../kjs/nodes.cpp:121
#24 0x02877520 in KJS::PropertyListNode::~PropertyListNode() () from /usr/lib/libkjs.so.4
#25 0x028394ac in KJS::Node::deref (this=0xc6f9f58) at ../../kjs/nodes.cpp:121
#26 0x0287754d in KJS::PropertyListNode::~PropertyListNode() () from /usr/lib/libkjs.so.4
#27 0x028394ac in KJS::Node::deref (this=0xb4b2e98) at ../../kjs/nodes.cpp:121
#28 0x02893491 in ~RefPtr (this=0xbe6b7a0, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#29 ~ObjectLiteralNode (this=0xbe6b7a0, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:408
#30 0x028394ac in KJS::Node::deref (this=0xbe6b7a0) at ../../kjs/nodes.cpp:121
#31 0x02875f3e in KJS::ArgumentListNode::~ArgumentListNode() () from /usr/lib/libkjs.so.4
#32 0x028394ac in KJS::Node::deref (this=0xbe6b7b0) at ../../kjs/nodes.cpp:121
#33 0x02875c91 in KJS::ArgumentsNode::~ArgumentsNode() () from /usr/lib/libkjs.so.4
#34 0x028394ac in KJS::Node::deref (this=0xbe6b7c8) at ../../kjs/nodes.cpp:121
#35 0x02893cc1 in ~RefPtr (this=0xbe6b7d8, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#36 ~FunctionCallReferenceNode (this=0xbe6b7d8, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:523
#37 0x028394ac in KJS::Node::deref (this=0xbe6b7d8) at ../../kjs/nodes.cpp:121
#38 0x02876681 in KJS::ExprStatementNode::~ExprStatementNode() () from /usr/lib/libkjs.so.4
#39 0x028394ac in KJS::Node::deref (this=0xbe6b7f0) at ../../kjs/nodes.cpp:121
#40 0x028938bc in ~RefPtr (this=0xbe6b808, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#41 ~SourceElementsNode (this=0xbe6b808, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:1153
#42 0x028394ac in KJS::Node::deref (this=0xbe6b808) at ../../kjs/nodes.cpp:121
#43 0x02893675 in WTF::RefPtr<KJS::SourceElementsNode>::operator= (this=0xaee73d8, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:128
#44 ~ListRefPtr (this=0xaee73d8, __in_chrg=<value optimized out>) at ../../kjs/wtf/ListRefPtr.h:44
#45 0x028938ad in ~SourceElementsNode (this=0xaee73c8, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:1153
#46 0x028394ac in KJS::Node::deref (this=0xaee73c8) at ../../kjs/nodes.cpp:121
#47 0x02894cd0 in ~RefPtr (this=0xc3a6e70, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#48 ~BlockNode (this=0xc3a6e70, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:795
#49 ~FunctionBodyNode (this=0xc3a6e70, __in_chrg=<value optimized out>) at ../../kjs/nodes.h:1027
#50 0x028394ac in KJS::Node::deref (this=0xc3a6e70) at ../../kjs/nodes.cpp:121
#51 0x02864bb1 in ~RefPtr (this=0xb0207840, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#52 ~FunctionImp (this=0xb0207840, __in_chrg=<value optimized out>) at ../../kjs/function.cpp:72
#53 0x02837b77 in KJS::Collector::collect () at ../../kjs/collector.cpp:720
#54 0x0286cc47 in KJS::Interpreter::collect () at ../../kjs/interpreter.cpp:743
#55 0x08ed0c25 in KJS::KJSProxyImpl::clear (this=0xa5bcac8) at ../../khtml/ecma/kjs_proxy.cpp:224
#56 0x08c5f727 in KHTMLPart::clear (this=0xa0f8e28) at ../../khtml/khtml_part.cpp:1558
#57 0x08c64d1e in KHTMLPart::begin (this=0xa0f8e28, url=..., xOffset=0, yOffset=0) at ../../khtml/khtml_part.cpp:2008
#58 0x08c621b7 in KHTMLPart::slotData (this=0xa0f8e28, kio_job=0xb1accf0, data=...) at ../../khtml/khtml_part.cpp:1699
#59 0x08c7b376 in KHTMLPart::qt_metacall (this=0xa0f8e28, _c=QMetaObject::InvokeMetaMethod, _id=19, _a=0xbf8fc304) at ./khtml_part.moc:277
#60 0x0057cc9a in QMetaObject::metacall (object=0xa0f8e28, cl=30692, idx=33, argv=0xbf8fc304) at kernel/qmetaobject.cpp:237
#61 0x0058b3d5 in QMetaObject::activate (sender=0xb1accf0, m=0xbbf2d0, local_signal_index=0, argv=0xbf8fc304) at kernel/qobject.cpp:3293
#62 0x00a0a999 in KIO::TransferJob::data (this=0xb1accf0, _t1=0xb1accf0, _t2=...) at ./jobclasses.moc:388
#63 0x00a0d7f2 in KIO::TransferJob::slotData (this=0xb1accf0, _data=...) at ../../kio/kio/job.cpp:953
#64 0x00a11365 in KIO::TransferJob::qt_metacall (this=0xb1accf0, _c=QMetaObject::InvokeMetaMethod, _id=48, _a=0xbf8fc498) at ./jobclasses.moc:368
#65 0x0057cc9a in QMetaObject::metacall (object=0xb1accf0, cl=30692, idx=48, argv=0xbf8fc498) at kernel/qmetaobject.cpp:237
#66 0x0058b3d5 in QMetaObject::activate (sender=0xb9d9240, m=0xbc1f44, local_signal_index=0, argv=0xbf8fc498) at kernel/qobject.cpp:3293
#67 0x00add823 in KIO::SlaveInterface::data (this=0xb9d9240, _t1=...) at ./slaveinterface.moc:146
#68 0x00ae0aef in KIO::SlaveInterface::dispatch (this=0xb9d9240, _cmd=100, rawdata=...) at ../../kio/kio/slaveinterface.cpp:163
#69 0x00addbc3 in KIO::SlaveInterface::dispatch (this=0xb9d9240) at ../../kio/kio/slaveinterface.cpp:91
#70 0x00ad1088 in KIO::Slave::gotInput (this=0xb9d9240) at ../../kio/kio/slave.cpp:324
#71 0x00ad1293 in KIO::Slave::qt_metacall (this=0xb9d9240, _c=QMetaObject::InvokeMetaMethod, _id=30, _a=0xbf8fc77c) at ./slave.moc:82
#72 0x0057cc9a in QMetaObject::metacall (object=0xb9d9240, cl=30692, idx=30, argv=0xbf8fc77c) at kernel/qmetaobject.cpp:237
#73 0x0058b3d5 in QMetaObject::activate (sender=0xfd4d2b0, m=0xbbe820, local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3293
#74 0x009dbbd7 in KIO::Connection::readyRead (this=0xfd4d2b0) at ./connection.moc:92
#75 0x009ddf8e in KIO::ConnectionPrivate::dequeue (this=0xa6dbc28) at ../../kio/kio/connection.cpp:82
#76 0x009de0be in KIO::Connection::qt_metacall (this=0xfd4d2b0, _c=QMetaObject::InvokeMetaMethod, _id=5, _a=0xc6a54a8) at ./connection.moc:79
#77 0x0057cc9a in QMetaObject::metacall (object=0xfd4d2b0, cl=30692, idx=5, argv=0xc6a54a8) at kernel/qmetaobject.cpp:237
#78 0x00587336 in QMetaCallEvent::placeMetaCall (this=0xa8a18d8, object=0xfd4d2b0) at kernel/qobject.cpp:561
#79 0x005883fe in QObject::event (this=0xfd4d2b0, e=0xa8a18d8) at kernel/qobject.cpp:1248
#80 0x01bea4dc in QApplicationPrivate::notify_helper (this=0xa063a90, receiver=0xfd4d2b0, e=0xa8a18d8) at kernel/qapplication.cpp:4300
#81 0x01bf105e in QApplication::notify (this=0xbf8fd254, receiver=0xfd4d2b0, e=0xa8a18d8) at kernel/qapplication.cpp:3704
#82 0x0109bf2a in KApplication::notify (this=0xbf8fd254, receiver=0xfd4d2b0, event=0xa8a18d8) at ../../kdeui/kernel/kapplication.cpp:302
#83 0x00577a3b in QCoreApplication::notifyInternal (this=0xbf8fd254, receiver=0xfd4d2b0, event=0xa8a18d8) at kernel/qcoreapplication.cpp:704
#84 0x0057a473 in QCoreApplication::sendEvent (receiver=0x0, event_type=0, data=0x9fd5fc8) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#85 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x9fd5fc8) at kernel/qcoreapplication.cpp:1345
#86 0x0057a5dd in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1238
#87 0x005a3adf in QCoreApplication::sendPostedEvents (s=0xa065d10) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#88 postEventSourceDispatch (s=0xa065d10) at kernel/qeventdispatcher_glib.cpp:276
#89 0x092b15e5 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#90 0x092b52d8 in ?? () from /lib/libglib-2.0.so.0
#91 0x092b54b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#92 0x005a35d5 in QEventDispatcherGlib::processEvents (this=0x9fd6b48, flags=...) at kernel/qeventdispatcher_glib.cpp:412
#93 0x01caa135 in QGuiEventDispatcherGlib::processEvents (this=0x9fd6b48, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#94 0x00576059 in QEventLoop::processEvents (this=0xbf8fd034, flags=) at kernel/qeventloop.cpp:149
#95 0x005764aa in QEventLoop::exec (this=0xbf8fd034, flags=...) at kernel/qeventloop.cpp:201
#96 0x0057a69f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#97 0x01bea577 in QApplication::exec () at kernel/qapplication.cpp:3579
#98 0x07cf31ee in kdemain (argc=2, argv=0xa02ba58) at ../../../../apps/konqueror/src/konqmain.cpp:271
#99 0x0804e133 in launch (argc=<value optimized out>, _name=<value optimized out>, args=<value optimized out>, cwd=0x0, envc=0, envs=0xa0572cc "", reset_env=false, tty=0x0, avoid_loops=false, 
    startup_id_str=0xa0572d0 "khor;1284804543;438957;1662_TIME93754382") at ../../kinit/kinit.cpp:717
#100 0x0804ec6d in handle_launcher_request (sock=<value optimized out>, who=<value optimized out>) at ../../kinit/kinit.cpp:1209
#101 0x0804f190 in handle_requests (waitForPid=<value optimized out>) at ../../kinit/kinit.cpp:1402
#102 0x0804fe4f in main (argc=4, argv=0xbf8fde34, envp=0xbf8fde48) at ../../kinit/kinit.cpp:1845

Possible duplicates by query: bug 197878.

Reported using DrKonqi