Bug 290985

Application: konqueror (4.7.2 (4.7.2) "release 5")
KDE Platform Version: 4.7.2 (4.7.2) "release 5"
Qt Version: 4.7.4
Operating System: Linux 3.1.0-1.2-desktop x86_64
Distribution: "openSUSE 12.1 (x86_64)"

-- Information about the crash:
How to crash Konqueror:

1. Use KHTML
2. Go to http://translate.google.com/
3. Click on the link "webpage translator" (translated from Norwegian), which takes you to http://www.google.com/url?source=transpromo&rs=rsmf&q=http://translate.google.com/translate_tools%3Fhl%3Dno

The crash can be reproduced every time.
Konqueror does not crash when using WebKit.

Of the possibly related bugs suggested by Drkonqui, bug 277627 seems very plausible, as it is about KHTML and I could reproduce it on first try. I didn't try to reproduce others.

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0x7ffd5a00c760 (LWP 10567))]

Thread 3 (Thread 0x7ffd3e6e7700 (LWP 10572)):
#0  0x00007fff2f1ff8de in ?? ()
#1  0x00007ffd5472ee91 in clock_gettime () from /lib64/librt.so.1
#2  0x00007ffd58bd6114 in ?? () from /usr/lib64/libQtCore.so.4
#3  0x00007ffd58c97d1d in ?? () from /usr/lib64/libQtCore.so.4
#4  0x00007ffd58c98053 in ?? () from /usr/lib64/libQtCore.so.4
#5  0x00007ffd58c96abc in ?? () from /usr/lib64/libQtCore.so.4
#6  0x00007ffd58c96b65 in ?? () from /usr/lib64/libQtCore.so.4
#7  0x00007ffd54479b22 in g_main_context_prepare () from /usr/lib64/libglib-2.0.so.0
#8  0x00007ffd5447a92d in ?? () from /usr/lib64/libglib-2.0.so.0
#9  0x00007ffd5447af59 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#10 0x00007ffd58c97576 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#11 0x00007ffd58c6ba22 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#12 0x00007ffd58c6bc1f in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#13 0x00007ffd58b835df in QThread::exec() () from /usr/lib64/libQtCore.so.4
#14 0x00007ffd58c4eaef in ?? () from /usr/lib64/libQtCore.so.4
#15 0x00007ffd58b86025 in ?? () from /usr/lib64/libQtCore.so.4
#16 0x00007ffd49cb42da in ?? () from /usr/X11R6/lib64/libGL.so.1
#17 0x00007ffd588f5f05 in start_thread () from /lib64/libpthread.so.0
#18 0x00007ffd5768e53d in clone () from /lib64/libc.so.6

Thread 2 (Thread 0x7ffd37fff700 (LWP 10585)):
#0  0x00007ffd57685423 in poll () from /lib64/libc.so.6
#1  0x00007ffd5447aa98 in ?? () from /usr/lib64/libglib-2.0.so.0
#2  0x00007ffd5447af59 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#3  0x00007ffd58c97576 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#4  0x00007ffd58c6ba22 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#5  0x00007ffd58c6bc1f in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#6  0x00007ffd58b835df in QThread::exec() () from /usr/lib64/libQtCore.so.4
#7  0x00007ffd51ee1d4e in KIO::NameLookUpThread::run (this=0xe7cfc0) at /usr/src/debug/kdelibs-4.7.2/kio/kio/hostinfo.cpp:226
#8  0x00007ffd58b86025 in ?? () from /usr/lib64/libQtCore.so.4
#9  0x00007ffd49cb42da in ?? () from /usr/X11R6/lib64/libGL.so.1
#10 0x00007ffd588f5f05 in start_thread () from /lib64/libpthread.so.0
#11 0x00007ffd5768e53d in clone () from /lib64/libc.so.6

Thread 1 (Thread 0x7ffd5a00c760 (LWP 10567)):
[KCrash Handler]
#6  khtml::HTMLTokenizer::scriptHandler (this=0x1462830) at /usr/src/debug/kdelibs-4.7.2/khtml/html/htmltokenizer.cpp:483
#7  0x00007ffd36947691 in khtml::HTMLTokenizer::parseRawContent (this=0x1462830, src=...) at /usr/src/debug/kdelibs-4.7.2/khtml/html/htmltokenizer.cpp:379
#8  0x00007ffd3694a06b in khtml::HTMLTokenizer::parseTag (this=0x1462830, src=...) at /usr/src/debug/kdelibs-4.7.2/khtml/html/htmltokenizer.cpp:1528
#9  0x00007ffd3694a915 in khtml::HTMLTokenizer::write (this=0x1462830, str=<optimized out>, appendData=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/khtml/html/htmltokenizer.cpp:1797
#10 0x00007ffd368eebd3 in DOM::DocumentImpl::write (this=0x181e880, text=...) at /usr/src/debug/kdelibs-4.7.2/khtml/xml/dom_docimpl.cpp:1687
#11 0x00007ffd36aadead in KJS::HTMLDocFunction::callAsFunction (this=0x7ffd3c085b00, exec=0x7fff2f12dbb0, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/khtml/ecma/kjs_html.cpp:135
#12 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#13 KJS::Machine::runBlock (exec=0x7fff2f12dbb0, codeBlock=..., parentExec=0x7fff2f12e6e0) at codes.def:1223
#14 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c08a3c0, exec=0x7fff2f12e6e0, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#15 0x00007ffd361a72e9 in call (args=..., thisObj=0x7ffd3c08a300, exec=0x7fff2f12e6e0, this=0x7ffd3c08a3c0) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#16 KJS::FunctionProtoFunc::callAsFunction (this=<optimized out>, exec=0x7fff2f12e6e0, thisObj=0x7ffd3c08a3c0, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function_object.cpp:139
#17 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#18 KJS::Machine::runBlock (exec=0x7fff2f12e6e0, codeBlock=..., parentExec=0x7fff2f12f150) at codes.def:1223
#19 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c138280, exec=0x7fff2f12f150, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#20 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#21 KJS::Machine::runBlock (exec=0x7fff2f12f150, codeBlock=..., parentExec=0x7fff2f12fbc0) at codes.def:1223
#22 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c13e180, exec=0x7fff2f12fbc0, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#23 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#24 KJS::Machine::runBlock (exec=0x7fff2f12fbc0, codeBlock=..., parentExec=0x7fff2f130630) at codes.def:1223
#25 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c13e200, exec=0x7fff2f130630, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#26 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#27 KJS::Machine::runBlock (exec=0x7fff2f130630, codeBlock=..., parentExec=0x7fff2f1310a0) at codes.def:1223
#28 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c13e100, exec=0x7fff2f1310a0, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#29 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#30 KJS::Machine::runBlock (exec=0x7fff2f1310a0, codeBlock=..., parentExec=0x7fff2f131b10) at codes.def:1223
#31 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c137640, exec=0x7fff2f131b10, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#32 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#33 KJS::Machine::runBlock (exec=0x7fff2f131b10, codeBlock=..., parentExec=0x7fff2f132580) at codes.def:1223
#34 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c13d200, exec=0x7fff2f132580, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#35 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#36 KJS::Machine::runBlock (exec=0x7fff2f132580, codeBlock=..., parentExec=0x7fff2f132ff0) at codes.def:1223
#37 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c132e80, exec=0x7fff2f132ff0, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#38 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#39 KJS::Machine::runBlock (exec=0x7fff2f132ff0, codeBlock=..., parentExec=0x7fff2f133b20) at codes.def:1223
#40 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c132f00, exec=0x7fff2f133b20, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#41 0x00007ffd361a73f7 in call (args=..., thisObj=0x7ffd3c08a300, exec=0x7fff2f133b20, this=0x7ffd3c132f00) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#42 KJS::FunctionProtoFunc::callAsFunction (this=<optimized out>, exec=0x7fff2f133b20, thisObj=0x7ffd3c132f00, args=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/function_object.cpp:123
#43 0x00007ffd361dc85a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#44 KJS::Machine::runBlock (exec=0x7fff2f133b20, codeBlock=..., parentExec=0xca87e0) at codes.def:1223
#45 0x00007ffd361bdbd5 in KJS::FunctionImp::callAsFunction (this=0x7ffd3c089440, exec=0xca87e0, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.7.2/kjs/function.cpp:172
#46 0x00007ffd36afc69e in call (args=..., thisObj=0x7ffd3c580080, exec=0xca87e0, this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kjs/object.h:626
#47 KJS::JSEventListener::handleEvent (this=0x11b47d0, evt=...) at /usr/src/debug/kdelibs-4.7.2/khtml/ecma/kjs_events.cpp:108
#48 0x00007ffd36b05404 in KJS::XMLHttpRequest::changeState (this=0x7ffd3c580080, newState=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/khtml/ecma/xmlhttprequest.cpp:364
#49 0x00007ffd36b0646a in KJS::XMLHttpRequest::slotFinished (this=0x7ffd3c580080) at /usr/src/debug/kdelibs-4.7.2/khtml/ecma/xmlhttprequest.cpp:790
#50 0x00007ffd36b06c2d in slotFinished (job=<optimized out>, this=0x18fbe80) at /usr/src/debug/kdelibs-4.7.2/khtml/ecma/xmlhttprequest.cpp:90
#51 KJS::XMLHttpRequestQObject::qt_metacall (this=0x18fbe80, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fff2f133ee0) at /usr/src/debug/kdelibs-4.7.2/build/khtml/xmlhttprequest.moc:78
#52 0x00007ffd58c7f59a in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib64/libQtCore.so.4
#53 0x00007ffd590da5e2 in KJob::result(KJob*) () from /usr/lib64/libkdecore.so.5
#54 0x00007ffd590da620 in KJob::emitResult() () from /usr/lib64/libkdecore.so.5
#55 0x00007ffd51e29f24 in KIO::SimpleJob::slotFinished (this=0x144c8e0) at /usr/src/debug/kdelibs-4.7.2/kio/kio/job.cpp:494
#56 0x00007ffd51e318fd in KIO::TransferJob::slotFinished (this=0x144c8e0) at /usr/src/debug/kdelibs-4.7.2/kio/kio/job.cpp:1081
#57 0x00007ffd51e30261 in KIO::TransferJob::qt_metacall (this=0x144c8e0, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fff2f134290) at /usr/src/debug/kdelibs-4.7.2/build/kio/jobclasses.moc:369
#58 0x00007ffd58c7f59a in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib64/libQtCore.so.4
#59 0x00007ffd51ed7091 in KIO::SlaveInterface::dispatch (this=<optimized out>, _cmd=104, rawdata=...) at /usr/src/debug/kdelibs-4.7.2/kio/kio/slaveinterface.cpp:172
#60 0x00007ffd51ed3f45 in KIO::SlaveInterface::dispatch (this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kio/kio/slaveinterface.cpp:88
#61 0x00007ffd51ec70fe in KIO::Slave::gotInput (this=0x114e3e0) at /usr/src/debug/kdelibs-4.7.2/kio/kio/slave.cpp:344
#62 0x00007ffd51ec785c in KIO::Slave::qt_metacall (this=0x114e3e0, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fff2f1346c0) at /usr/src/debug/kdelibs-4.7.2/build/kio/slave.moc:82
#63 0x00007ffd58c7f59a in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib64/libQtCore.so.4
#64 0x00007ffd51dfa9b7 in dequeue (this=<optimized out>) at /usr/src/debug/kdelibs-4.7.2/kio/kio/connection.cpp:82
#65 KIO::ConnectionPrivate::dequeue (this=0x128f100) at /usr/src/debug/kdelibs-4.7.2/kio/kio/connection.cpp:71
#66 0x00007ffd51dfaa5d in KIO::Connection::qt_metacall (this=0xc9e420, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x1463e20) at /usr/src/debug/kdelibs-4.7.2/build/kio/connection.moc:79
#67 0x00007ffd58c8314a in QObject::event(QEvent*) () from /usr/lib64/libQtCore.so.4
#68 0x00007ffd57e1ec34 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#69 0x00007ffd57e23ac1 in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#70 0x00007ffd599fee36 in KApplication::notify (this=0x7fff2f135270, receiver=0xc9e420, event=0x1280f80) at /usr/src/debug/kdelibs-4.7.2/kdeui/kernel/kapplication.cpp:311
#71 0x00007ffd58c6c81c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
#72 0x00007ffd58c6fbf8 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/lib64/libQtCore.so.4
#73 0x00007ffd58c970b3 in ?? () from /usr/lib64/libQtCore.so.4
#74 0x00007ffd5447a58d in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
#75 0x00007ffd5447ad88 in ?? () from /usr/lib64/libglib-2.0.so.0
#76 0x00007ffd5447af59 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#77 0x00007ffd58c9750f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#78 0x00007ffd57ec1f9e in ?? () from /usr/lib64/libQtGui.so.4
#79 0x00007ffd58c6ba22 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#80 0x00007ffd58c6bc1f in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#81 0x00007ffd58c6fde7 in QCoreApplication::exec() () from /usr/lib64/libQtCore.so.4
#82 0x00007ffd45a848e2 in kdemain () from /usr/lib64/libkdeinit4_konqueror.so
#83 0x0000000000408897 in _start ()

This bug may be a duplicate of or related to bug 277627.

Possible duplicates by query: bug 286166, bug 283697, bug 280971, bug 278017, bug 277627.

Reported using DrKonqi