Bug 292395

Application: konqueror (4.7.4 (4.7.4))
KDE Platform Version: 4.7.4 (4.7.4)
Qt Version: 4.7.4
Operating System: Linux 3.0.0-15-generic i686
Distribution: Ubuntu 11.10

-- Information about the crash:
- What I was doing when the application crashed:
I visit html5test.com,then the website view "You are using Konqueror 4.7 on Linux" and on the right there are two button.I pressed the first button and konqueror crashed.
Konqueror:4.7.4.
KDE:4.7.4

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Aborted
[Current thread is 1 (Thread 0xb7767710 (LWP 5725))]

Thread 4 (Thread 0xacf1fb70 (LWP 5778)):
#0  0x00dea416 in __kernel_vsyscall ()
#1  0x0072b40e in poll () from /lib/i386-linux-gnu/libc.so.6
#2  0x01600246 in ?? () from /usr/lib/i386-linux-gnu/libpulse.so.0
#3  0x015ee4ea in pa_mainloop_poll () from /usr/lib/i386-linux-gnu/libpulse.so.0
#4  0x015eed47 in pa_mainloop_iterate () from /usr/lib/i386-linux-gnu/libpulse.so.0
#5  0x015eee24 in pa_mainloop_run () from /usr/lib/i386-linux-gnu/libpulse.so.0
#6  0x016001ce in ?? () from /usr/lib/i386-linux-gnu/libpulse.so.0
#7  0x0188e216 in ?? () from /usr/lib/i386-linux-gnu/libpulsecommon-1.0.so
#8  0x008c6d31 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#9  0x0073a0ce in clone () from /lib/i386-linux-gnu/libc.so.6
Backtrace stopped: Not enough registers or memory available to unwind further

Thread 3 (Thread 0xa848ab70 (LWP 5779)):
#0  0x00dea416 in __kernel_vsyscall ()
#1  0x008caa5c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0x00747cfc in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0x0455a0a5 in gst_task_func (task=0xb0f3028) at gsttask.c:303
#4  0x0455b188 in default_func (tdata=0xab42c60, pool=0xab68010) at gsttaskpool.c:70
#5  0x065d7a27 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#6  0x065d55f4 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#7  0x008c6d31 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#8  0x0073a0ce in clone () from /lib/i386-linux-gnu/libc.so.6
Backtrace stopped: Not enough registers or memory available to unwind further

Thread 2 (Thread 0xa7c89b70 (LWP 5781)):
#0  0x00dea416 in __kernel_vsyscall ()
#1  0x00703586 in nanosleep () from /lib/i386-linux-gnu/libc.so.6
#2  0x065d8abe in g_usleep () from /lib/i386-linux-gnu/libglib-2.0.so.0
#3  0x065aa78e in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0x065d55f4 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#5  0x008c6d31 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#6  0x0073a0ce in clone () from /lib/i386-linux-gnu/libc.so.6
Backtrace stopped: Not enough registers or memory available to unwind further

Thread 1 (Thread 0xb7767710 (LWP 5725)):
[KCrash Handler]
#7  0x00dea416 in __kernel_vsyscall ()
#8  0x00695c8f in raise () from /lib/i386-linux-gnu/libc.so.6
#9  0x006992b5 in abort () from /lib/i386-linux-gnu/libc.so.6
#10 0x068074a6 in qt_message_output (msgType=QtFatalMsg, buf=0xaed3f60 "ASSERT: \"d->connected\" in file ../../phonon/streaminterface.cpp, line 89") at global/qglobal.cpp:2315
#11 0x068078db in qt_message (msgType=QtFatalMsg, msg=0x6972fe8 "ASSERT: \"%s\" in file %s, line %d", ap=0xbf88cbd4 "\"\344\265\003\244\343\265\003Y") at global/qglobal.cpp:2361
#12 0x068079f8 in qFatal (msg=0x6972fe8 "ASSERT: \"%s\" in file %s, line %d") at global/qglobal.cpp:2544
#13 0x06807a85 in qt_assert (assertion=0x3b5e422 "d->connected", file=0x3b5e3a4 "../../phonon/streaminterface.cpp", line=89) at global/qglobal.cpp:2039
#14 0x03b51fc8 in Phonon::StreamInterface::enoughData (this=0xae049d0) at ../../phonon/streaminterface.cpp:89
#15 0x018fc713 in Phonon::Gstreamer::StreamReader::unlock (this=0xae049c8) at ../../gstreamer/streamreader.cpp:164
#16 0x018f86f2 in Phonon::Gstreamer::phonon_src_unlock (basesrc=0xb0e2620) at ../../gstreamer/phononsrc.cpp:264
#17 0x05c33793 in gst_base_src_set_flushing (basesrc=0xb0e2620, flushing=1, live_play=0, unlock=1, playing=0x0) at gstbasesrc.c:2838
#18 0x05c35fb8 in gst_base_src_activate_push (pad=0xb04b708, active=0) at gstbasesrc.c:2979
#19 0x0452f648 in gst_pad_activate_push (pad=0xb04b708, active=0) at gstpad.c:953
#20 0x045303e1 in gst_pad_set_active (pad=0xb04b708, active=0) at gstpad.c:715
#21 0x0450c91c in activate_pads (pad=0xb04b708, ret=0xbf88ce7c, active=0xbf88cedc) at gstelement.c:2802
#22 0x04520cb3 in gst_iterator_fold (it=0xb11f378, func=0x450c8f0 <activate_pads>, ret=0xbf88ce7c, user_data=0xbf88cedc) at gstiterator.c:549
#23 0x0450c83c in iterator_activate_fold_with_resync (iter=0xb11f378, func=0x450c8f0 <activate_pads>, user_data=0xbf88cedc) at gstelement.c:2834
#24 0x0450f3a1 in gst_element_pads_activate (element=0xb0e2620, active=0) at gstelement.c:2870
#25 0x0450f749 in gst_element_change_state_func (element=0xb0e2620, transition=GST_STATE_CHANGE_PAUSED_TO_READY) at gstelement.c:2960
#26 0x05c39933 in gst_base_src_change_state (element=0xb0e2620, transition=GST_STATE_CHANGE_PAUSED_TO_READY) at gstbasesrc.c:3097
#27 0x0451177b in gst_element_change_state (element=0xb0e2620, transition=GST_STATE_CHANGE_PAUSED_TO_READY) at gstelement.c:2718
#28 0x04512235 in gst_element_set_state_func (element=0xb0e2620, state=GST_STATE_READY) at gstelement.c:2674
#29 0x045114b1 in gst_element_set_state (element=0xb0e2620, state=GST_STATE_READY) at gstelement.c:2575
#30 0x044fc856 in gst_bin_element_set_state (next=GST_STATE_READY, current=GST_STATE_READY, start_time=0, base_time=0, element=0xb0e2620, bin=0xb0e8058) at gstbin.c:2193
#31 gst_bin_change_state_func (element=0xb0e8058, transition=18) at gstbin.c:2489
#32 0x04534550 in gst_pipeline_change_state (element=0xb0e8058, transition=18) at gstpipeline.c:482
#33 0x0451177b in gst_element_change_state (element=0xb0e8058, transition=18) at gstelement.c:2718
#34 0x04512235 in gst_element_set_state_func (element=0xb0e8058, state=GST_STATE_READY) at gstelement.c:2674
#35 0x045114b1 in gst_element_set_state (element=0xb0e8058, state=GST_STATE_READY) at gstelement.c:2575
#36 0x018ea35d in Phonon::Gstreamer::MediaNode::disconnectNode (this=0xaeef5c8, obj=0xa0a8278) at ../../gstreamer/medianode.cpp:202
#37 0x018dba68 in Phonon::Gstreamer::Backend::disconnectNodes (this=0xab0f858, source=0xaeef5b8, sink=0xa0a8278) at ../../gstreamer/backend.cpp:415
#38 0x03b3febc in Phonon::PathPrivate::executeTransaction (this=0xaa14460, disconnections=..., connections=...) at ../../phonon/path.cpp:316
#39 0x03b40a0c in Phonon::PathPrivate::phononObjectDestroyed (this=0xaa14460, mediaNodePrivate=0xaa30470) at ../../phonon/path.cpp:408
#40 0x03b3936f in Phonon::MediaNodePrivate::~MediaNodePrivate (this=0xaa30470, __in_chrg=<optimized out>) at ../../phonon/medianode.cpp:71
#41 0x03b38b2d in ~MediaObjectPrivate (this=0xaa30470, __in_chrg=<optimized out>) at ../../phonon/mediaobject_p.h:45
#42 Phonon::MediaObjectPrivate::~MediaObjectPrivate (this=0xaa30470, __in_chrg=<optimized out>) at ../../phonon/mediaobject_p.h:45
#43 0x03b390ed in Phonon::MediaNode::~MediaNode (this=0xaf5b360, __in_chrg=<optimized out>) at ../../phonon/medianode.cpp:57
#44 0x03b34ec0 in Phonon::MediaObject::~MediaObject (this=0xaf5b358, __in_chrg=<optimized out>) at ../../phonon/mediaobject.cpp:60
#45 0x03b34f22 in Phonon::MediaObject::~MediaObject (this=0xaf5b358, __in_chrg=<optimized out>) at ../../phonon/mediaobject.cpp:76
#46 0x06920841 in QObjectPrivate::deleteChildren (this=0xaf5a2b8) at kernel/qobject.cpp:1955
#47 0x06925439 in QObject::~QObject (this=0xaf545d0, __in_chrg=<optimized out>) at kernel/qobject.cpp:946
#48 0x03b18a63 in Phonon::AbstractMediaStream::~AbstractMediaStream (this=0xaf545d0, __in_chrg=<optimized out>) at ../../phonon/abstractmediastream.cpp:50
#49 0x0263b2d7 in KJS::AudioQObject::~AudioQObject (this=0xaf545d0, __in_chrg=<optimized out>) at ../../khtml/ecma/kjs_audio.cpp:245
#50 0x0263b332 in KJS::AudioQObject::~AudioQObject (this=0xaf545d0, __in_chrg=<optimized out>) at ../../khtml/ecma/kjs_audio.cpp:247
#51 0x0263b4cf in KJS::Audio::~Audio (this=0xb5c10260, __in_chrg=<optimized out>) at ../../khtml/ecma/kjs_audio.cpp:100
#52 0x017b013c in KJS::Collector::collect () at ../../kjs/collector.cpp:795
#53 0x017e2b24 in KJS::Interpreter::collect () at ../../kjs/interpreter.cpp:751
#54 0x026074dd in KJSProxy::clear (this=0xa0ac938) at ../../khtml/ecma/kjs_proxy.cpp:199
#55 0x0239f2aa in KHTMLPart::clear (this=0xa09b6d8) at ../../khtml/khtml_part.cpp:1514
#56 0x023a0389 in KHTMLPart::~KHTMLPart (this=0xa09b6d8, __in_chrg=<optimized out>, __vtt_parm=<optimized out>) at ../../khtml/khtml_part.cpp:560
#57 0x023a05c2 in KHTMLPart::~KHTMLPart (this=0xa09b6d8, __in_chrg=<optimized out>, __vtt_parm=<optimized out>) at ../../khtml/khtml_part.cpp:579
#58 0x00e65d30 in KParts::Part::slotWidgetDestroyed (this=0xa09b6d8) at ../../kparts/part.cpp:353
#59 0x00e676ac in KParts::Part::qt_metacall (this=0xa09b6d8, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0xbf88d9e8) at ./part.moc:82
#60 0x00e694c2 in KParts::ReadOnlyPart::qt_metacall (this=0xa09b6d8, _c=QMetaObject::InvokeMetaMethod, _id=6, _a=0xbf88d9e8) at ./part.moc:168
#61 0x0239e292 in KHTMLPart::qt_metacall (this=0xa09b6d8, _c=QMetaObject::InvokeMetaMethod, _id=6, _a=0xbf88d9e8) at ./khtml_part.moc:253
#62 0x06912b7d in metacall (argv=0xbf88d9e8, idx=6, cl=QMetaObject::InvokeMetaMethod, object=0xa09b6d8) at kernel/qmetaobject.cpp:237
#63 QMetaObject::metacall (object=0xa09b6d8, cl=QMetaObject::InvokeMetaMethod, idx=6, argv=0xbf88d9e8) at kernel/qmetaobject.cpp:232
#64 0x06921a6a in QMetaObject::activate (sender=0xab47ff0, m=0x6a3e390, local_signal_index=0, argv=0xbf88d9e8) at kernel/qobject.cpp:3278
#65 0x06921f05 in QObject::destroyed (this=0xab47ff0, _t1=0xab47ff0) at .moc/release-shared/moc_qobject.cpp:149
#66 0x06924fed in QObject::~QObject (this=0xab47ff0, __in_chrg=<optimized out>) at kernel/qobject.cpp:843
#67 0x02ccf02f in QWidget::~QWidget (this=0xab47ff0, __in_chrg=<optimized out>) at kernel/qwidget.cpp:1528
#68 0x030d890f in QFrame::~QFrame (this=0xab47ff0, __in_chrg=<optimized out>) at widgets/qframe.cpp:240
#69 0x0316b644 in QAbstractScrollArea::~QAbstractScrollArea (this=0xab47ff0, __in_chrg=<optimized out>) at widgets/qabstractscrollarea.cpp:521
#70 0x0317055f in QScrollArea::~QScrollArea (this=0xab47ff0, __in_chrg=<optimized out>) at widgets/qscrollarea.cpp:174
#71 0x0235d6c3 in KHTMLView::~KHTMLView (this=0xab47ff0, __in_chrg=<optimized out>) at ../../khtml/khtmlview.cpp:565
#72 0x0235d812 in KHTMLView::~KHTMLView (this=0xab47ff0, __in_chrg=<optimized out>) at ../../khtml/khtmlview.cpp:575
#73 0x0691f5f3 in qDeleteInEventHandler (o=0xab47ff0) at kernel/qobject.cpp:3986
#74 0x06924b80 in QObject::event (this=0xab47ff0, e=0xaec8cd8) at kernel/qobject.cpp:1200
#75 0x02cd3c62 in QWidget::event (this=0xab47ff0, event=0xaec8cd8) at kernel/qwidget.cpp:8754
#76 0x030d9235 in QFrame::event (this=0xab47ff0, e=0xaec8cd8) at widgets/qframe.cpp:557
#77 0x0316d304 in QAbstractScrollArea::event (this=0xab47ff0, e=0xaec8cd8) at widgets/qabstractscrollarea.cpp:996
#78 0x03170d2f in QScrollArea::event (this=0xab47ff0, e=0xaec8cd8) at widgets/qscrollarea.cpp:314
#79 0x02358ba3 in KHTMLView::event (this=0xab47ff0, e=0xaec8cd8) at ../../khtml/khtmlview.cpp:546
#80 0x02c79d54 in notify_helper (e=0xaec8cd8, receiver=0xab47ff0, this=0x9f41e88) at kernel/qapplication.cpp:4486
#81 QApplicationPrivate::notify_helper (this=0x9f41e88, receiver=0xab47ff0, e=0xaec8cd8) at kernel/qapplication.cpp:4458
#82 0x02c7f1a8 in QApplication::notify (this=0x9f41e88, receiver=0xab47ff0, e=0xaec8cd8) at kernel/qapplication.cpp:4451
#83 0x0107f971 in KApplication::notify (this=0xbf88e66c, receiver=0xab47ff0, event=0xaec8cd8) at ../../kdeui/kernel/kapplication.cpp:311
#84 0x0690c19e in QCoreApplication::notifyInternal (this=0xbf88e66c, receiver=0xab47ff0, event=0xaec8cd8) at kernel/qcoreapplication.cpp:787
#85 0x0690ff93 in sendEvent (event=<optimized out>, receiver=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#86 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x9f22520) at kernel/qcoreapplication.cpp:1428
#87 0x069100ec in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1321
#88 0x0693a6a4 in sendPostedEvents () at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#89 postEventSourceDispatch (s=0x9f43950) at kernel/qeventdispatcher_glib.cpp:277
#90 0x065ae25f in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#91 0x065ae990 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#92 0x065aec2a in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#93 0x0693aada in QEventDispatcherGlib::processEvents (this=0x9f23248, flags=...) at kernel/qeventdispatcher_glib.cpp:422
#94 0x02d31e3a in QGuiEventDispatcherGlib::processEvents (this=0x9f23248, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#95 0x0690b1dd in QEventLoop::processEvents (this=0xbf88e4f4, flags=...) at kernel/qeventloop.cpp:149
#96 0x0690b421 in QEventLoop::exec (this=0xbf88e4f4, flags=...) at kernel/qeventloop.cpp:201
#97 0x0691019d in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1064
#98 0x02c778f4 in QApplication::exec () at kernel/qapplication.cpp:3760
#99 0x002fcbd5 in kdemain (argc=2, argv=0xbf88e9c4) at ../../../konqueror/src/konqmain.cpp:242
#100 0x0804850b in main (argc=2, argv=0xbf88e9c4) at konqueror_dummy.cpp:3

Reported using DrKonqi