Bug 281871

Summary: Malloc detects a corrupted linked list when exiting rekonq.
Product: [Unmaintained] rekonq Reporter: jem
Component: generalAssignee: Andrea Diamantini <adjam7>
Status: RESOLVED WORKSFORME    
Severity: crash CC: angelo
Priority: NOR    
Version First Reported In: 0.7.0   
Target Milestone: 0.9   
Platform: Compiled Sources   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description jem 2011-09-12 12:16:41 UTC 
Application: rekonq (0.7.0)
KDE Platform Version: 4.7.1 (4.7.1) (Compiled from sources)
Qt Version: 4.7.4
Operating System: Linux 3.0.4-gentoo x86_64
Distribution (Platform): Gentoo Packages

-- Information about the crash:
- What I was doing when the application crashed:

Using rekonq to browse plus.google.com. Rekonq crashes when the (single) browser window is closed, i.e. when rekonq exits.

The crash can be reproduced some of the time.

-- Backtrace:
Application: rekonq (kdeinit4), signal: Aborted
82	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7fb20b7b4760 (LWP 2789))]

Thread 8 (Thread 0x7fb1f21bd700 (LWP 2790)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007fb1fb5c10ec in scavengerThread (this=0x7fb1fbe2ff20) at wtf/FastMalloc.cpp:2378
#2  WTF::TCMalloc_PageHeap::runScavengerThread (context=0x7fb1fbe2ff20) at wtf/FastMalloc.cpp:1497
#3  0x00007fb20a058ebc in start_thread (arg=0x7fb1f21bd700) at pthread_create.c:301
#4  0x00007fb208dcde0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 7 (Thread 0x7fb1f18bc700 (LWP 2791)):
#0  0x00007fb20a05b554 in __pthread_mutex_lock (mutex=0x2649ed8) at pthread_mutex_lock.c:61
#1  0x00007fb205fdd9ca in g_main_context_iteration (context=0x2649ed0, may_block=1) at gmain.c:3154
#2  0x00007fb20a3fcc56 in QEventDispatcherGlib::processEvents (this=0x264b770, flags=<optimized out>) at kernel/qeventdispatcher_glib.cpp:424
#3  0x00007fb20a3d0e12 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#4  0x00007fb20a3d1094 in QEventLoop::exec (this=0x7fb1f18bbe20, flags=...) at kernel/qeventloop.cpp:201
#5  0x00007fb20a2e6ee4 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:498
#6  0x00007fb20a2e9765 in QThreadPrivate::start (arg=0x264b190) at thread/qthread_unix.cpp:331
#7  0x00007fb20a058ebc in start_thread (arg=0x7fb1f18bc700) at pthread_create.c:301
#8  0x00007fb208dcde0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 6 (Thread 0x7fb1f082a700 (LWP 2792)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007fb1fa34dc8c in QTWTF::TCMalloc_PageHeap::scavengerThread (this=0x7fb1fa670180) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:2359
#2  0x00007fb1fa34dcc9 in QTWTF::TCMalloc_PageHeap::runScavengerThread (context=0x7fb1fa67e254) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:1464
#3  0x00007fb20a058ebc in start_thread (arg=0x7fb1f082a700) at pthread_create.c:301
#4  0x00007fb208dcde0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 5 (Thread 0x7fb1eb2ad700 (LWP 2793)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007fb20a2e9dd3 in wait (time=18446744073709551615, this=0x2519340) at thread/qwaitcondition_unix.cpp:88
#2  QWaitCondition::wait (this=<optimized out>, mutex=0x2519460, time=18446744073709551615) at thread/qwaitcondition_unix.cpp:160
#3  0x00007fb1f95b3085 in ThreadWeaver::WeaverImpl::blockThreadUntilJobsAreBeingAssigned (this=0x25191d0, th=0x27be2a0) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/threadweaver/Weaver/WeaverImpl.cpp:365
#4  0x00007fb1f95b58e3 in ThreadWeaver::WorkingHardState::applyForWork (this=0x25194c0, th=0x27be2a0) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/threadweaver/Weaver/WorkingHardState.cpp:71
#5  0x00007fb1f95b4547 in ThreadWeaver::ThreadRunHelper::run (this=0x7fb1eb2ace30, parent=0x25191d0, th=0x27be2a0) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/threadweaver/Weaver/Thread.cpp:87
#6  0x00007fb1f95b45d8 in ThreadWeaver::Thread::run (this=0x27be2a0) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/threadweaver/Weaver/Thread.cpp:142
#7  0x00007fb20a2e9765 in QThreadPrivate::start (arg=0x27be2a0) at thread/qthread_unix.cpp:331
#8  0x00007fb20a058ebc in start_thread (arg=0x7fb1eb2ad700) at pthread_create.c:301
#9  0x00007fb208dcde0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 4 (Thread 0x7fb1e1e7a700 (LWP 2816)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007fb1e1e9f1c3 in queue_processor(void*) () from /opt/icedtea6-web-bin/lib64/IcedTeaPlugin.so
#2  0x00007fb20a058ebc in start_thread (arg=0x7fb1e1e7a700) at pthread_create.c:301
#3  0x00007fb208dcde0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 3 (Thread 0x7fb1e1679700 (LWP 2818)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007fb1e1e9f1c3 in queue_processor(void*) () from /opt/icedtea6-web-bin/lib64/IcedTeaPlugin.so
#2  0x00007fb20a058ebc in start_thread (arg=0x7fb1e1679700) at pthread_create.c:301
#3  0x00007fb208dcde0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7fb1e0e78700 (LWP 2819)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007fb1e1e9f1c3 in queue_processor(void*) () from /opt/icedtea6-web-bin/lib64/IcedTeaPlugin.so
#2  0x00007fb20a058ebc in start_thread (arg=0x7fb1e0e78700) at pthread_create.c:301
#3  0x00007fb208dcde0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7fb20b7b4760 (LWP 2789)):
[KCrash Handler]
#6  0x00007fb208d29b35 in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#7  0x00007fb208d2aeda in *__GI_abort () at abort.c:92
#8  0x00007fb208d6492a in __libc_message (do_abort=2, fmt=0x7fb208e42978 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:186
#9  0x00007fb208d69edd in malloc_printerr (action=3, str=0x7fb208e3fae9 "corrupted double-linked list", ptr=<optimized out>) at malloc.c:6283
#10 0x00007fb208d6a312 in malloc_consolidate (av=0x7fb209082ea0) at malloc.c:5161
#11 0x00007fb208d6be9c in _int_malloc (av=0x7fb209082ea0, bytes=32768) at malloc.c:4373
#12 0x00007fb208d6e742 in *__GI___libc_malloc (bytes=32768) at malloc.c:3660
#13 0x00007fb20a2eb825 in QByteArray::realloc (this=0x2fc3fb8, alloc=32736) at tools/qbytearray.cpp:1428
#14 0x00007fb20a2eb93d in QByteArray::resize (this=0x2fc3fb8, size=16384) at tools/qbytearray.cpp:1396
#15 0x00007fb20a369493 in reserve (bytes=5, this=0x25f6728) at ../../src/corelib/tools/qringbuffer_p.h:158
#16 QFile::writeData (this=<optimized out>, data=0x266a1e8 "2789\n", len=5) at io/qfile.cpp:1646
#17 0x00007fb20a36d7e8 in QIODevice::write (this=0x2578900, data=0x266a1e8 "2789\n", maxSize=<optimized out>) at io/qiodevice.cpp:1362
#18 0x00007fb20a375c3d in write (data=..., this=<optimized out>) at ../../src/corelib/io/qiodevice.h:127
#19 QTextStreamPrivate::flushWriteBuffer (this=0x2ffa300) at io/qtextstream.cpp:679
#20 0x00007fb20a376549 in flush (stream=...) at io/qtextstream.cpp:2879
#21 0x00007fb20a9426a3 in operator<< (f=<optimized out>, s=<optimized out>) at /usr/include/qt4/QtCore/qtextstream.h:291
#22 KLockFile::Private::writeIntoLockFile (this=0x2578900, file=..., componentData=<optimized out>) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kdecore/io/klockfile_unix.cpp:182
#23 0x00007fb20a942ca6 in KLockFile::Private::lockFileOExcl (this=0x2578900, st_buf=...) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kdecore/io/klockfile_unix.cpp:291
#24 0x00007fb20a9431f0 in KLockFile::lock (this=0x2679230, options=...) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kdecore/io/klockfile_unix.cpp:390
#25 0x00007fb20a7d0b8f in KConfigIniBackend::lock (this=0x241a720, componentData=<optimized out>) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kdecore/config/kconfigini.cpp:573
#26 0x00007fb20a7bd932 in lockLocal (this=0x24261b0) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kdecore/config/kconfig.cpp:103
#27 KConfig::sync (this=0x2419550) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kdecore/config/kconfig.cpp:430
#28 0x00007fb20a7dad6a in KCoreConfigSkeleton::writeConfig (this=0x2561be0) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kdecore/config/kcoreconfigskeleton.cpp:1084
#29 0x00007fb1f6ddff5a in Application::~Application (this=0x7fffc1223d40, __in_chrg=<optimized out>) at /usr/src/debug/www-client/rekonq-0.7.0/rekonq-0.7.0/src/application.cpp:89
#30 0x00007fb1f6e60c09 in kdemain (argc=1, argv=0x2356370) at /usr/src/debug/www-client/rekonq-0.7.0/rekonq-0.7.0/src/main.cpp:213
#31 0x0000000000407566 in launch (argc=1, _name=0x23accd8 "/usr/bin/rekonq", args=<optimized out>, cwd=0x0, envc=<optimized out>, envs=<optimized out>, reset_env=false, tty=0x0, avoid_loops=false, startup_id_str=0x23acd03 "pandora;1315828946;206909;3861_TIME24471545") at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kinit/kinit.cpp:734
#32 0x0000000000408120 in handle_launcher_request (sock=<optimized out>, who=<optimized out>) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kinit/kinit.cpp:1226
#33 0x0000000000408845 in handle_requests (waitForPid=0) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kinit/kinit.cpp:1419
#34 0x0000000000409491 in main (argc=2, argv=0x7fffc1225538, envp=0x7fffc1225550) at /usr/src/debug/kde-base/kdelibs-4.7.1/kdelibs-4.7.1/kinit/kinit.cpp:1907

Possible duplicates by query: bug 208881.

Reported using DrKonqi
Comment 1 Andrea Diamantini 2011-09-16 14:06:16 UTC 
It works here:
rekonq 0.7.80
KDE SC 4.7.x
QtWebKit 2.2 (available with Qt 4.8)
Comment 2 Andrea Diamantini 2012-07-06 19:52:06 UTC 
*** Bug 287592 has been marked as a duplicate of this bug. ***