Bug 297744

Application: konqueror (4.8.2 (4.8.2))
KDE Platform Version: 4.8.2 (4.8.2)
Qt Version: 4.8.1
Operating System: Linux 3.4.0-0.rc1.git3.1.fc18.x86_64 x86_64
Distribution: "Fedora release 18 (Rawhide)"

-- Information about the crash:
- What I was doing when the application crashed:
Phoronix.com opened fine and then I did a large system update and rebooted. Phoronix.com crashed on first view, but opened fine afterwards.

-- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
82	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7f35ddea6880 (LWP 4979))]

Thread 6 (Thread 0x7f35d157c700 (LWP 4980)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166
#1  0x0000003a9337e685 in WTF::TCMalloc_PageHeap::scavengerThread (this=0x3a93d52740) at ../../../Source/JavaScriptCore/wtf/FastMalloc.cpp:2495
#2  0x0000003a9337e6e9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at ../../../Source/JavaScriptCore/wtf/FastMalloc.cpp:1618
#3  0x0000003602207d14 in start_thread (arg=0x7f35d157c700) at pthread_create.c:309
#4  0x00000036016f194d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 5 (Thread 0x7f35d0c7b700 (LWP 4981)):
#0  0x00000036016e8e9f in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x0000003a84047974 in g_main_context_poll (n_fds=1, fds=0x7f35cc0029c0, timeout=1439, context=0x7f35cc0009a0, priority=<optimized out>) at gmain.c:3417
#2  g_main_context_iterate (context=context@entry=0x7f35cc0009a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<error reading variable: Unhandled dwarf expression opcode 0xfa>) at gmain.c:3118
#3  0x0000003a84047a94 in g_main_context_iteration (context=0x7f35cc0009a0, may_block=1) at gmain.c:3184
#4  0x0000003a861a3a46 in QEventDispatcherGlib::processEvents (this=0x7f35cc0008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#5  0x0000003a8617499f in QEventLoop::processEvents (this=this@entry=0x7f35d0c7ad20, flags=...) at kernel/qeventloop.cpp:149
#6  0x0000003a86174c28 in QEventLoop::exec (this=0x7f35d0c7ad20, flags=...) at kernel/qeventloop.cpp:204
#7  0x0000003a860785e0 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501
#8  0x0000003a8607b57b in QThreadPrivate::start (arg=0x25d8310) at thread/qthread_unix.cpp:298
#9  0x0000003602207d14 in start_thread (arg=0x7f35d0c7b700) at pthread_create.c:309
#10 0x00000036016f194d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 4 (Thread 0x7f3587c8a700 (LWP 5004)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166
#1  0x00007f35887ad643 in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x0000003602207d14 in start_thread (arg=0x7f3587c8a700) at pthread_create.c:309
#3  0x00000036016f194d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 3 (Thread 0x7f3587489700 (LWP 5005)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166
#1  0x00007f35887ad643 in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x0000003602207d14 in start_thread (arg=0x7f3587489700) at pthread_create.c:309
#3  0x00000036016f194d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7f3586c88700 (LWP 5006)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166
#1  0x00007f35887ad643 in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x0000003602207d14 in start_thread (arg=0x7f3586c88700) at pthread_create.c:309
#3  0x00000036016f194d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7f35ddea6880 (LWP 4979)):
[KCrash Handler]
#6  lengthOfCharactersAsInteger (length=32565, data=0x0) at ../../../Source/JavaScriptCore/wtf/text/WTFString.cpp:877
#7  WTF::charactersToInt (data=0x0, length=32565, ok=0x0) at ../../../Source/JavaScriptCore/wtf/text/WTFString.cpp:921
#8  0x0000003a92d6d6bb in toInt (ok=0x0, this=0x7f3588c0be90) at ../../../Source/JavaScriptCore/wtf/text/AtomicString.h:88
#9  WebCore::HTMLFrameElementBase::parseMappedAttribute (this=0x2e70530, attr=0x7f3588c0be80) at ../../../Source/WebCore/html/HTMLFrameElementBase.cpp:130
#10 0x0000003a92d714d5 in WebCore::HTMLIFrameElement::parseMappedAttribute (this=0x2e70530, attr=0x7f3588c0be80) at ../../../Source/WebCore/html/HTMLIFrameElement.cpp:131
#11 0x0000003a9327e39f in WebCore::StyledElement::attributeChanged (this=0x2e70530, attr=0x7f3588c0be80, preserveDecls=<optimized out>) at ../../../Source/WebCore/dom/StyledElement.cpp:188
#12 0x0000003a92c822cf in WebCore::NamedNodeMap::addAttribute (this=0x7f3588c15ce8, prpAttribute=...) at ../../../Source/WebCore/dom/NamedNodeMap.cpp:255
#13 0x0000003a92c7059f in WebCore::Element::setAttribute (this=0x2e70530, name=..., value=...) at ../../../Source/WebCore/dom/Element.cpp:719
#14 0x0000003a92c70a1e in WebCore::Element::setAttribute (this=<optimized out>, name=..., value=...) at ../../../Source/WebCore/dom/Element.cpp:239
#15 0x0000003a927e977e in WebCore::setJSHTMLIFrameElementMarginHeight (exec=<optimized out>, thisObject=<optimized out>, value=...) at ../../WebCore/generated/JSHTMLIFrameElement.cpp:351
#16 0x0000003a927e8985 in lookupPut<WebCore::JSHTMLIFrameElement> (thisObj=0x7f3589fc1420, table=0x3a93d3c2e0, value=..., propertyName=..., exec=0x7f358a102038) at ../../../../Source/JavaScriptCore/runtime/Lookup.h:319
#17 lookupPut<WebCore::JSHTMLIFrameElement, WebCore::JSHTMLElement> (slot=..., thisObj=0x7f3589fc1420, table=0x3a93d3c2e0, value=..., propertyName=..., exec=0x7f358a102038) at ../../../../Source/JavaScriptCore/runtime/Lookup.h:333
#18 WebCore::JSHTMLIFrameElement::put (this=0x7f3589fc1420, exec=0x7f358a102038, propertyName=..., value=..., slot=...) at ../../WebCore/generated/JSHTMLIFrameElement.cpp:312
#19 0x0000003a933b09d4 in put (slot=..., value=..., propertyName=..., exec=0x7f358a102038, this=0x7fffbdea4700) at ../../../Source/JavaScriptCore/runtime/JSObject.h:804
#20 JSC::cti_op_put_by_id (args=0x7fffbdea4760) at ../../../Source/JavaScriptCore/jit/JITStubs.cpp:1439
#21 0x00007f358a547834 in ?? ()
#22 0x0000000000000000 in ?? ()

Reported using DrKonqi