Bug 268341

Summary: Complete Konqueror crash on phoronix.com
Product: [Applications] konqueror Reporter: Neil Skrypuch <kde>
Component: khtmlAssignee: Konqueror Developers <konq-bugs>
Status: RESOLVED WORKSFORME    
Severity: crash CC: ansla80, arne_bab, box, christopherheiny, desintegr, DonaldEdwardWinslow, elwellj, gabrimonfa, intemann, justin.zobel, kde, m.wege, mail, moltonel, oleksandr, peshkoff, rasasi78, richts, robby.engelmann, rossi.f, smithjd15, vivo75+kde, yodayado
Priority: NOR    
Version: 5.0.97   
Target Milestone: ---   
Platform: Fedora RPMs   
OS: Linux   
Latest Commit: Version Fixed In:
Attachments: New crash information added by DrKonqi
New crash information added by DrKonqi
New crash information added by DrKonqi
New crash information added by DrKonqi
New crash information added by DrKonqi
Valgrind log.
New crash information added by DrKonqi
KDE bug assistant

Description Neil Skrypuch 2011-03-13 04:04:43 UTC 
Application: konqueror (4.6.00 (4.6.0))
KDE Platform Version: 4.6.00 (4.6.0) (Compiled from sources)
Qt Version: 4.7.1
Operating System: Linux 2.6.36-gentoo x86_64
Distribution: "Gentoo Base System release 1.12.14"

-- Information about the crash:
- What I was doing when the application crashed:

I browsed to http://phoronix.com and before the page loaded completely, Konqueror crashed. This is almost certainly due to some ads on that page, as this wasn't happening as recently as a few days ago, but today it has happened six times in a row now.

Note: This sounds very similar to bug #243739, but the backtrace is different, so I suspect it's not the same bug.

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0x7fa20b31b760 (LWP 2401))]

Thread 5 (Thread 0x7fa1efb77710 (LWP 2436)):
#0  0x00007fa20895c913 in select () at ../sysdeps/unix/syscall-template.S:82
#1  0x00007fa209f15ddc in QProcessManager::run (this=0x7fa20a269f60) at io/qprocess_unix.cpp:245
#2  0x00007fa209e47ede in QThreadPrivate::start (arg=0x7fa20a269f60) at thread/qthread_unix.cpp:285
#3  0x00007fa209bb78c4 in start_thread (arg=<value optimized out>) at pthread_create.c:297
#4  0x00007fa2089631dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 4 (Thread 0x7fa1ef278710 (LWP 2440)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:211
#1  0x00007fa209e48a01 in wait (this=<value optimized out>, mutex=0x40019f0, time=30000) at thread/qwaitcondition_unix.cpp:86
#2  QWaitCondition::wait (this=<value optimized out>, mutex=0x40019f0, time=30000) at thread/qwaitcondition_unix.cpp:160
#3  0x00007fa209e3dac1 in QThreadPoolThread::run (this=0x126e720) at concurrent/qthreadpool.cpp:140
#4  0x00007fa209e47ede in QThreadPrivate::start (arg=0x126e720) at thread/qthread_unix.cpp:285
#5  0x00007fa209bb78c4 in start_thread (arg=<value optimized out>) at pthread_create.c:297
#6  0x00007fa2089631dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 3 (Thread 0x7fa1edc11710 (LWP 2442)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:211
#1  0x00007fa209e48a01 in wait (this=<value optimized out>, mutex=0x40c9a10, time=30000) at thread/qwaitcondition_unix.cpp:86
#2  QWaitCondition::wait (this=<value optimized out>, mutex=0x40c9a10, time=30000) at thread/qwaitcondition_unix.cpp:160
#3  0x00007fa209e3dac1 in QThreadPoolThread::run (this=0x40c9bc0) at concurrent/qthreadpool.cpp:140
#4  0x00007fa209e47ede in QThreadPrivate::start (arg=0x40c9bc0) at thread/qthread_unix.cpp:285
#5  0x00007fa209bb78c4 in start_thread (arg=<value optimized out>) at pthread_create.c:297
#6  0x00007fa2089631dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7fa1f0d5f710 (LWP 2447)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:211
#1  0x00007fa209e48a01 in wait (this=<value optimized out>, mutex=0x40c9a10, time=30000) at thread/qwaitcondition_unix.cpp:86
#2  QWaitCondition::wait (this=<value optimized out>, mutex=0x40c9a10, time=30000) at thread/qwaitcondition_unix.cpp:160
#3  0x00007fa209e3dac1 in QThreadPoolThread::run (this=0x28f8c30) at concurrent/qthreadpool.cpp:140
#4  0x00007fa209e47ede in QThreadPrivate::start (arg=0x28f8c30) at thread/qthread_unix.cpp:285
#5  0x00007fa209bb78c4 in start_thread (arg=<value optimized out>) at pthread_create.c:297
#6  0x00007fa2089631dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7fa20b31b760 (LWP 2401)):
[KCrash Handler]
#6  isNull (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:550
#7  operator! (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:556
#8  KHTMLPart::loadObjectElement (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/khtml_part.cpp:4198
#9  0x00007fa1f41cd354 in DOM::HTMLObjectBaseElementImpl::computeContent (this=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/html/html_objectimpl.cpp:538
#10 0x00007fa1f414c801 in DOM::NodeBaseImpl::appendChild (this=0x18d9ef0, newChild=0x20a56e0, exceptioncode=@0x7ffffd1ae5b8) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom_nodeimpl.cpp:1795
#11 0x00007fa1f42f2eda in DOMNodeProtoFunc::callAsFunction (this=0x7fa1f0528980, exec=0x7ffffd1af010, thisObj=<value optimized out>, args=...) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/ecma/kjs_dom.cpp:642
#12 0x00007fa1f3a22ee1 in call (exec=0x7ffffd1af010, codeBlock=..., parentExec=0x7ffffd1afab0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/object.h:626
#13 KJS::Machine::runBlock (exec=0x7ffffd1af010, codeBlock=..., parentExec=0x7ffffd1afab0) at codes.def:1223
#14 0x00007fa1f3a017d1 in KJS::FunctionImp::callAsFunction (this=0x7fa20b1a43c0, exec=0x7ffffd1afab0, thisObj=<value optimized out>, args=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/function.cpp:172
#15 0x00007fa1f3a22ee1 in call (exec=0x7ffffd1afab0, codeBlock=..., parentExec=0x7ffffd1b0550) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/object.h:626
#16 KJS::Machine::runBlock (exec=0x7ffffd1afab0, codeBlock=..., parentExec=0x7ffffd1b0550) at codes.def:1223
#17 0x00007fa1f3a017d1 in KJS::FunctionImp::callAsFunction (this=0x7fa20b1a4440, exec=0x7ffffd1b0550, thisObj=<value optimized out>, args=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/function.cpp:172
#18 0x00007fa1f3a22ee1 in call (exec=0x7ffffd1b0550, codeBlock=..., parentExec=0x1976a70) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/object.h:626
#19 KJS::Machine::runBlock (exec=0x7ffffd1b0550, codeBlock=..., parentExec=0x1976a70) at codes.def:1223
#20 0x00007fa1f3a017d1 in KJS::FunctionImp::callAsFunction (this=0x7fa20b1a45c0, exec=0x1976a70, thisObj=<value optimized out>, args=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/function.cpp:172
#21 0x00007fa1f4355039 in call (this=0x2e75850, evt=...) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/object.h:626
#22 KJS::JSEventListener::handleEvent (this=0x2e75850, evt=...) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/ecma/kjs_events.cpp:108
#23 0x00007fa1f4174e7e in DOM::EventTargetImpl::handleLocalEvents (this=<value optimized out>, evt=<value optimized out>, useCapture=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom2_eventsimpl.cpp:62
#24 0x00007fa1f414b9db in DOM::NodeImpl::dispatchGenericEvent (this=0x18f2cc8, evt=0x2362470) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom_nodeimpl.cpp:469
#25 0x00007fa1f414babe in DOM::NodeImpl::dispatchEvent (this=0x18f2cc8, evt=0x2362470, exceptioncode=@0x7ffffd1b088c, tempEvent=true) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom_nodeimpl.cpp:401
#26 0x00007fa1f414d339 in DOM::NodeImpl::dispatchHTMLEvent (this=0x18f2cc8, _id=36, canBubbleArg=<value optimized out>, cancelableArg=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom_nodeimpl.cpp:520
#27 0x00007fa1f40c3f9b in KHTMLPart::slotFinishedParsing (this=0x40d8e00) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/khtml_part.cpp:2208
#28 0x00007fa1f40e2faf in KHTMLPart::qt_metacall (this=0x40d8e00, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7ffffd1b0a00) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/khtml/khtml_part.moc:281
#29 0x00007fa209f511bf in QMetaObject::activate (sender=0x18f2cb0, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272
#30 0x00007fa1f4131c40 in DOM::DocumentImpl::qt_metacall (this=0x18f2cb0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/khtml/dom_docimpl.moc:74
#31 0x00007fa1f41a7e08 in DOM::HTMLDocumentImpl::qt_metacall (this=0x7ffffd1add70, _c=QMetaObject::InvokeMetaMethod, _id=109, _a=0x2c5b0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/khtml/html_documentimpl.moc:69
#32 0x00007fa209f511bf in QMetaObject::activate (sender=0x1702ae0, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272
#33 0x00007fa1f4196447 in khtml::HTMLTokenizer::write (this=0x1702ae0, str=<value optimized out>, appendData=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/html/htmltokenizer.cpp:1893
#34 0x00007fa1f4192d10 in khtml::HTMLTokenizer::notifyFinished (this=0x1702ae0, finishedObj=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/html/htmltokenizer.cpp:2136
#35 0x00007fa1f42b3eaf in khtml::CachedScript::checkNotify (this=0x20a4e60) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/misc/loader.cpp:397
#36 0x00007fa1f42b7ddc in khtml::CachedScript::data (this=0x20a4e60, buffer=<value optimized out>, eof=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/misc/loader.cpp:389
#37 0x00007fa1f42b7927 in khtml::Loader::slotFinished (this=0x16cc060, job=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/misc/loader.cpp:1262
#38 0x00007fa1f42b7c33 in khtml::Loader::qt_metacall (this=0x16cc060, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7ffffd1b10b0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/khtml/loader.moc:141
#39 0x00007fa209f511bf in QMetaObject::activate (sender=0x2d5c700, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272
#40 0x00007fa20a3ac7b2 in KJob::result (this=0x7ffffd1add70, _t1=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/kdecore/kjob.moc:194
#41 0x00007fa20a3aca50 in KJob::emitResult (this=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kdecore/jobs/kjob.cpp:312
#42 0x00007fa2037bbf33 in KIO::SimpleJob::slotFinished (this=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/job.cpp:525
#43 0x00007fa2037bc842 in KIO::TransferJob::slotFinished (this=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/job.cpp:1118
#44 0x00007fa2037ba311 in KIO::TransferJob::qt_metacall (this=0x2d5c700, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7ffffd1b14f0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/kio/jobclasses.moc:367
#45 0x00007fa209f511bf in QMetaObject::activate (sender=0x166d9a0, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272
#46 0x00007fa20386dc9d in KIO::SlaveInterface::dispatch (this=0x166d9a0, _cmd=104, rawdata=...) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/slaveinterface.cpp:173
#47 0x00007fa20386acdd in KIO::SlaveInterface::dispatch (this=0x166d9a0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/slaveinterface.cpp:89
#48 0x00007fa20385e6f6 in KIO::Slave::gotInput (this=0x166d9a0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/slave.cpp:348
#49 0x00007fa20385e8dc in KIO::Slave::qt_metacall (this=0x166d9a0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7ffffd1b1980) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/kio/slave.moc:82
#50 0x00007fa209f511bf in QMetaObject::activate (sender=0x40f9990, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272
#51 0x00007fa203788c47 in KIO::ConnectionPrivate::dequeue (this=0x18341a0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/connection.cpp:82
#52 0x00007fa203788d6d in KIO::Connection::qt_metacall (this=0x40f9990, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x24c6c20) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/kio/connection.moc:79
#53 0x00007fa209f4b26e in QObject::event (this=0x40f9990, e=0x7ffffd1add70) at kernel/qobject.cpp:1211
#54 0x00007fa2090c54ac in QApplicationPrivate::notify_helper (this=0x12b81c0, receiver=0x40f9990, e=0x2f08280) at kernel/qapplication.cpp:4445
#55 0x00007fa2090ca8ed in QApplication::notify (this=0x7ffffd1b25e0, receiver=0x40f9990, e=0x2f08280) at kernel/qapplication.cpp:4324
#56 0x00007fa20ad13216 in KApplication::notify (this=0x7ffffd1b25e0, receiver=0x40f9990, event=0x2f08280) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kdeui/kernel/kapplication.cpp:311
#57 0x00007fa209f395db in QCoreApplication::notifyInternal (this=0x7ffffd1b25e0, receiver=0x40f9990, event=0x2f08280) at kernel/qcoreapplication.cpp:732
#58 0x00007fa209f3c561 in sendEvent (receiver=0x0, event_type=<value optimized out>, data=0x1223b30) at kernel/qcoreapplication.h:215
#59 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=<value optimized out>, data=0x1223b30) at kernel/qcoreapplication.cpp:1373
#60 0x00007fa209f65a83 in sendPostedEvents (s=0x12bad20) at kernel/qcoreapplication.h:220
#61 postEventSourceDispatch (s=0x12bad20) at kernel/qeventdispatcher_glib.cpp:277
#62 0x00007fa2057833d1 in g_main_dispatch (context=0x12bac40) at gmain.c:2149
#63 g_main_context_dispatch (context=0x12bac40) at gmain.c:2702
#64 0x00007fa205787308 in g_main_context_iterate (context=0x12bac40, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2780
#65 0x00007fa2057874bc in g_main_context_iteration (context=0x12bac40, may_block=1) at gmain.c:2843
#66 0x00007fa209f655c3 in QEventDispatcherGlib::processEvents (this=0x12b8180, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:415
#67 0x00007fa209176d7e in QGuiEventDispatcherGlib::processEvents (this=0x7ffffd1add70, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:204
#68 0x00007fa209f38332 in QEventLoop::processEvents (this=<value optimized out>, flags=) at kernel/qeventloop.cpp:149
#69 0x00007fa209f38714 in QEventLoop::exec (this=0x7ffffd1b23d0, flags=) at kernel/qeventloop.cpp:201
#70 0x00007fa209f3c78b in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1009
#71 0x00007fa1fb3f23c2 in kdemain (argc=<value optimized out>, argv=<value optimized out>) at /var/tmp/portage/kde-base/konqueror-4.6.0/work/konqueror-4.6.0/konqueror/src/konqmain.cpp:219
#72 0x00000000004080ea in launch (argc=2, _name=<value optimized out>, args=<value optimized out>, cwd=<value optimized out>, envc=-48549440, envs=<value optimized out>, reset_env=false, tty=0x0, avoid_loops=false, startup_id_str=0x1276984 "i7-920;1299984916;334502;13015_TIME526562887") at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kinit/kinit.cpp:730
#73 0x0000000000408cf0 in handle_launcher_request (sock=8, who=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kinit/kinit.cpp:1222
#74 0x000000000040921b in handle_requests (waitForPid=19305288) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kinit/kinit.cpp:1415
#75 0x0000000000409df1 in main (argc=4, argv=<value optimized out>, envp=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kinit/kinit.cpp:1903

Possible duplicates by query: bug 243739.

Reported using DrKonqi
Comment 1 Vincent de Phily 2011-05-25 14:49:57 UTC 
Created attachment 60318 [details]
New crash information added by DrKonqi

konqueror (4.6.3 (4.6.3)) on KDE Platform 4.6.3 (4.6.3) using Qt 4.7.3

Here's the same crash, with a more specific url.

$ konqueror 'http://feedproxy.google.com/~r/Phoronix/~3/NZxxlx8frUE/vr.php'
konqueror(23789)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "libkhtmlpart.so"
konqueror(23789)/kdeui (kdelibs): Attempt to use QAction "kwrite" with KXMLGUIFactory! 
konqueror(23789)/kdeui (kdelibs): Attempt to use QAction "mozilla-firefox-3" with KXMLGUIFactory! 
konqueror(23789)/kdeui (kdelibs): Attempt to use QAction "" with KXMLGUIFactory! 
QPainter::begin: Widget painting can only begin as a result of a paintEvent
QPainter::translate: Painter not active
QPainter::setClipRect: Painter not active
konqueror(23789)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "libnsplugin.so"
Connecting to deprecated signal QDBusConnectionInterface::serviceOwnerChanged(QString,QString,QString)
nspluginviewer(23799)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "/usr/lib/firefox/plugins/libflashplayer.so"
nspluginviewer(23799)/nspluginviewer (plugin): Can't create plugin class 

konqueror(23789)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "libnsplugin.so"
nspluginviewer(23799)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "/usr/lib/firefox/plugins/libflashplayer.so"
nspluginviewer(23799)/nspluginviewer (plugin): Can't create plugin class 

KCrash: Application 'konqueror' crashing...
KCrash: Attempting to start /usr/lib64/kde4/libexec/drkonqi from kdeinit
sock_file=/home/work/.kde4/socket-moltowork/kdeinit4__0

-- Backtrace (Reduced):
#6  isNull (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:558
#7  operator! (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:564
#8  KHTMLPart::loadObjectElement (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /home/portagetmp/portage/kde-base/kdelibs-4.6.3-r1/work/kdelibs-4.6.3/khtml/khtml_part.cpp:4201
#9  0x00007feadb6ee654 in DOM::HTMLObjectBaseElementImpl::computeContent (this=<value optimized out>) at /home/portagetmp/portage/kde-base/kdelibs-4.6.3-r1/work/kdelibs-4.6.3/khtml/html/html_objectimpl.cpp:538
#10 0x00007feadb65aef1 in DOM::NodeBaseImpl::appendChild (this=0x7feaf5639930, newChild=0x7feaf5f79960, exceptioncode=@0x7fff4a8cd198) at /home/portagetmp/portage/kde-base/kdelibs-4.6.3-r1/work/kdelibs-4.6.3/khtml/xml/dom_nodeimpl.cpp:1795
Comment 2 Tommi Tervo 2011-06-26 20:39:49 UTC 
This is very hard to reproduce inside the valgrind, here is the vg warnings from current master (kdelibs 06ea57b3a0f193185f185d4c652d1bd4d6d246f5)

==715== Invalid read of size 4
==715==    at 0xC098B10: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (khtml_part.cpp:4194)
==715==    by 0xC1A381B: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:538
==715==    by 0xC1A0DC4: DOM::HTMLPartContainerElementImpl::computeContentIfNeeded() (html_objectimpl.cpp:89)
==715==    by 0xC1A0D8A: DOM::HTMLPartContainerElementImpl::close() (html_objectimpl.cpp:80)
==715==    by 0xC11F577: DOM::NodeBaseImpl::appendChild(DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1795)
==715==    by 0xC2FCA30: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:642)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC359044: KJS::JSEventListener::handleEvent(DOM::Event&) (kjs_events.cpp:108)
==715==    by 0xC143898: DOM::EventTargetImpl::handleLocalEvents(DOM::EventImpl*, bool) (dom2_eventsimpl.cpp:62)
==715==    by 0xC11B619: DOM::NodeImpl::dispatchGenericEvent(DOM::EventImpl*, int&) (dom_nodeimpl.cpp:469)
==715==    by 0xC11B273: DOM::NodeImpl::dispatchEvent(DOM::EventImpl*, int&, bool) (dom_nodeimpl.cpp:401)
==715==    by 0xC11B939: DOM::NodeImpl::dispatchHTMLEvent(int, bool, bool) (dom_nodeimpl.cpp:520)
==715==    by 0xC08D688: KHTMLPart::slotFinishedParsing() (khtml_part.cpp:2206)
==715==    by 0xC0ABFDC: KHTMLPart::qt_metacall(QMetaObject::Call, int, void**) (khtml_part.moc:281)
==715==    by 0x50D407C: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237)
==715==    by 0x50E34CB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278)
==715==    by 0xC112D00: DOM::DocumentImpl::finishedParsing() (dom_docimpl.moc:85)
==715==    by 0xC112CBB: DOM::DocumentImpl::qt_metacall(QMetaObject::Call, int, void**) (dom_docimpl.moc:74)
==715==    by 0xC17F001: DOM::HTMLDocumentImpl::qt_metacall(QMetaObject::Call, int, void**) (html_documentimpl.moc:69)
==715==    by 0x50D407C: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237)
==715==    by 0x50E34CB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278)
==715==    by 0xC13F5B4: khtml::Tokenizer::finishedParsing() (xml_tokenizer.moc:83)
==715==    by 0xC168E25: khtml::HTMLTokenizer::end() (htmltokenizer.cpp:1932)
==715==    by 0xC168C0E: khtml::HTMLTokenizer::write(khtml::TokenizerString const&, bool) (htmltokenizer.cpp:1894)
==715==    by 0xC169C82: khtml::HTMLTokenizer::notifyFinished(khtml::CachedObject*) (htmltokenizer.cpp:2137)
==715==    by 0xC2B6E23: khtml::CachedScript::checkNotify() (loader.cpp:397)
==715==    by 0xC2B6D5C: khtml::CachedScript::data(QBuffer&, bool) (loader.cpp:389)
==715==    by 0xC2BACAC: khtml::Loader::slotFinished(KJob*) (loader.cpp:1262)
==715==    by 0xC2BD34B: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:141)
==715==    by 0x50D407C: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237)
==715==    by 0x50E34CB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278)
==715==    by 0x4E0A00D: KJob::result(KJob*) (kjob.moc:194)
==715==    by 0x4E0961C: KJob::emitResult() (kjob.cpp:312)
==715==    by 0x435883C: KIO::SimpleJob::slotFinished() (job.cpp:494)
==715==    by 0x435B563: KIO::TransferJob::slotFinished() (job.cpp:1081)
==715==    by 0x4362C55: KIO::TransferJob::qt_metacall(QMetaObject::Call, int, void**) (jobclasses.moc:369)
==715==    by 0x50D407C: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237)
==715==    by 0x50E34CB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278)
==715==    by 0x4408FD0: KIO::SlaveInterface::finished() (slaveinterface.moc:171)
==715==    by 0x440659B: KIO::SlaveInterface::dispatch(int, QByteArray const&) (slaveinterface.cpp:172)
==715==    by 0x440623D: KIO::SlaveInterface::dispatch() (slaveinterface.cpp:88)
==715==  Address 0xa8cb244 is 28 bytes inside a block of size 32 free'd
==715==    at 0x402920B: realloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==715==    by 0x4FCA602: qRealloc(void*, unsigned int) (qmalloc.cpp:65)
==715==    by 0x4FF17F6: QListData::realloc(int) (qlist.cpp:221)
==715==    by 0x4FF18BB: QListData::append(int) (qlist.cpp:243)
==715==    by 0x4FF1942: QListData::append() (qlist.cpp:253)
==715==    by 0x4FF1BDF: QListData::insert(int) (qlist.cpp:305)
==715==    by 0xC0B4C42: QList<khtml::ChildFrame*>::insert(QList<khtml::ChildFrame*>::iterator, khtml::ChildFrame* const&) (qlist.h:441)
==715==    by 0xC098A1F: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (khtml_part.cpp:4187)
==715==    by 0xC1A381B: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:538)
==715==    by 0xC1A0DC4: DOM::HTMLPartContainerElementImpl::computeContentIfNeeded() (html_objectimpl.cpp:89)
==715==    by 0xC1A0D8A: DOM::HTMLPartContainerElementImpl::close() (html_objectimpl.cpp:80)
==715==    by 0xC11EF5F: DOM::NodeBaseImpl::replaceChild(DOM::NodeImpl*, DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1648)
==715==    by 0xC2FCBF3: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:652)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC84A6E1: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223)
==715==    by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==715==    by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626)
==715==    by 0xC359044: KJS::JSEventListener::handleEvent(DOM::Event&) (kjs_events.cpp:108)
==715==    by 0xC143898: DOM::EventTargetImpl::handleLocalEvents(DOM::EventImpl*, bool) (dom2_eventsimpl.cpp:62)
==715==    by 0xC11B619: DOM::NodeImpl::dispatchGenericEvent(DOM::EventImpl*, int&) (dom_nodeimpl.cpp:469)
==715==    by 0xC11BA6F: DOM::NodeImpl::dispatchWindowEvent(DOM::EventImpl*) (dom_nodeimpl.cpp:542)
Comment 3 Tommi Tervo 2011-06-28 09:34:51 UTC 
Possible dupe: https://bugs.kde.org/show_bug.cgi?id=240684
Do you have plugins enabled or not?
Comment 4 Neil Skrypuch 2011-06-28 13:23:05 UTC 
I have kde-base/nsplugins installed, but I don't install Flash, and Java is disabled by default. So, the situation is likely similar to bug 240684.
Comment 5 Vincent de Phily 2011-06-28 18:58:19 UTC 
Using the testcase from bug #240684 I get the same crash (same backtrace) as I pasted in this bug. Disabling plugins fixes the crash. So yes, this looks like a dupe.
Comment 6 Christophe Marin 2011-08-28 14:40:25 UTC 
*** Bug 280874 has been marked as a duplicate of this bug. ***
Comment 7 Christophe Marin 2011-09-03 10:23:35 UTC 
*** Bug 281233 has been marked as a duplicate of this bug. ***
Comment 8 Christophe Marin 2011-10-29 12:35:17 UTC 
*** Bug 284997 has been marked as a duplicate of this bug. ***
Comment 9 Tommi Tervo 2011-12-10 09:39:29 UTC 
*** Bug 288625 has been marked as a duplicate of this bug. ***
Comment 10 Christophe Marin 2012-03-31 12:36:45 UTC 
*** Bug 296142 has been marked as a duplicate of this bug. ***
Comment 11 Andrei Slavoiu 2012-04-10 10:55:38 UTC 
Created attachment 70283 [details]
New crash information added by DrKonqi

kontact (4.8.0) on KDE Platform 4.8.1 (4.8.1) using Qt 4.7.4

- What I was doing when the application crashed:

Reading a Phoronix article in Akregator, just turned to page 2.

-- Backtrace (Reduced):
#6  isNull (this=0x1000000c1) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:568
#7  operator! (this=0x1000000c1) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:574
#8  KHTMLPart::loadObjectElement (this=<optimized out>, frame=<optimized out>, url=..., serviceType=..., params=...) at /var/tmp/portage/kde-base/kdelibs-4.8.1-r2/work/kdelibs-4.8.1/khtml/khtml_part.cpp:4202
#9  0x00007f231309b56c in DOM::HTMLObjectBaseElementImpl::computeContent (this=0x7be44e0) at /var/tmp/portage/kde-base/kdelibs-4.8.1-r2/work/kdelibs-4.8.1/khtml/html/html_objectimpl.cpp:538
#10 0x00007f231301d061 in DOM::NodeBaseImpl::appendChild (this=0x73ff1c0, newChild=0x7be44f0, exceptioncode=@0x7fffe301b008) at /var/tmp/portage/kde-base/kdelibs-4.8.1-r2/work/kdelibs-4.8.1/khtml/xml/dom_nodeimpl.cpp:1801
Comment 12 Andrei Slavoiu 2012-04-10 11:13:01 UTC 
Note: the page that caused the crash in the previous comment was http://www.phoronix.com/scan.php?page=article&item=ubuntu_1204_kvmhist&num=2
I didn't have the URL handy at that time.
Comment 13 Robby Engelmann 2012-04-10 17:40:25 UTC 
Created attachment 70291 [details]
New crash information added by DrKonqi

kontact (4.8.2) on KDE Platform 4.8.2 (4.8.2) using Qt 4.8.1

- What I was doing when the application crashed:
opening a phoronix article with akregator

-- Backtrace (Reduced):
#7  isNull (this=<optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:580
#8  operator! (this=<optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:586
#9  KHTMLPart::loadObjectElement (this=0xcf18b90, frame=0xdb1cce0, url=..., serviceType=..., params=...) at ../../khtml/khtml_part.cpp:4202
#10 0xab2b8c5c in DOM::HTMLObjectBaseElementImpl::computeContent (this=0xdb1cce0) at ../../khtml/html/html_objectimpl.cpp:536
#11 0xab2b4779 in computeContentIfNeeded (this=0xdb1cce0) at ../../khtml/html/html_objectimpl.cpp:89
Comment 14 Jekyll Wu 2012-05-29 01:08:32 UTC 
*** Bug 295572 has been marked as a duplicate of this bug. ***
Comment 15 gabriele monfardini 2012-06-06 09:40:05 UTC 
Created attachment 71618 [details]
New crash information added by DrKonqi

akregator (4.8.3) on KDE Platform 4.8.3 (4.8.3) using Qt 4.8.1

- What I was doing when the application crashed:
Opening tabs in phoronix in the background


- Custom settings of the application:
I've recently set Left Mouse click on "Open Background tab" instead of "Open tab".
Maybe this is not related with the bug

-- Backtrace (Reduced):
#6  isNull (this=0x1000000c1) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:580
#7  operator! (this=0x1000000c1) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:586
#8  KHTMLPart::loadObjectElement (this=0x10fe230, frame=0x5059b30, url=..., serviceType=..., params=...) at ../../khtml/khtml_part.cpp:4202
#9  0x00007f41ad90018d in DOM::HTMLObjectBaseElementImpl::computeContent (this=0x5059b30) at ../../khtml/html/html_objectimpl.cpp:536
#10 0x00007f41ad882e9f in DOM::NodeBaseImpl::appendChild (this=0x6df8150, newChild=0x5059b40, exceptioncode=@0x7fffad2bcb18: 0) at ../../khtml/xml/dom_nodeimpl.cpp:1801
Comment 16 Jekyll Wu 2012-06-30 03:46:00 UTC 
*** Bug 302772 has been marked as a duplicate of this bug. ***
Comment 17 Donald 2012-07-14 03:59:58 UTC 
Created attachment 72518 [details]
New crash information added by DrKonqi

akregator (4.8.4) on KDE Platform 4.8.4 (4.8.4) using Qt 4.8.2

- What I was doing when the application crashed:

I opened a Phoronix article from Akregator. The article started to load with a window that said "close advertisement". Before I could close the ad, Akregator segfaulted.

- Unusual behavior I noticed:

After I restarted Akregator, I noticed that the article did not show in the list of unread articles--perhaps this was refreshed.

-- Backtrace (Reduced):
#6  operator== (value=0, this=0x9c) at /usr/include/QtCore/qbasicatomic.h:70
#7  isNull (this=0x11ed2350) at /usr/include/QtCore/qsharedpointer_impl.h:580
#8  operator! (this=0x11ed2350) at /usr/include/QtCore/qsharedpointer_impl.h:586
#9  KHTMLPart::loadObjectElement (this=0x9716750, frame=0x111ddc60, url=..., serviceType=..., params=...) at /usr/src/debug/kdelibs-4.8.4/khtml/khtml_part.cpp:4202
#10 0x0000003914f07c4d in DOM::HTMLObjectBaseElementImpl::computeContent (this=0x111ddc60) at /usr/src/debug/kdelibs-4.8.4/khtml/html/html_objectimpl.cpp:536
Comment 18 Raúl 2012-07-23 11:07:27 UTC 
Created attachment 72698 [details]
Valgrind log.

Find attached a valgrind log, as Tommi said valgrind runs didn't make akregator(in my case) crash.

Akregator 1.6.6 on KDE 4.8.3. Qt 4.8.2.

This is what I think it's the relevant part:
==13604== Invalid read of size 8
==13604==    at 0x21C19055: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (khtml_part.cpp:4202)
==13604==    by 0x21D00D5C: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:536)
==13604==    by 0x21C8690E: DOM::NodeBaseImpl::appendChild(DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1801)
==13604==    by 0x21E15C02: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:642)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x21E71769: KJS::JSEventListener::handleEvent(DOM::Event&) (object.h:626)
==13604==    by 0x21CA98FC: DOM::EventTargetImpl::handleLocalEvents(DOM::EventImpl*, bool) (dom2_eventsimpl.cpp:62)
==13604==  Address 0x4e86f360 is 32 bytes inside a block of size 40 free'd
==13604==    at 0x4C28CCE: realloc (vg_replace_malloc.c:632)
==13604==    by 0x72E4735: QListData::realloc(int) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.2)
==13604==    by 0x72E47E6: QListData::append(int) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.2)
==13604==    by 0x21C18F39: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (qlist.h:454)
==13604==    by 0x21D00D5C: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:536)
==13604==    by 0x21C86D77: DOM::NodeBaseImpl::replaceChild(DOM::NodeImpl*, DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1654)
==13604==    by 0x21E15AE3: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:652)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604== 
==13604== Invalid read of size 8
==13604==    at 0x21C190A6: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (khtml_part.cpp:4203)
==13604==    by 0x21D00D5C: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:536)
==13604==    by 0x21C8690E: DOM::NodeBaseImpl::appendChild(DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1801)
==13604==    by 0x21E15C02: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:642)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x21E71769: KJS::JSEventListener::handleEvent(DOM::Event&) (object.h:626)
==13604==    by 0x21CA98FC: DOM::EventTargetImpl::handleLocalEvents(DOM::EventImpl*, bool) (dom2_eventsimpl.cpp:62)
==13604==  Address 0x4e86f360 is 32 bytes inside a block of size 40 free'd
==13604==    at 0x4C28CCE: realloc (vg_replace_malloc.c:632)
==13604==    by 0x72E4735: QListData::realloc(int) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.2)
==13604==    by 0x72E47E6: QListData::append(int) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.2)
==13604==    by 0x21C18F39: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (qlist.h:454)
==13604==    by 0x21D00D5C: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:536)
==13604==    by 0x21C86D77: DOM::NodeBaseImpl::replaceChild(DOM::NodeImpl*, DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1654)
==13604==    by 0x21E15AE3: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:652)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
==13604==    by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172)
==13604==    by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
Comment 19 Jekyll Wu 2012-09-01 15:42:03 UTC 
*** Bug 306137 has been marked as a duplicate of this bug. ***
Comment 20 Jekyll Wu 2012-11-05 13:38:38 UTC 
*** Bug 309524 has been marked as a duplicate of this bug. ***
Comment 21 Christoph Feck 2013-02-20 23:37:25 UTC 
*** Bug 315440 has been marked as a duplicate of this bug. ***
Comment 22 Rolf Eike Beer 2013-04-07 13:31:13 UTC 
Created attachment 78705 [details]
New crash information added by DrKonqi

kontact (4.10.2) on KDE Platform 4.10.2 "release 553" using Qt 4.8.4

The crash happened when I tried to open a kde-apps.org application page in Akregator. Opening the page in Konqueror now doesn't cause the crash.

-- Backtrace (Reduced):
#6  isNull (this=0x1000000c1) at /usr/include/QtCore/qsharedpointer_impl.h:580
#7  operator! (this=0x1000000c1) at /usr/include/QtCore/qsharedpointer_impl.h:586
#8  KHTMLPart::loadObjectElement (this=0x2fbaa00, frame=0x8b4f100, url=..., serviceType=..., params=...) at /usr/src/debug/kdelibs-4.10.2/khtml/khtml_part.cpp:4216
#9  0x00007f921aae759d in DOM::HTMLObjectBaseElementImpl::computeContent (this=0x8b4f100) at /usr/src/debug/kdelibs-4.10.2/khtml/html/html_objectimpl.cpp:536
#10 0x00007f921aa6bfaf in DOM::NodeBaseImpl::appendChild (this=0x6261fb0, newChild=0x8b4f110, exceptioncode=@0x7fff731967f8: 0) at /usr/src/debug/kdelibs-4.10.2/khtml/xml/dom_nodeimpl.cpp:1801
Comment 23 m.wege 2013-05-08 07:49:24 UTC 
This crash is happening quite often.
Comment 24 Andrea Iacovitti 2013-11-15 23:24:24 UTC 
*** Bug 243739 has been marked as a duplicate of this bug. ***
Comment 25 Andrea Iacovitti 2013-11-15 23:27:14 UTC 
*** Bug 318120 has been marked as a duplicate of this bug. ***
Comment 26 Andrea Iacovitti 2013-11-15 23:53:02 UTC 
*** Bug 235179 has been marked as a duplicate of this bug. ***
Comment 27 Jason Elwell 2014-07-30 12:44:52 UTC 
Created attachment 88028 [details]
KDE bug assistant

Surfing with Akregator.  Does this have to do with an ATI/mesa bug and the Phoronix ad system during changes to alpha in the browser?
Comment 28 Justin Zobel 2020-12-14 01:38:14 UTC 
Thank you for the crash reports.

As it has been a while since this was reported, can you please test and confirm if this issue is still occurring or if this bug report can be marked as resolved.

I have set the bug status to "needsinfo" pending your response, please change back to "reported" or "resolved/worksforme" when you respond, thank you.
Comment 29 Marek Paśnikowski 2020-12-14 01:45:54 UTC 
It's been months since I last used KDE and even longer since I last used konqueror. I am not able to test.


> 14 grudnia 2020 02:38 Justin Zobel <bugzilla_noreply@kde.org> napisał(a):
> 
>  
> https://bugs.kde.org/show_bug.cgi?id=268341
> 
> Justin Zobel <justin.zobel@gmail.com> changed:
> 
>            What    |Removed                     |Added
> ----------------------------------------------------------------------------
>                  CC|                            |justin.zobel@gmail.com
>          Resolution|---                         |WAITINGFORINFO
>              Status|CONFIRMED                   |NEEDSINFO
> 
> --- Comment #28 from Justin Zobel <justin.zobel@gmail.com> ---
> Thank you for the crash reports.
> 
> As it has been a while since this was reported, can you please test and confirm
> if this issue is still occurring or if this bug report can be marked as
> resolved.
> 
> I have set the bug status to "needsinfo" pending your response, please change
> back to "reported" or "resolved/worksforme" when you respond, thank you.
> 
> -- 
> You are receiving this mail because:
> You are on the CC list for the bug.
Comment 30 Donald 2020-12-14 01:55:31 UTC 
I just tried to trigger the same bug I reported 8 years ago from Akregator. Using Akregator 5.13.2 tonight,I had no problem opening a Phoronix article.

Works for me,

Donald
Comment 31 Christopher Heiny 2020-12-14 03:08:06 UTC 
I'm able to browse Phoronix w/Konqueror 20.08.3 on Fedora 32.
Comment 32 Alex 2020-12-14 10:36:56 UTC 
(In reply to Justin Zobel from comment #28)
> Thank you for the crash reports.
> 
> As it has been a while since this was reported, can you please test and
> confirm if this issue is still occurring or if this bug report can be marked
> as resolved.
> 
> I have set the bug status to "needsinfo" pending your response, please
> change back to "reported" or "resolved/worksforme" when you respond, thank
> you.

Sorry, I'm not using konqueror for a few years (>5)
Comment 33 Justin Zobel 2020-12-15 04:09:44 UTC 
Several users have confirmed now working, setting to resolved. If any other users are still experiencing this issue feel free to reopen.