Bug 288267

Application: konqueror (4.7.3 (4.7.3))
KDE Platform Version: 4.7.3 (4.7.3)
Qt Version: 4.8.0
Operating System: Linux 3.1.2-1.fc16.x86_64 x86_64
Distribution (Platform): Fedora RPMs

-- Information about the crash:
- What I was doing when the application crashed:
To reproduce consistantly: 
go to youtube.com 
click "sign in"

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
82	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7f3775028840 (LWP 11468))]

Thread 8 (Thread 0x7f3765ee5700 (LWP 11485)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x0000003f941973cc in WTF::TCMalloc_PageHeap::scavengerThread (this=0x3f94b90f80) at ../../../Source/JavaScriptCore/wtf/FastMalloc.cpp:2495
#2  0x0000003f941974f9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at ../../../Source/JavaScriptCore/wtf/FastMalloc.cpp:1618
#3  0x0000003f73a07d90 in start_thread (arg=0x7f3765ee5700) at pthread_create.c:309
#4  0x0000003f732eed0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 7 (Thread 0x7f37650a0700 (LWP 11486)):
#0  0x0000003f732e6373 in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x0000003f72e44f88 in g_main_context_poll (n_fds=1, fds=0x7f37600008c0, priority=<optimized out>, timeout=9120, context=0x7f37600009a0) at gmain.c:3386
#2  g_main_context_iterate (context=0x7f37600009a0, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3068
#3  0x0000003f72e4544c in g_main_context_iteration (context=0x7f37600009a0, may_block=1) at gmain.c:3136
#4  0x0000003f7c7a6896 in QEventDispatcherGlib::processEvents (this=0x7f37600013e0, flags=<optimized out>) at kernel/qeventdispatcher_glib.cpp:426
#5  0x0000003f7c776c82 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#6  0x0000003f7c776ed7 in QEventLoop::exec (this=0x7f376509fd40, flags=...) at kernel/qeventloop.cpp:204
#7  0x0000003f7c678ad7 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501
#8  0x0000003f7c67bb1b in QThreadPrivate::start (arg=0x39855d0) at thread/qthread_unix.cpp:298
#9  0x0000003f73a07d90 in start_thread (arg=0x7f37650a0700) at pthread_create.c:309
#10 0x0000003f732eed0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 6 (Thread 0x7f371ae7b700 (LWP 11499)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00007f371e664f5c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#2  0x00007f371e783a50 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#3  0x00007f371e6651bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#4  0x00007f371e66560e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#5  0x0000003f73a07d90 in start_thread (arg=0x7f371ae7b700) at pthread_create.c:309
#6  0x0000003f732eed0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 5 (Thread 0x7f371a67a700 (LWP 11500)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00007f371e664f5c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#2  0x00007f371e783a50 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#3  0x00007f371e6651bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#4  0x00007f371e66560e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#5  0x0000003f73a07d90 in start_thread (arg=0x7f371a67a700) at pthread_create.c:309
#6  0x0000003f732eed0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 4 (Thread 0x7f3719e79700 (LWP 11501)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00007f371e664f5c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#2  0x00007f371e783a50 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#3  0x00007f371e6651bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#4  0x00007f371e66560e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#5  0x0000003f73a07d90 in start_thread (arg=0x7f3719e79700) at pthread_create.c:309
#6  0x0000003f732eed0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 3 (Thread 0x7f3719678700 (LWP 11502)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00007f371e664f5c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#2  0x00007f371e783a50 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#3  0x00007f371e6651bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#4  0x00007f371e66560e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#5  0x0000003f73a07d90 in start_thread (arg=0x7f3719678700) at pthread_create.c:309
#6  0x0000003f732eed0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7f371858d700 (LWP 11519)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:216
#1  0x00007f371e664f31 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#2  0x00007f371e6865dd in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#3  0x00007f371e6651bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#4  0x00007f371e66560e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#5  0x0000003f73a07d90 in start_thread (arg=0x7f371858d700) at pthread_create.c:309
#6  0x0000003f732eed0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7f3775028840 (LWP 11468)):
[KCrash Handler]
#6  0x0000003f75e11449 in g_object_unref (_object=0x20ad060) at gobject.c:2740
#7  0x00007f371e662418 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#8  0x00007f371e6625dd in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#9  0x00007f371e65eca0 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#10 0x00007f371e658182 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so
#11 0x0000003f93d1442a in WebCore::PluginView::stop (this=0x7f37695b6340) at ../../../Source/WebCore/plugins/PluginView.cpp:385
#12 0x0000003f93d16021 in (anonymous namespace)::PluginView::~PluginView (this=0x7f37695b6340, __in_chrg=<optimized out>) at ../../../Source/WebCore/plugins/PluginView.cpp:301
#13 0x0000003f93d167b9 in (anonymous namespace)::PluginView::~PluginView (this=0x7f37695b6340, __in_chrg=<optimized out>) at ../../../Source/WebCore/plugins/PluginView.cpp:314
#14 0x0000003f93e00190 in deref (this=<optimized out>) at ../../../Source/JavaScriptCore/wtf/RefCounted.h:141
#15 derefIfNotNull<WebCore::Widget> (ptr=<optimized out>) at ../../../Source/JavaScriptCore/wtf/PassRefPtr.h:59
#16 derefIfNotNull<WebCore::Widget> (ptr=<optimized out>) at ../../../Source/JavaScriptCore/wtf/HashTable.h:888
#17 ~RefPtr (this=<optimized out>, __in_chrg=<optimized out>) at ../../../Source/JavaScriptCore/wtf/RefPtr.h:58
#18 ~pair (this=<optimized out>, __in_chrg=<optimized out>) at /usr/include/c++/4.6.1/bits/stl_pair.h:87
#19 WTF::HashTable<WTF::RefPtr<WebCore::Widget>, std::pair<WTF::RefPtr<WebCore::Widget>, WebCore::FrameView*>, WTF::PairFirstExtractor<std::pair<WTF::RefPtr<WebCore::Widget>, WebCore::FrameView*> >, WTF::PtrHash<WTF::RefPtr<WebCore::Widget> >, WTF::PairHashTraits<WTF::HashTraits<WTF::RefPtr<WebCore::Widget> >, WTF::HashTraits<WebCore::FrameView*> >, WTF::HashTraits<WTF::RefPtr<WebCore::Widget> > >::deallocateTable (table=0x7f3718793800, size=<optimized out>) at ../../../Source/JavaScriptCore/wtf/HashTable.h:893
#20 0x0000003f93e00f1e in ~HashTable (this=0x7fff67243ff0, __in_chrg=<optimized out>) at ../../../Source/JavaScriptCore/wtf/HashTable.h:300
#21 ~HashMap (this=0x7fff67243ff0, __in_chrg=<optimized out>) at ../../../Source/JavaScriptCore/wtf/RefPtrHashMap.h:48
#22 WebCore::RenderWidget::resumeWidgetHierarchyUpdates () at ../../../Source/WebCore/rendering/RenderWidget.cpp:68
#23 0x0000003f939b0364 in WebCore::ContainerNode::detach (this=0x7f37650de800) at ../../../Source/WebCore/dom/ContainerNode.cpp:761
#24 0x0000003f939ccd09 in WebCore::Document::detach (this=0x7f37650de800) at ../../../Source/WebCore/dom/Document.cpp:1776
#25 0x0000003f93c60cb0 in WebCore::Frame::setView (this=0x7f37650bb400, view=...) at ../../../Source/WebCore/page/Frame.cpp:272
#26 0x0000003f93c6358f in WebCore::Frame::createView (this=0x7f37650bb400, viewportSize=..., backgroundColor=..., transparent=false, fixedLayoutSize=..., useFixedLayout=false, horizontalScrollbarMode=(anonymous namespace)::ScrollbarAuto, horizontalLock=false, verticalScrollbarMode=(anonymous namespace)::ScrollbarAuto, verticalLock=false) at ../../../Source/WebCore/page/Frame.cpp:907
#27 0x0000003f9386d1d5 in WebCore::FrameLoaderClientQt::transitionToCommittedForNewPage (this=0x38ef4f0) at ../../../../Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:286
#28 0x0000003f93bf2475 in WebCore::FrameLoader::transitionToCommitted (this=0x7f37650bb478, cachedPage=...) at ../../../Source/WebCore/loader/FrameLoader.cpp:2136
#29 0x0000003f93bf524f in WebCore::FrameLoader::commitProvisionalLoad (this=0x7f37650bb478) at ../../../Source/WebCore/loader/FrameLoader.cpp:1979
#30 0x0000003f93be005a in WebCore::DocumentLoader::commitLoad (this=0x7f3718629800, data=0x2444be8 "<!DOCTYPE html>\n<html lang=\"en\">\n  <head>\n  <meta charset=\"utf-8\">\n  <title>YouTube</title>\n<style type=\"text/css\">\n  html, body, div, h1, h2, h3, h4, h5, h6, p, img, dl,\n  dt, dd, ol, ul, li, table, "..., length=4096) at ../../../Source/WebCore/loader/DocumentLoader.cpp:299
#31 0x0000003f93c18741 in WebCore::ResourceLoader::didReceiveData (this=0x7f371862eb00, data=0x2444be8 "<!DOCTYPE html>\n<html lang=\"en\">\n  <head>\n  <meta charset=\"utf-8\">\n  <title>YouTube</title>\n<style type=\"text/css\">\n  html, body, div, h1, h2, h3, h4, h5, h6, p, img, dl,\n  dt, dd, ol, ul, li, table, "..., length=4096, encodedDataLength=-1, allAtOnce=<optimized out>) at ../../../Source/WebCore/loader/ResourceLoader.cpp:279
#32 0x0000003f93c05575 in WebCore::MainResourceLoader::didReceiveData (this=0x7f371862eb00, data=0x2444be8 "<!DOCTYPE html>\n<html lang=\"en\">\n  <head>\n  <meta charset=\"utf-8\">\n  <title>YouTube</title>\n<style type=\"text/css\">\n  html, body, div, h1, h2, h3, h4, h5, h6, p, img, dl,\n  dt, dd, ol, ul, li, table, "..., length=4096, encodedDataLength=-1, allAtOnce=false) at ../../../Source/WebCore/loader/MainResourceLoader.cpp:463
#33 0x0000003f93c17162 in WebCore::ResourceLoader::didReceiveData (this=0x7f371862eb00, data=0x2444be8 "<!DOCTYPE html>\n<html lang=\"en\">\n  <head>\n  <meta charset=\"utf-8\">\n  <title>YouTube</title>\n<style type=\"text/css\">\n  html, body, div, h1, h2, h3, h4, h5, h6, p, img, dl,\n  dt, dd, ol, ul, li, table, "..., length=4096, encodedDataLength=-1) at ../../../Source/WebCore/loader/ResourceLoader.cpp:430
#34 0x0000003f93e3095d in WebCore::QNetworkReplyHandler::forwardData (this=0x2064e60) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:598
#35 0x0000003f93e32b38 in flush (this=0x2064e98) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:195
#36 WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x2064e98) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:187
#37 0x0000003f93e336e5 in ~QueueLocker (this=<synthetic pointer>, __in_chrg=<optimized out>) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:203
#38 WebCore::QNetworkReplyWrapper::emitMetaDataChanged (this=0x3a1b830) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:320
#39 0x0000003f93e337ac in WebCore::QNetworkReplyWrapper::receiveSniffedMIMEType (this=0x3a1b830) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:305
#40 0x0000003f7c78b7d1 in QMetaObject::activate (sender=0x1f2b760, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3546
#41 0x0000003f7c78b7d1 in QMetaObject::activate (sender=0x1e75e70, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3546
#42 0x0000003f7c78b7d1 in QMetaObject::activate (sender=0x1fc6e90, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff672449d0) at kernel/qobject.cpp:3546
#43 0x0000003f858fc4b4 in KIO::TransferJob::data (this=<optimized out>, _t1=0x1fc6e90, _t2=<optimized out>) at /usr/src/debug/kdelibs-4.7.3/x86_64-redhat-linux-gnu/kio/jobclasses.moc:447
#44 0x0000003f858fc518 in KIO::TransferJob::slotData (this=0x1fc6e90, _data=...) at /usr/src/debug/kdelibs-4.7.3/kio/kio/job.cpp:981
#45 0x0000003f7c78b7d1 in QMetaObject::activate (sender=0x1f3f1e0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff67244ba0) at kernel/qobject.cpp:3546
#46 0x0000003f859a4112 in KIO::SlaveInterface::data (this=<optimized out>, _t1=<optimized out>) at /usr/src/debug/kdelibs-4.7.3/x86_64-redhat-linux-gnu/kio/slaveinterface.moc:160
#47 0x0000003f859a7360 in KIO::SlaveInterface::dispatch (this=<optimized out>, _cmd=100, rawdata=...) at /usr/src/debug/kdelibs-4.7.3/kio/kio/slaveinterface.cpp:160
#48 0x0000003f859a3b25 in KIO::SlaveInterface::dispatch (this=0x1f3f1e0) at /usr/src/debug/kdelibs-4.7.3/kio/kio/slaveinterface.cpp:88
#49 0x0000003f85996c0e in KIO::Slave::gotInput (this=0x1f3f1e0) at /usr/src/debug/kdelibs-4.7.3/kio/kio/slave.cpp:344
#50 0x0000003f7c78b7d1 in QMetaObject::activate (sender=0x1f289e0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3546
#51 0x0000003f858cbb67 in dequeue (this=<optimized out>) at /usr/src/debug/kdelibs-4.7.3/kio/kio/connection.cpp:82
#52 KIO::ConnectionPrivate::dequeue (this=0x1e70670) at /usr/src/debug/kdelibs-4.7.3/kio/kio/connection.cpp:71
#53 0x0000003f7c7909e6 in QObject::event (this=0x1f289e0, e=<optimized out>) at kernel/qobject.cpp:1194
#54 0x0000003f803c96f4 in notify_helper (e=0x1f02fc0, receiver=0x1f289e0, this=0xaa08f0) at kernel/qapplication.cpp:4518
#55 QApplicationPrivate::notify_helper (this=0xaa08f0, receiver=0x1f289e0, e=0x1f02fc0) at kernel/qapplication.cpp:4490
#56 0x0000003f803ce573 in QApplication::notify (this=0x7fff67245b40, receiver=0x1f289e0, e=0x1f02fc0) at kernel/qapplication.cpp:4379
#57 0x0000003f82a50396 in KApplication::notify (this=0x7fff67245b40, receiver=0x1f289e0, event=0x1f02fc0) at /usr/src/debug/kdelibs-4.7.3/kdeui/kernel/kapplication.cpp:311
#58 0x0000003f7c777b4c in QCoreApplication::notifyInternal (this=0x7fff67245b40, receiver=0x1f289e0, event=0x1f02fc0) at kernel/qcoreapplication.cpp:876
#59 0x0000003f7c77b5da in sendEvent (event=0x1f02fc0, receiver=0x1f289e0) at kernel/qcoreapplication.h:231
#60 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0xa6f070) at kernel/qcoreapplication.cpp:1500
#61 0x0000003f7c7a6403 in sendPostedEvents () at kernel/qcoreapplication.h:236
#62 postEventSourceDispatch (s=0xa94300) at kernel/qeventdispatcher_glib.cpp:279
#63 0x0000003f72e44a7d in g_main_dispatch (context=0xa94210) at gmain.c:2425
#64 g_main_context_dispatch (context=0xa94210) at gmain.c:2995
#65 0x0000003f72e45278 in g_main_context_iterate (context=0xa94210, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3073
#66 0x0000003f72e4544c in g_main_context_iteration (context=0xa94210, may_block=1) at gmain.c:3136
#67 0x0000003f7c7a682f in QEventDispatcherGlib::processEvents (this=0xa70530, flags=<optimized out>) at kernel/qeventdispatcher_glib.cpp:424
#68 0x0000003f8046c43e in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=<optimized out>) at kernel/qguieventdispatcher_glib.cpp:207
#69 0x0000003f7c776c82 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#70 0x0000003f7c776ed7 in QEventLoop::exec (this=0x7fff67245970, flags=...) at kernel/qeventloop.cpp:204
#71 0x0000003f7c77b8d5 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1148
#72 0x0000003f862b5702 in kdemain (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/kde-baseapps-4.7.3/konqueror/src/konqmain.cpp:227
#73 0x0000003f7322169d in __libc_start_main (main=0x4007c0 <main(int, char**)>, argc=2, ubp_av=0x7fff67246408, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff672463f8) at libc-start.c:226
#74 0x00000000004007f1 in _start ()

Possible duplicates by query: bug 286925, bug 278180.

Reported using DrKonqi