Bug 296565

Application: konqueror (4.8.1 (4.8.1))
KDE Platform Version: 4.8.1 (4.8.1)
Qt Version: 4.8.0
Operating System: Linux 3.0.0-17-generic i686
Distribution: Ubuntu 11.10

-- Information about the crash:
Konqueror crashes at http://html5test.com after going back from the results page...

* Goto website
* View results
* Page Back (with arrow)

konqueror crashes and there is a system dialogue box:

konqueror requires an additional plugin to decode this file
 - text/html

(note: I've seen Firefox try to look for the same plugin on some pages, not this one though, before)

If you search, QApt Codec Searcher pops up but never does anything (stays at 0%)


* Also crashes if you click on the Other Browsers tab and click on the Your Browser tab. It'll show the results page for a second or two and then crash with the plugin search  prompt again.


It appears when you click on the Your Browser tab, it takes you to /index.html . If you restore Konqeror back to this point, it crashes every time.

This happens regardless of being at html5test or www.html5test incidentally.

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Aborted
[Current thread is 1 (Thread 0xb7745710 (LWP 8054))]

Thread 4 (Thread 0xad92cb70 (LWP 8086)):
#0  0x00268416 in __kernel_vsyscall ()
#1  0x005097ae in poll () from /lib/i386-linux-gnu/libc.so.6
#2  0x021de246 in ?? () from /usr/lib/i386-linux-gnu/libpulse.so.0
#3  0x021cc4ea in pa_mainloop_poll () from /usr/lib/i386-linux-gnu/libpulse.so.0
#4  0x021ccd47 in pa_mainloop_iterate () from /usr/lib/i386-linux-gnu/libpulse.so.0
#5  0x021cce24 in pa_mainloop_run () from /usr/lib/i386-linux-gnu/libpulse.so.0
#6  0x021de1ce in ?? () from /usr/lib/i386-linux-gnu/libpulse.so.0
#7  0x08d0f216 in ?? () from /usr/lib/i386-linux-gnu/libpulsecommon-1.0.so
#8  0x00bf8d31 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#9  0x0051846e in clone () from /lib/i386-linux-gnu/libc.so.6
Backtrace stopped: Not enough registers or memory available to unwind further

Thread 3 (Thread 0xa908eb70 (LWP 8087)):
#0  0x00268416 in __kernel_vsyscall ()
#1  0x00bfca5c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0x0052609c in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0x02e150a5 in gst_task_func (task=0xa5c1020) at gsttask.c:303
#4  0x02e16188 in default_func (tdata=0x98d13c0, pool=0xa0ecc20) at gsttaskpool.c:70
#5  0x013b0a27 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#6  0x013ae5f4 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#7  0x00bf8d31 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#8  0x0051846e in clone () from /lib/i386-linux-gnu/libc.so.6
Backtrace stopped: Not enough registers or memory available to unwind further

Thread 2 (Thread 0xa888db70 (LWP 8089)):
#0  0x00268416 in __kernel_vsyscall ()
#1  0x004e1926 in nanosleep () from /lib/i386-linux-gnu/libc.so.6
#2  0x013b1abe in g_usleep () from /lib/i386-linux-gnu/libglib-2.0.so.0
#3  0x0138378e in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0x013ae5f4 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#5  0x00bf8d31 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#6  0x0051846e in clone () from /lib/i386-linux-gnu/libc.so.6
Backtrace stopped: Not enough registers or memory available to unwind further

Thread 1 (Thread 0xb7745710 (LWP 8054)):
[KCrash Handler]
#7  0x00268416 in __kernel_vsyscall ()
#8  0x00472c8f in raise () from /lib/i386-linux-gnu/libc.so.6
#9  0x004762b5 in abort () from /lib/i386-linux-gnu/libc.so.6
#10 0x058106a6 in qt_message_output (msgType=QtFatalMsg, buf=0xa4aaba0 "ASSERT: \"d->connected\" in file ../../phonon/streaminterface.cpp, line 89") at global/qglobal.cpp:2276
#11 0x05810adb in qt_message (msgType=QtFatalMsg, msg=0x599c878 "ASSERT: \"%s\" in file %s, line %d", ap=0xbfe2f904 "\"\024\325\002\244\023\325\002Y") at global/qglobal.cpp:2322
#12 0x05810bf8 in qFatal (msg=0x599c878 "ASSERT: \"%s\" in file %s, line %d") at global/qglobal.cpp:2505
#13 0x05810c85 in qt_assert (assertion=0x2d51422 "d->connected", file=0x2d513a4 "../../phonon/streaminterface.cpp", line=89) at global/qglobal.cpp:2002
#14 0x02d44fc8 in Phonon::StreamInterface::enoughData (this=0x98968f8) at ../../phonon/streaminterface.cpp:89
#15 0x02562713 in Phonon::Gstreamer::StreamReader::unlock (this=0x98968f0) at ../../gstreamer/streamreader.cpp:164
#16 0x0255e6f2 in Phonon::Gstreamer::phonon_src_unlock (basesrc=0xa5b3598) at ../../gstreamer/phononsrc.cpp:264
#17 0x07fc2793 in gst_base_src_set_flushing (basesrc=0xa5b3598, flushing=1, live_play=0, unlock=1, playing=0x0) at gstbasesrc.c:2838
#18 0x07fc4fb8 in gst_base_src_activate_push (pad=0xa556f10, active=0) at gstbasesrc.c:2979
#19 0x02dea648 in gst_pad_activate_push (pad=0xa556f10, active=0) at gstpad.c:953
#20 0x02deb3e1 in gst_pad_set_active (pad=0xa556f10, active=0) at gstpad.c:715
#21 0x02dc791c in activate_pads (pad=0xa556f10, ret=0xbfe2fbac, active=0xbfe2fc0c) at gstelement.c:2802
#22 0x02ddbcb3 in gst_iterator_fold (it=0x9a2f3a8, func=0x2dc78f0 <activate_pads>, ret=0xbfe2fbac, user_data=0xbfe2fc0c) at gstiterator.c:549
#23 0x02dc783c in iterator_activate_fold_with_resync (iter=0x9a2f3a8, func=0x2dc78f0 <activate_pads>, user_data=0xbfe2fc0c) at gstelement.c:2834
#24 0x02dca3a1 in gst_element_pads_activate (element=0xa5b3598, active=0) at gstelement.c:2870
#25 0x02dca749 in gst_element_change_state_func (element=0xa5b3598, transition=GST_STATE_CHANGE_PAUSED_TO_READY) at gstelement.c:2960
#26 0x07fc8933 in gst_base_src_change_state (element=0xa5b3598, transition=GST_STATE_CHANGE_PAUSED_TO_READY) at gstbasesrc.c:3097
#27 0x02dcc77b in gst_element_change_state (element=0xa5b3598, transition=GST_STATE_CHANGE_PAUSED_TO_READY) at gstelement.c:2718
#28 0x02dcd235 in gst_element_set_state_func (element=0xa5b3598, state=GST_STATE_READY) at gstelement.c:2674
#29 0x02dcc4b1 in gst_element_set_state (element=0xa5b3598, state=GST_STATE_READY) at gstelement.c:2575
#30 0x02db7856 in gst_bin_element_set_state (next=GST_STATE_READY, current=GST_STATE_READY, start_time=0, base_time=0, element=0xa5b3598, bin=0xa5ba028) at gstbin.c:2193
#31 gst_bin_change_state_func (element=0xa5ba028, transition=18) at gstbin.c:2489
#32 0x02def550 in gst_pipeline_change_state (element=0xa5ba028, transition=18) at gstpipeline.c:482
#33 0x02dcc77b in gst_element_change_state (element=0xa5ba028, transition=18) at gstelement.c:2718
#34 0x02dcd235 in gst_element_set_state_func (element=0xa5ba028, state=GST_STATE_READY) at gstelement.c:2674
#35 0x02dcc4b1 in gst_element_set_state (element=0xa5ba028, state=GST_STATE_READY) at gstelement.c:2575
#36 0x0255035d in Phonon::Gstreamer::MediaNode::disconnectNode (this=0xa556710, obj=0x9a34410) at ../../gstreamer/medianode.cpp:202
#37 0x02541a68 in Phonon::Gstreamer::Backend::disconnectNodes (this=0x94f5a08, source=0xa556700, sink=0x9a34410) at ../../gstreamer/backend.cpp:415
#38 0x02d32ebc in Phonon::PathPrivate::executeTransaction (this=0xb3700650, disconnections=..., connections=...) at ../../phonon/path.cpp:316
#39 0x02d33a0c in Phonon::PathPrivate::phononObjectDestroyed (this=0xb3700650, mediaNodePrivate=0x9ac0940) at ../../phonon/path.cpp:408
#40 0x02d2c36f in Phonon::MediaNodePrivate::~MediaNodePrivate (this=0x9ac0940, __in_chrg=<optimized out>) at ../../phonon/medianode.cpp:71
#41 0x02d2bb2d in ~MediaObjectPrivate (this=0x9ac0940, __in_chrg=<optimized out>) at ../../phonon/mediaobject_p.h:45
#42 Phonon::MediaObjectPrivate::~MediaObjectPrivate (this=0x9ac0940, __in_chrg=<optimized out>) at ../../phonon/mediaobject_p.h:45
#43 0x02d2c0ed in Phonon::MediaNode::~MediaNode (this=0x9f840b8, __in_chrg=<optimized out>) at ../../phonon/medianode.cpp:57
#44 0x02d27ec0 in Phonon::MediaObject::~MediaObject (this=0x9f840b0, __in_chrg=<optimized out>) at ../../phonon/mediaobject.cpp:60
#45 0x02d27f22 in Phonon::MediaObject::~MediaObject (this=0x9f840b0, __in_chrg=<optimized out>) at ../../phonon/mediaobject.cpp:76
#46 0x05945521 in QObjectPrivate::deleteChildren (this=0x986d040) at kernel/qobject.cpp:1908
#47 0x0594ac91 in QObject::~QObject (this=0xa463558, __in_chrg=<optimized out>) at kernel/qobject.cpp:927
#48 0x02d0ba63 in Phonon::AbstractMediaStream::~AbstractMediaStream (this=0xa463558, __in_chrg=<optimized out>) at ../../phonon/abstractmediastream.cpp:50
#49 0x01ed1c37 in KJS::AudioQObject::~AudioQObject (this=0xa463558, __in_chrg=<optimized out>) at ../../khtml/ecma/kjs_audio.cpp:245
#50 0x01ed1c92 in KJS::AudioQObject::~AudioQObject (this=0xa463558, __in_chrg=<optimized out>) at ../../khtml/ecma/kjs_audio.cpp:247
#51 0x01ed1e2f in KJS::Audio::~Audio (this=0xb4420040, __in_chrg=<optimized out>) at ../../khtml/ecma/kjs_audio.cpp:100
#52 0x0817b13c in KJS::Collector::collect () at ../../kjs/collector.cpp:795
#53 0x0817b414 in KJS::Collector::allocate (s=28) at ../../kjs/collector.cpp:331
#54 0x081a823b in KJS::JSCell::operator new (size=28) at ../../kjs/value.cpp:41
#55 0x081c22ad in KJS::Machine::runBlock (exec=0xbfe3074c, codeBlock=..., parentExec=0x986d5e0) at codes.def:271
#56 0x081a58c4 in KJS::FunctionImp::callAsFunction (this=0xb41ef120, exec=0x986d5e0, thisObj=0xb4420000, args=...) at ../../kjs/function.cpp:172
#57 0x01e8a2f8 in call (args=<optimized out>, thisObj=<optimized out>, exec=<optimized out>, this=<optimized out>) at ../../kjs/object.h:626
#58 KJS::ScheduledAction::execute (this=0xb41ef120, window=0xb4420000) at ../../khtml/ecma/kjs_window.cpp:2283
#59 0x01e95476 in KJS::WindowQObject::timerEvent (this=0x988a148) at ../../khtml/ecma/kjs_window.cpp:2458
#60 0x0594b2d4 in QObject::event (this=0x988a148, e=0xbfe30d8c) at kernel/qobject.cpp:1157
#61 0x03fb6844 in notify_helper (e=0xbfe30d8c, receiver=0x988a148, this=0x93aca58) at kernel/qapplication.cpp:4555
#62 QApplicationPrivate::notify_helper (this=0x93aca58, receiver=0x988a148, e=0xbfe30d8c) at kernel/qapplication.cpp:4527
#63 0x03fbbc7d in QApplication::notify (this=0xbfe30d8c, receiver=0x988a148, e=0xbfe30d8c) at kernel/qapplication.cpp:4284
#64 0x010f3051 in KApplication::notify (this=0xbfe3117c, receiver=0x988a148, event=0xbfe30d8c) at ../../kdeui/kernel/kapplication.cpp:311
#65 0x0593018e in QCoreApplication::notifyInternal (this=0xbfe3117c, receiver=0x988a148, event=0xbfe30d8c) at kernel/qcoreapplication.cpp:876
#66 0x05965260 in sendEvent (event=0xbfe30d8c, receiver=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#67 QTimerInfoList::activateTimers (this=0x93af4ec) at kernel/qeventdispatcher_unix.cpp:611
#68 0x05962948 in timerSourceDispatch (source=0x93af4b8) at kernel/qeventdispatcher_glib.cpp:186
#69 timerSourceDispatch (source=0x93af4b8) at kernel/qeventdispatcher_glib.cpp:180
#70 0x0138725f in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#71 0x01387990 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#72 0x01387c2a in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#73 0x05963167 in QEventDispatcherGlib::processEvents (this=0x9389ef0, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#74 0x0406bfda in QGuiEventDispatcherGlib::processEvents (this=0x9389ef0, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#75 0x0592ed1d in QEventLoop::processEvents (this=0xbfe31004, flags=...) at kernel/qeventloop.cpp:149
#76 0x0592efb9 in QEventLoop::exec (this=0xbfe31004, flags=...) at kernel/qeventloop.cpp:204
#77 0x059346ca in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1148
#78 0x03fb46a4 in QApplication::exec () at kernel/qapplication.cpp:3816
#79 0x00e64cb5 in kdemain (argc=1, argv=0xbfe314d4) at ../../../konqueror/src/konqmain.cpp:242
#80 0x0804850b in main (argc=1, argv=0xbfe314d4) at konqueror_dummy.cpp:3

Possible duplicates by query: bug 296031, bug 292395.

Reported using DrKonqi