Bug 296451

Application: konqueror (4.6.5 (4.6.5))
KDE Platform Version: 4.6.5 (4.6.5)
Qt Version: 4.7.4
Operating System: Linux 2.6.42.9-2.fc15.x86_64 x86_64
Distribution: "Fedora release 15 (Lovelock)"

-- Information about the crash:
- What I was doing when the application crashed:

I was surfing http://www.html5test.com/ and the browser crashed.  When I refreshed the page, it came up, but after two or three more refreshes, the page crashes the browser again.  I cannot say what element or elements in the page cause the crash.

I am running Fedora 15 with Gnome Shell at the moment.  All KDE and Gnome components were updated through yum.

The crash can be reproduced some of the time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Aborted
82	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7f24b0f13840 (LWP 5528))]

Thread 5 (Thread 0x7f24a9ca7700 (LWP 5533)):
#0  0x0000003db3c43611 in g_main_loop_run (loop=0x8ae310) at gmain.c:3299
#1  0x00007f24aa1d0564 in gdbus_shared_thread_func (data=<optimized out>) at gdbusprivate.c:276
#2  0x0000003db3c683a6 in g_thread_create_proxy (data=0x8ae420) at gthread.c:1955
#3  0x0000003db2407b41 in start_thread (arg=0x7f24a9ca7700) at pthread_create.c:305
#4  0x0000003db20e0e6d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 4 (Thread 0x7f248d8ee700 (LWP 5570)):
#0  0x0000003db20d85a3 in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x0000003dcc02c05f in poll_func (ufds=0x7f2470001460, nfds=2, timeout=-1, userdata=0x186e2c0) at pulse/thread-mainloop.c:75
#2  0x0000003dcc01dee6 in pa_mainloop_poll (m=0x1b95be0) at pulse/mainloop.c:879
#3  0x0000003dcc01e519 in pa_mainloop_iterate (m=0x1b95be0, block=<optimized out>, retval=0x0) at pulse/mainloop.c:961
#4  0x0000003dcc01e5d0 in pa_mainloop_run (m=0x1b95be0, retval=0x0) at pulse/mainloop.c:979
#5  0x0000003dcc02c00f in thread (userdata=0x182de10) at pulse/thread-mainloop.c:94
#6  0x0000003dcbc38788 in internal_thread_func (userdata=0xfe86f0) at pulsecore/thread-posix.c:83
#7  0x0000003db2407b41 in start_thread (arg=0x7f248d8ee700) at pthread_create.c:305
#8  0x0000003db20e0e6d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 3 (Thread 0x7f2483ffe700 (LWP 5571)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00007f2494196f07 in gst_task_func (task=0x936440 [GstTask]) at gsttask.c:303
#2  0x0000003db3c6aa50 in g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:319
#3  0x0000003db3c683a6 in g_thread_create_proxy (data=0x17a8080) at gthread.c:1955
#4  0x0000003db2407b41 in start_thread (arg=0x7f2483ffe700) at pthread_create.c:305
#5  0x0000003db20e0e6d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7f24837fd700 (LWP 5574)):
#0  g_atomic_int_get (atomic=0x859930) at gatomic-gcc.c:65
#1  0x0000003db3c44508 in g_main_context_wakeup (context=0x8598e0) at gmain.c:3767
#2  0x0000003db3c446d1 in child_watch_helper_thread (data=<optimized out>) at gmain.c:4329
#3  0x0000003db3c683a6 in g_thread_create_proxy (data=0x1afa2d0) at gthread.c:1955
#4  0x0000003db2407b41 in start_thread (arg=0x7f24837fd700) at pthread_create.c:305
#5  0x0000003db20e0e6d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7f24b0f13840 (LWP 5528)):
[KCrash Handler]
#6  0x0000003db2035215 in __GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#7  0x0000003db2036b2b in __GI_abort () at abort.c:93
#8  0x0000003dbb06b494 in qt_message_output (msgType=<optimized out>, buf=<optimized out>) at global/qglobal.cpp:2291
#9  0x0000003dbb06b64f in qt_message(QtMsgType, const char *, typedef __va_list_tag __va_list_tag *) (msgType=QtFatalMsg, msg=0x3dbb1b8ab8 "ASSERT: \"%s\" in file %s, line %d", ap=0x7fff56ea1cf8) at global/qglobal.cpp:2337
#10 0x0000003dbb06b7f4 in qFatal (msg=<optimized out>) at global/qglobal.cpp:2520
#11 0x0000003dce058028 in Phonon::StreamInterface::enoughData (this=0x1c73680) at /usr/src/debug/phonon-4.5.1/phonon/streaminterface.cpp:89
#12 0x00007f249442bb31 in Phonon::Gstreamer::StreamReader::unlock (this=0x1c73670) at /usr/src/debug/phonon-backend-gstreamer-4.5.1/gstreamer/streamreader.cpp:164
#13 0x00007f2494428330 in Phonon::Gstreamer::phonon_src_unlock (basesrc=0x1e5a180 [PhononSrc]) at /usr/src/debug/phonon-backend-gstreamer-4.5.1/gstreamer/phononsrc.cpp:264
#14 0x00007f248fdd6c72 in gst_base_src_set_flushing (basesrc=0x1e5a180 [PhononSrc], flushing=1, live_play=0, unlock=<optimized out>, playing=0x0) at gstbasesrc.c:2838
#15 0x00007f248fdd8eb3 in gst_base_src_activate_push (pad=0x1669510 [GstPad], active=<optimized out>) at gstbasesrc.c:2979
#16 0x00007f249416f63b in gst_pad_activate_push (pad=0x1669510 [GstPad], active=0) at gstpad.c:953
#17 0x00007f24941702a7 in gst_pad_set_active (pad=0x1669510 [GstPad], active=0) at gstpad.c:715
#18 0x00007f249414f8bb in activate_pads (pad=0x1669510 [GstPad], ret=0x7fff56ea20f0, active=<optimized out>) at gstelement.c:2802
#19 0x00007f2494161e3e in gst_iterator_fold (it=0x1cb0910, func=0x7f249414f8a0 <activate_pads>, ret=0x7fff56ea20f0, user_data=0x7fff56ea214c) at gstiterator.c:549
#20 0x00007f249414f831 in iterator_activate_fold_with_resync (iter=0x1cb0910, func=0x7f249414f8a0 <activate_pads>, user_data=0x7fff56ea214c) at gstelement.c:2834
#21 0x00007f2494151e17 in gst_element_pads_activate (element=0x1e5a180 [PhononSrc], active=0) at gstelement.c:2870
#22 0x00007f249415219c in gst_element_change_state_func (element=0x1e5a180 [PhononSrc], transition=<optimized out>) at gstelement.c:2960
#23 0x00007f248fddb964 in gst_base_src_change_state (element=0x1e5a180 [PhononSrc], transition=GST_STATE_CHANGE_PAUSED_TO_READY) at gstbasesrc.c:3097
#24 0x00007f249415416c in gst_element_change_state (element=<optimized out>, transition=<optimized out>) at gstelement.c:2718
#25 0x00007f2494154b52 in gst_element_set_state_func (element=0x1e5a180 [PhononSrc], state=GST_STATE_READY) at gstelement.c:2674
#26 0x00007f24941417fa in gst_bin_element_set_state (next=GST_STATE_READY, current=GST_STATE_READY, start_time=0, base_time=0, element=0x1e5a180 [PhononSrc], bin=0x1668030 [GstPipeline]) at gstbin.c:2193
#27 gst_bin_change_state_func (element=0x1668030 [GstPipeline], transition=18) at gstbin.c:2489
#28 0x00007f2494173da4 in gst_pipeline_change_state (element=0x1668030 [GstPipeline], transition=18) at gstpipeline.c:482
#29 0x00007f249415416c in gst_element_change_state (element=<optimized out>, transition=<optimized out>) at gstelement.c:2718
#30 0x00007f2494154b52 in gst_element_set_state_func (element=0x1668030 [GstPipeline], state=GST_STATE_READY) at gstelement.c:2674
#31 0x00007f249441aec6 in Phonon::Gstreamer::MediaNode::disconnectNode (this=0x1b2ef20, obj=0xfc3bf0) at /usr/src/debug/phonon-backend-gstreamer-4.5.1/gstreamer/medianode.cpp:202
#32 0x0000003dce047741 in Phonon::PathPrivate::executeTransaction (this=<optimized out>, disconnections=..., connections=...) at /usr/src/debug/phonon-4.5.1/phonon/path.cpp:316
#33 0x0000003dce048166 in Phonon::PathPrivate::phononObjectDestroyed (this=0x1b31a30, mediaNodePrivate=0x1bd3640) at /usr/src/debug/phonon-4.5.1/phonon/path.cpp:408
#34 0x0000003dce0414c4 in Phonon::MediaNodePrivate::~MediaNodePrivate (this=0x1bd3640, __in_chrg=<optimized out>) at /usr/src/debug/phonon-4.5.1/phonon/medianode.cpp:71
#35 0x0000003dce040b7c in ~MediaObjectPrivate (this=0x1bd3640, __in_chrg=<optimized out>) at /usr/src/debug/phonon-4.5.1/phonon/mediaobject_p.h:45
#36 Phonon::MediaObjectPrivate::~MediaObjectPrivate (this=0x1bd3640, __in_chrg=<optimized out>) at /usr/src/debug/phonon-4.5.1/phonon/mediaobject_p.h:45
#37 0x0000003dce03b64b in Phonon::MediaObject::~MediaObject (this=0x175e530, __in_chrg=<optimized out>) at /usr/src/debug/phonon-4.5.1/phonon/mediaobject.cpp:60
#38 0x0000003dce03b689 in Phonon::MediaObject::~MediaObject (this=0x175e530, __in_chrg=<optimized out>) at /usr/src/debug/phonon-4.5.1/phonon/mediaobject.cpp:76
#39 0x0000003dbb16c465 in QObjectPrivate::deleteChildren (this=0x1d563a0) at kernel/qobject.cpp:1955
#40 0x0000003dbb171a19 in QObject::~QObject (this=0x1d5be40, __in_chrg=<optimized out>) at kernel/qobject.cpp:946
#41 0x0000003dd049cdb9 in KJS::AudioQObject::~AudioQObject (this=0x1d5be40, __in_chrg=<optimized out>) at /usr/src/debug/kdelibs-4.6.5/khtml/ecma/kjs_audio.cpp:247
#42 0x0000003dd049cf17 in KJS::Audio::~Audio (this=0x7f24a8030380, __in_chrg=<optimized out>) at /usr/src/debug/kdelibs-4.6.5/khtml/ecma/kjs_audio.cpp:100
#43 0x0000003dcd83608c in KJS::Collector::collect () at /usr/src/debug/kdelibs-4.6.5/kjs/collector.cpp:795
#44 0x0000003dcd83637d in KJS::Collector::allocate (s=16) at /usr/src/debug/kdelibs-4.6.5/kjs/collector.cpp:331
#45 0x0000003dcd86144e in KJS::jsString (s=...) at /usr/src/debug/kdelibs-4.6.5/kjs/value.cpp:197
#46 0x0000003dcd87e51c in KJS::Machine::runBlock (exec=0x7fff56ea31c0, codeBlock=..., parentExec=0x7fff56ea3c30) at codes.def:969
#47 0x0000003dcd85e575 in KJS::FunctionImp::callAsFunction (this=0x7f249633f940, exec=0x7fff56ea3c30, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.6.5/kjs/function.cpp:172
#48 0x0000003dcd87d28a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.6.5/kjs/object.h:626
#49 KJS::Machine::runBlock (exec=0x7fff56ea3c30, codeBlock=..., parentExec=0x7fff56ea4850) at codes.def:1223
#50 0x0000003dcd85e575 in KJS::FunctionImp::callAsFunction (this=0x7f249633e940, exec=0x7fff56ea4850, thisObj=<optimized out>, args=...) at /usr/src/debug/kdelibs-4.6.5/kjs/function.cpp:172
#51 0x0000003dcd87d28a in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at /usr/src/debug/kdelibs-4.6.5/kjs/object.h:626
#52 KJS::Machine::runBlock (exec=0x7fff56ea4850, codeBlock=..., parentExec=0x0) at codes.def:1223
#53 0x0000003dcd838177 in KJS::FunctionBodyNode::execute (this=0x2019ea0, exec=0x7fff56ea4850) at /usr/src/debug/kdelibs-4.6.5/kjs/nodes.cpp:927
#54 0x0000003dcd8661e0 in KJS::Interpreter::evaluate (this=0xf1bce0, sourceURL=..., startingLineNumber=0, code=0x1f38d70, codeLength=33407, thisV=0x7f24a8030000) at /usr/src/debug/kdelibs-4.6.5/kjs/interpreter.cpp:564
#55 0x0000003dcd8662c4 in KJS::Interpreter::evaluate (this=<optimized out>, sourceURL=<optimized out>, startingLineNumber=<optimized out>, code=<optimized out>, thisV=<optimized out>) at /usr/src/debug/kdelibs-4.6.5/kjs/interpreter.cpp:504
#56 0x0000003dd046ce17 in KJSProxy::evaluate (this=0xe393e0, filename=..., baseLine=0, str=..., n=<optimized out>, completion=0x7fff56ea4b00) at /usr/src/debug/kdelibs-4.6.5/khtml/ecma/kjs_proxy.cpp:126
#57 0x0000003dd020b1d3 in KHTMLPart::executeScript (this=0xd378b0, filename=..., baseLine=0, n=..., script=...) at /usr/src/debug/kdelibs-4.6.5/khtml/khtml_part.cpp:1279
#58 0x0000003dd02ccd45 in khtml::HTMLTokenizer::scriptExecution (this=0xead730, str=..., scriptURL=<optimized out>, baseLine=0) at /usr/src/debug/kdelibs-4.6.5/khtml/html/htmltokenizer.cpp:517
#59 0x0000003dd02d0f3e in khtml::HTMLTokenizer::notifyFinished (this=0xead730, finishedObj=<optimized out>) at /usr/src/debug/kdelibs-4.6.5/khtml/html/htmltokenizer.cpp:2117
#60 0x0000003dd03edbef in khtml::CachedScript::checkNotify (this=0x16f8f00) at /usr/src/debug/kdelibs-4.6.5/khtml/misc/loader.cpp:397
#61 0x0000003dd03edddc in khtml::CachedScript::data (this=0x16f8f00, buffer=<optimized out>, eof=<optimized out>) at /usr/src/debug/kdelibs-4.6.5/khtml/misc/loader.cpp:389
#62 0x0000003dd03f053b in khtml::Loader::slotFinished (this=0xd41ce0, job=0x1428f20) at /usr/src/debug/kdelibs-4.6.5/khtml/misc/loader.cpp:1262
#63 0x0000003dd03f0a93 in khtml::Loader::qt_metacall (this=0xd41ce0, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fff56ea5120) at /usr/src/debug/kdelibs-4.6.5/x86_64-redhat-linux-gnu/khtml/loader.moc:141
#64 0x0000003dbb16d5aa in QMetaObject::activate (sender=0x1428f20, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff56ea5120) at kernel/qobject.cpp:3278
#65 0x0000003dc093afd2 in KJob::result (this=<optimized out>, _t1=0x1428f20) at /usr/src/debug/kdelibs-4.6.5/x86_64-redhat-linux-gnu/kdecore/kjob.moc:194
#66 0x0000003dc093b010 in KJob::emitResult (this=0x1428f20) at /usr/src/debug/kdelibs-4.6.5/kdecore/jobs/kjob.cpp:312
#67 0x0000003dc74f57a4 in KIO::SimpleJob::slotFinished (this=0x1428f20) at /usr/src/debug/kdelibs-4.6.5/kio/kio/job.cpp:525
#68 0x0000003dc74ff1d2 in KIO::TransferJob::slotFinished (this=0x1428f20) at /usr/src/debug/kdelibs-4.6.5/kio/kio/job.cpp:1120
#69 0x0000003dc74fbc51 in KIO::TransferJob::qt_metacall (this=0x1428f20, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fff56ea5500) at /usr/src/debug/kdelibs-4.6.5/x86_64-redhat-linux-gnu/kio/jobclasses.moc:367
#70 0x0000003dbb16d5aa in QMetaObject::activate (sender=0xece4f0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3278
#71 0x0000003dc759edf1 in KIO::SlaveInterface::dispatch (this=<optimized out>, _cmd=104, rawdata=...) at /usr/src/debug/kdelibs-4.6.5/kio/kio/slaveinterface.cpp:173
#72 0x0000003dc759bc55 in KIO::SlaveInterface::dispatch (this=0xece4f0) at /usr/src/debug/kdelibs-4.6.5/kio/kio/slaveinterface.cpp:89
#73 0x0000003dc758f3ce in KIO::Slave::gotInput (this=0xece4f0) at /usr/src/debug/kdelibs-4.6.5/kio/kio/slave.cpp:348
#74 0x0000003dc758fa1c in KIO::Slave::qt_metacall (this=0xece4f0, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fff56ea5920) at /usr/src/debug/kdelibs-4.6.5/x86_64-redhat-linux-gnu/kio/slave.moc:82
#75 0x0000003dbb16d5aa in QMetaObject::activate (sender=0xee8640, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3278
#76 0x0000003dc74c6f27 in dequeue (this=<optimized out>) at /usr/src/debug/kdelibs-4.6.5/kio/kio/connection.cpp:82
#77 KIO::ConnectionPrivate::dequeue (this=0xee84d0) at /usr/src/debug/kdelibs-4.6.5/kio/kio/connection.cpp:71
#78 0x0000003dc74c6fcd in KIO::Connection::qt_metacall (this=0xee8640, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x1b9e9d0) at /usr/src/debug/kdelibs-4.6.5/x86_64-redhat-linux-gnu/kio/connection.moc:79
#79 0x0000003dbb17116a in QObject::event (this=0xee8640, e=<optimized out>) at kernel/qobject.cpp:1217
#80 0x0000003dc23bcc64 in notify_helper (e=0x1be0180, receiver=0xee8640, this=0x856470) at kernel/qapplication.cpp:4481
#81 QApplicationPrivate::notify_helper (this=0x856470, receiver=0xee8640, e=0x1be0180) at kernel/qapplication.cpp:4453
#82 0x0000003dc23c1af1 in QApplication::notify (this=0x7fff56ea64b0, receiver=0xee8640, e=0x1be0180) at kernel/qapplication.cpp:4360
#83 0x0000003dc3a431c6 in KApplication::notify (this=0x7fff56ea64b0, receiver=0xee8640, event=0x1be0180) at /usr/src/debug/kdelibs-4.6.5/kdeui/kernel/kapplication.cpp:311
#84 0x0000003dbb15a8ec in QCoreApplication::notifyInternal (this=0x7fff56ea64b0, receiver=0xee8640, event=0x1be0180) at kernel/qcoreapplication.cpp:787
#85 0x0000003dbb15df28 in sendEvent (event=0x1be0180, receiver=0xee8640) at kernel/qcoreapplication.h:215
#86 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x831210) at kernel/qcoreapplication.cpp:1428
#87 0x0000003dbb184f33 in sendPostedEvents () at kernel/qcoreapplication.h:220
#88 postEventSourceDispatch (s=0x85a7c0) at kernel/qeventdispatcher_glib.cpp:277
#89 0x0000003db3c427ed in g_main_dispatch (context=0x8598e0) at gmain.c:2441
#90 g_main_context_dispatch (context=0x8598e0) at gmain.c:3014
#91 0x0000003db3c42fc8 in g_main_context_iterate (context=0x8598e0, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3092
#92 0x0000003db3c4325c in g_main_context_iteration (context=0x8598e0, may_block=1) at gmain.c:3155
#93 0x0000003dbb18538f in QEventDispatcherGlib::processEvents (this=0x832900, flags=<optimized out>) at kernel/qeventdispatcher_glib.cpp:422
#94 0x0000003dc245fc1e in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=<optimized out>) at kernel/qguieventdispatcher_glib.cpp:207
#95 0x0000003dbb159e02 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#96 0x0000003dbb159fff in QEventLoop::exec (this=0x7fff56ea6300, flags=...) at kernel/qeventloop.cpp:201
#97 0x0000003dbb15e117 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1064
#98 0x0000003dbfcb3b82 in kdemain (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/kdebase-4.6.5/konqueror/src/konqmain.cpp:219
#99 0x0000003db202135d in __libc_start_main (main=0x4007b0 <main(int, char**)>, argc=2, ubp_av=0x7fff56ea6d48, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff56ea6d38) at libc-start.c:226
#100 0x00000000004007e1 in _start ()

Possible duplicates by query: bug 292552, bug 290776.

Reported using DrKonqi