Bug 293224

Application: konqueror (4.8.00 (4.8.0)
KDE Platform Version: 4.8.00 (4.8.0 (Compiled from sources)
Qt Version: 4.8.0
Operating System: Linux 3.1.9-2-pae i686
Distribution (Platform): Archlinux Packages

-- Information about the crash:
- What I was doing when the application crashed:

Enter to css3test.com using KHTML as framework, you will see konqueror not displays the page correctly, becoming the web page, into a blank screen.

Next, switch the framework to webkit and konqueror will crash.

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
Using host libthread_db library "/lib/libthread_db.so.1".
[Current thread is 1 (Thread 0xb48fc740 (LWP 1218))]

Thread 3 (Thread 0xadb91b40 (LWP 1345)):
#0  0xb78d1424 in __kernel_vsyscall ()
#1  0xb76df800 in poll () from /lib/libc.so.6
#2  0xb50bdebb in g_poll () from /usr/lib/libglib-2.0.so.0
#3  0xb50af136 in g_main_context_iterate.isra.19 () from /usr/lib/libglib-2.0.so.0
#4  0xb50af4ca in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#5  0xb66ed0e7 in QEventDispatcherGlib::processEvents (this=0xad200de0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#6  0xb66b4dad in QEventLoop::processEvents (this=0xadb91260, flags=...) at kernel/qeventloop.cpp:149
#7  0xb66b5049 in QEventLoop::exec (this=0xadb91260, flags=...) at kernel/qeventloop.cpp:204
#8  0xb6591cad in QThread::exec (this=0xc4c99a8) at thread/qthread.cpp:501
#9  0xb71aad18 in KIO::NameLookUpThread::run (this=0xc4c99a8) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kio/kio/hostinfo.cpp:226
#10 0xb6594ffa in QThreadPrivate::start (arg=0xc4c99a8) at thread/qthread_unix.cpp:298
#11 0xb531ed4c in start_thread () from /lib/libpthread.so.0
#12 0xb76ea03e in clone () from /lib/libc.so.6

Thread 2 (Thread 0xb03ffb40 (LWP 1441)):
#0  0xb5168dcd in clock_gettime () from /lib/librt.so.1
#1  0xb65f9fa5 in do_gettime (frac=0xb03ff000, sec=0xb03feff8) at tools/qelapsedtimer_unix.cpp:123
#2  qt_gettime () at tools/qelapsedtimer_unix.cpp:140
#3  0xb66edcc6 in QTimerInfoList::updateCurrentTime (this=0xafa03064) at kernel/qeventdispatcher_unix.cpp:343
#4  0xb66ee09a in QTimerInfoList::timerWait (this=0xafa03064, tm=...) at kernel/qeventdispatcher_unix.cpp:450
#5  0xb66ec4d3 in timerSourcePrepareHelper (src=<optimized out>, timeout=0xb03ff0ec) at kernel/qeventdispatcher_glib.cpp:136
#6  0xb50ae0ec in g_main_context_prepare () from /usr/lib/libglib-2.0.so.0
#7  0xb50aeed7 in g_main_context_iterate.isra.19 () from /usr/lib/libglib-2.0.so.0
#8  0xb50af4ca in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#9  0xb66ed0e7 in QEventDispatcherGlib::processEvents (this=0xafa00468, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#10 0xb66b4dad in QEventLoop::processEvents (this=0xb03ff270, flags=...) at kernel/qeventloop.cpp:149
#11 0xb66b5049 in QEventLoop::exec (this=0xb03ff270, flags=...) at kernel/qeventloop.cpp:204
#12 0xb6591cad in QThread::exec (this=0xd99fe88) at thread/qthread.cpp:501
#13 0xb6591d7b in QThread::run (this=0xd99fe88) at thread/qthread.cpp:568
#14 0xb6594ffa in QThreadPrivate::start (arg=0xd99fe88) at thread/qthread_unix.cpp:298
#15 0xb531ed4c in start_thread () from /lib/libpthread.so.0
#16 0xb76ea03e in clone () from /lib/libc.so.6

Thread 1 (Thread 0xb48fc740 (LWP 1218)):
[KCrash Handler]
#7  0xb658f1cd in testAndSetOrdered (newValue=1, expectedValue=0, this=0xaba0c128) at ../../include/QtCore/../../src/corelib/arch/qatomic_i386.h:144
#8  testAndSetAcquire (newValue=1, expectedValue=0, this=0xaba0c128) at ../../include/QtCore/../../src/corelib/arch/qatomic_i386.h:266
#9  QMutex::lock (this=0xe7d7170) at thread/qmutex.cpp:175
#10 0xaa6e3187 in WTF::Mutex::lock (this=0xe11eb60) at ../../../Source/JavaScriptCore/wtf/qt/ThreadingQt.cpp:228
#11 0xa987f35f in WTF::Locker<WTF::Mutex>::Locker (this=0xbfd771bc, lockable=...) at ../../../../Source/JavaScriptCore/wtf/Locker.h:38
#12 0xaa457d48 in WTF::addIterator<WebCore::SVGStyledElement*, WebCore::SVGStyledElement*, WTF::IdentityExtractor<WebCore::SVGStyledElement*>, WTF::PtrHash<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*> > (table=0xe11eb48, it=0xbfd7722c) at ../../../Source/JavaScriptCore/wtf/HashTable.h:1076
#13 0xaa452985 in WTF::HashTableConstIterator<WebCore::SVGStyledElement*, WebCore::SVGStyledElement*, WTF::IdentityExtractor<WebCore::SVGStyledElement*>, WTF::PtrHash<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*> >::HashTableConstIterator (this=0xbfd7722c, other=...) at ../../../Source/JavaScriptCore/wtf/HashTable.h:143
#14 0xaa4f67fc in WTF::HashTableIterator<WebCore::SVGStyledElement*, WebCore::SVGStyledElement*, WTF::IdentityExtractor<WebCore::SVGStyledElement*>, WTF::PtrHash<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*> >::operator WTF::HashTableConstIterator<WebCore::SVGStyledElement*, WebCore::SVGStyledElement*, WTF::IdentityExtractor<WebCore::SVGStyledElement*>, WTF::PtrHash<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*> > (this=0xbfd77268) at ../../../Source/JavaScriptCore/wtf/HashTable.h:254
#15 0xaa4ed251 in std::pair<WTF::HashTableConstIteratorAdapter<WTF::HashTable<WebCore::SVGStyledElement*, WebCore::SVGStyledElement*, WTF::IdentityExtractor<WebCore::SVGStyledElement*>, WTF::PtrHash<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*> >, WebCore::SVGStyledElement*>, bool>::pair<WTF::HashTableIterator<WebCore::SVGStyledElement*, WebCore::SVGStyledElement*, WTF::IdentityExtractor<WebCore::SVGStyledElement*>, WTF::PtrHash<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*> >, bool> (this=0xbfd772b0, __p=...) at /usr/lib/gcc/i686-pc-linux-gnu/4.6.2/../../../../include/c++/4.6.2/bits/stl_pair.h:109
#16 0xaa4e0513 in WTF::HashSet<WebCore::SVGStyledElement*, WTF::PtrHash<WebCore::SVGStyledElement*>, WTF::HashTraits<WebCore::SVGStyledElement*> >::add (this=0xe11eb98, value=@0xbfd772e8: 0xe11eb50) at ../../../Source/JavaScriptCore/wtf/HashSet.h:180
#17 0xaa4cc334 in WebCore::SVGStyledElement::updateRelativeLengthsInformation (this=0xe11eb50, hasRelativeLengths=true, element=0xe11eb50) at ../../../Source/WebCore/svg/SVGStyledElement.cpp:485
#18 0xaa46ded3 in WebCore::SVGStyledElement::updateRelativeLengthsInformation (this=0xe11eb50) at ../../../Source/WebCore/svg/SVGStyledElement.h:85
#19 0xaa4cbb09 in WebCore::SVGStyledElement::insertedIntoDocument (this=0xe11eb50) at ../../../Source/WebCore/svg/SVGStyledElement.cpp:365
#20 0xaa4c712d in WebCore::SVGSVGElement::insertedIntoDocument (this=0xe11eb50) at ../../../Source/WebCore/svg/SVGSVGElement.cpp:527
#21 0xa9ddd319 in WebCore::ContainerNode::parserAddChild (this=0xe7d7170, newChild=...) at ../../../Source/WebCore/dom/ContainerNode.cpp:685
#22 0xa9ddd38b in WebCore::ContainerNode::deprecatedParserAddChild (this=0xe7d7170, node=...) at ../../../Source/WebCore/dom/ContainerNode.cpp:691
#23 0xa9e8aa24 in WebCore::XMLDocumentParser::parseStartElement (this=0xde8dcc0) at ../../../Source/WebCore/dom/XMLDocumentParserQt.cpp:536
#24 0xa9e8a161 in WebCore::XMLDocumentParser::parse (this=0xde8dcc0) at ../../../Source/WebCore/dom/XMLDocumentParserQt.cpp:389
#25 0xa9e88f3d in WebCore::XMLDocumentParser::doWrite (this=0xde8dcc0, parseString=...) at ../../../Source/WebCore/dom/XMLDocumentParserQt.cpp:199
#26 0xa9e86052 in WebCore::XMLDocumentParser::append (this=0xde8dcc0, s=...) at ../../../Source/WebCore/dom/XMLDocumentParser.cpp:131
#27 0xaa5ccc0e in WebCore::DecodedDataDocumentParser::appendBytes (this=0xde8dcc0, writer=0xdc6a764, data=0xdc54328 "<svg version=\"1.0\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\" \n\twidth=\"80\" height=\"80\" viewBox=\"0 0 60 60\">\n<style>\n\n@namespace xlink 'http://www.w3.org/1999/xlink';"..., length=1802, shouldFlush=false) at ../../../Source/WebCore/dom/DecodedDataDocumentParser.cpp:54
#28 0xaa05a6cb in WebCore::DocumentWriter::addData (this=0xdc6a764, str=0xdc54328 "<svg version=\"1.0\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\" \n\twidth=\"80\" height=\"80\" viewBox=\"0 0 60 60\">\n<style>\n\n@namespace xlink 'http://www.w3.org/1999/xlink';"..., len=1802, flush=false) at ../../../Source/WebCore/loader/DocumentWriter.cpp:208
#29 0xaa42150a in WebCore::SVGImage::dataChanged (this=0xd213498, allDataReceived=true) at ../../../Source/WebCore/svg/graphics/SVGImage.cpp:284
#30 0xaa141557 in WebCore::Image::setData (this=0xd213498, data=..., allDataReceived=true) at ../../../Source/WebCore/platform/graphics/Image.cpp:76
#31 0xaa03982c in WebCore::CachedImage::data (this=0xe565cb8, data=..., allDataReceived=true) at ../../../Source/WebCore/loader/cache/CachedImage.cpp:278
#32 0xaa6314a7 in WebCore::CachedResourceRequest::didFinishLoading (this=0xe5a2320, loader=0xe71e4b8) at ../../../Source/WebCore/loader/cache/CachedResourceRequest.cpp:166
#33 0xaa0921a5 in WebCore::SubresourceLoader::didFinishLoading (this=0xe71e4b8, finishTime=0) at ../../../Source/WebCore/loader/SubresourceLoader.cpp:196
#34 0xaa0896ed in WebCore::ResourceLoader::didFinishLoading (this=0xe71e4b8, finishTime=0) at ../../../Source/WebCore/loader/ResourceLoader.cpp:436
#35 0xaa321f58 in WebCore::QNetworkReplyHandler::finish (this=0xe198f70) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:454
#36 0xaa3209f4 in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0xe198f90) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:195
#37 0xaa320920 in WebCore::QNetworkReplyHandlerCallQueue::push (this=0xe198f90, method=(void (WebCore::QNetworkReplyHandler::*)(WebCore::QNetworkReplyHandler * const)) 0xaa321d5e <WebCore::QNetworkReplyHandler::finish()>) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:164
#38 0xaa321792 in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0xd3cc1c8) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:349
#39 0xaa3242b7 in WebCore::QNetworkReplyWrapper::qt_static_metacall (_o=0xd3cc1c8, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0xbfd77a60) at ./moc_QNetworkReplyHandler.cpp:57
#40 0xb66ce999 in QMetaObject::activate (sender=0xe378b60, m=0xb55792e4, local_signal_index=1, argv=0x0) at kernel/qobject.cpp:3547
#41 0xb5528665 in QNetworkReply::finished (this=0xe378b60) at .moc/debug-shared/moc_qnetworkreply.cpp:166
#42 0xb70b1126 in KDEPrivate::AccessManagerReply::slotResult (this=0xe378b60, kJob=0xf4c3fe0) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kio/kio/accessmanagerreply_p.cpp:386
#43 0xb66ce999 in QMetaObject::activate (sender=0xf4c3fe0, m=0xb6b094ac, local_signal_index=3, argv=0xbfd77bd8) at kernel/qobject.cpp:3547
#44 0xb693c385 in KJob::result (this=0xf4c3fe0, _t1=0xf4c3fe0) at /home/zuargo/Paquetes/kdelibs/src/build/kdecore/kjob.moc:208
#45 0xb693c3d7 in KJob::emitResult (this=0xf4c3fe0) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kdecore/jobs/kjob.cpp:318
#46 0xb70ed618 in KIO::SimpleJob::slotFinished (this=0xf4c3fe0) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kio/kio/job.cpp:494
#47 0xb70f409c in KIO::TransferJob::slotFinished (this=0xf4c3fe0) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kio/kio/job.cpp:1081
#48 0xb70f2300 in KIO::TransferJob::qt_static_metacall (_o=0xf4c3fe0, _c=QMetaObject::InvokeMetaMethod, _id=7, _a=0xbfd77e40) at /home/zuargo/Paquetes/kdelibs/src/build/kio/jobclasses.moc:388
#49 0xb66ce999 in QMetaObject::activate (sender=0x8b393a0, m=0xb7306440, local_signal_index=4, argv=0x0) at kernel/qobject.cpp:3547
#50 0xb719deb5 in KIO::SlaveInterface::finished (this=0x8b393a0) at /home/zuargo/Paquetes/kdelibs/src/build/kio/slaveinterface.moc:185
#51 0xb71a041f in KIO::SlaveInterface::dispatch (this=0x8b393a0, _cmd=104, rawdata=...) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kio/kio/slaveinterface.cpp:172
#52 0xb719d960 in KIO::SlaveInterface::dispatch (this=0x8b393a0) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kio/kio/slaveinterface.cpp:88
#53 0xb7193860 in KIO::Slave::gotInput (this=0x8b393a0) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kio/kio/slave.cpp:344
#54 0xb7193ee0 in KIO::Slave::qt_static_metacall (_o=0x8b393a0, _c=QMetaObject::InvokeMetaMethod, _id=2, _a=0xbfd780f0) at /home/zuargo/Paquetes/kdelibs/src/build/kio/slave.moc:57
#55 0xb66ce999 in QMetaObject::activate (sender=0x8b2c308, m=0xb73030d0, local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3547
#56 0xb70b9c65 in KIO::Connection::readyRead (this=0x8b2c308) at /home/zuargo/Paquetes/kdelibs/src/build/kio/connection.moc:106
#57 0xb70bb97b in KIO::ConnectionPrivate::dequeue (this=0xa6d4f50) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kio/kio/connection.cpp:82
#58 0xb66c9d51 in QMetaCallEvent::placeMetaCall (this=0xe5533b0, object=0x8b2c308) at kernel/qobject.cpp:525
#59 0xb66d41ab in QObject::event (this=0x8b2c308, e=0xe5533b0) at kernel/qobject.cpp:1195
#60 0xb5a3bc1c in notify_helper (e=0xe5533b0, receiver=0x8b2c308, this=0x825dec8) at kernel/qapplication.cpp:4550
#61 QApplicationPrivate::notify_helper (this=0x825dec8, receiver=0x8b2c308, e=0xe5533b0) at kernel/qapplication.cpp:4522
#62 0xb5a41c9d in QApplication::notify (this=0x825dec8, receiver=0x8b2c308, e=0xe5533b0) at kernel/qapplication.cpp:4411
#63 0xb6d0dc38 in KApplication::notify (this=0xbfd789e4, receiver=0x8b2c308, event=0xe5533b0) at /home/zuargo/Paquetes/kdelibs/src/kdelibs-4.8.0/kdeui/kernel/kapplication.cpp:311
#64 0xb66b6a4e in QCoreApplication::notifyInternal (this=0xbfd789e4, receiver=0x8b2c308, event=0xe5533b0) at kernel/qcoreapplication.cpp:876
#65 0xb66ba810 in sendEvent (event=<optimized out>, receiver=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#66 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x8222370) at kernel/qcoreapplication.cpp:1500
#67 0xb66babdc in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1393
#68 0xb66ecbf4 in sendPostedEvents () at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:236
#69 postEventSourceDispatch (s=0x825b0a8) at kernel/qeventdispatcher_glib.cpp:279
#70 0xb50aeadf in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#71 0xb50af238 in g_main_context_iterate.isra.19 () from /usr/lib/libglib-2.0.so.0
#72 0xb50af4ca in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#73 0xb66ed087 in QEventDispatcherGlib::processEvents (this=0x8222ef0, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#74 0xb5afedda in QGuiEventDispatcherGlib::processEvents (this=0x8222ef0, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#75 0xb66b4dad in QEventLoop::processEvents (this=0xbfd788c4, flags=...) at kernel/qeventloop.cpp:149
#76 0xb66b5049 in QEventLoop::exec (this=0xbfd788c4, flags=...) at kernel/qeventloop.cpp:204
#77 0xb66bac8a in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1148
#78 0xb5a399d4 in QApplication::exec () at kernel/qapplication.cpp:3811
#79 0xb7856f19 in kdemain (argc=1, argv=0xbfd78c34) at /home/zuargo/Paquetes/kdebase/src/kde-baseapps-4.8.0/konqueror/src/konqmain.cpp:227
#80 0x0804850b in main (argc=1, argv=0xbfd78c34) at /home/zuargo/Paquetes/kdebase/src/build/konqueror/src/konqueror_dummy.cpp:3

Possible duplicates by query: bug 280998.

Reported using DrKonqi