Bug 301155

Summary:	Konqueror crashes on viewing Java plugin
Product:	[Unmaintained] kdelibs	Reporter:	Vincent-Xavier JUMEL <endymion+kde>
Component:	kdewebkit	Assignee:	webkit-devel
Status:	RESOLVED UPSTREAM
Severity:	crash	CC:	adawit, cfeck, endymion+kde, spearhead2k3
Priority:	NOR
Version:	4.8
Target Milestone:	---
Platform:	Compiled Sources
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	New crash information added by DrKonqi New crash information added by DrKonqi

Description Vincent-Xavier JUMEL 2012-06-04 14:20:50 UTC

Application: konqueror (4.8.3 (4.8.3))
KDE Platform Version: 4.8.3 (4.8.3) (Compiled from sources)
Qt Version: 4.8.2
Operating System: Linux 3.3.3-gentoo x86_64
Distribution: "Gentoo Base System release 2.1"

-- Information about the crash:
- What I was doing when the application crashed:
Viewing http://gilles.dubois10.free.fr/Bases/Ensembles/egalite.html (french page on extensive equality of two sets.)

- Custom settings of the application: Using Java 1.6.0

I'll try to use Java 1.7

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (kdeinit4), signal: Aborted
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f3c5bf74780 (LWP 28142))]

Thread 7 (Thread 0x7f3c4547b700 (LWP 28151)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007f3c47ebf3b4 in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#2  0x00007f3c47ebf4e9 in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#3  0x00007f3c5a7d4006 in start_thread (arg=0x7f3c4547b700) at pthread_create.c:305
#4  0x00007f3c5951d5cd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 6 (Thread 0x7f3c44b7a700 (LWP 28152)):
#0  0x00007f3c595148f3 in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007f3c565f5d6e in g_main_context_poll (n_fds=1, fds=0x7f3c400029c0, timeout=-1, context=0x7f3c400009a0, priority=<optimized out>) at gmain.c:3440
#2  g_main_context_iterate (dispatch=1, block=<optimized out>, context=0x7f3c400009a0, self=<optimized out>) at gmain.c:3141
#3  g_main_context_iterate (context=0x7f3c400009a0, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3083
#4  0x00007f3c565f5e8c in g_main_context_iteration (context=0x7f3c400009a0, may_block=1) at gmain.c:3207
#5  0x00007f3c5ab99e2e in QEventDispatcherGlib::processEvents (this=0x7f3c400008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#6  0x00007f3c5ab69652 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#7  0x00007f3c5ab698d7 in QEventLoop::exec (this=0x7f3c44b79e00, flags=...) at kernel/qeventloop.cpp:204
#8  0x00007f3c5aa67bbf in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501
#9  0x00007f3c5aa6abfb in QThreadPrivate::start (arg=0x1027930) at thread/qthread_unix.cpp:307
#10 0x00007f3c5a7d4006 in start_thread (arg=0x7f3c44b7a700) at pthread_create.c:305
#11 0x00007f3c5951d5cd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 5 (Thread 0x7f3bf5e7f700 (LWP 28179)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007f3bf4b6e4c7 in queue_processor (data=0x280a310) at /var/tmp/portage/dev-java/icedtea-web-1.2/work/icedtea-web-1.2/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:727
#2  0x00007f3c5a7d4006 in start_thread (arg=0x7f3bf5e7f700) at pthread_create.c:305
#3  0x00007f3c5951d5cd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 4 (Thread 0x7f3bf567e700 (LWP 28180)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007f3bf4b6e4c7 in queue_processor (data=0x280a310) at /var/tmp/portage/dev-java/icedtea-web-1.2/work/icedtea-web-1.2/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:727
#2  0x00007f3c5a7d4006 in start_thread (arg=0x7f3bf567e700) at pthread_create.c:305
#3  0x00007f3c5951d5cd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 3 (Thread 0x7f3bed585700 (LWP 28181)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007f3bf4b6e4c7 in queue_processor (data=0x280a310) at /var/tmp/portage/dev-java/icedtea-web-1.2/work/icedtea-web-1.2/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:727
#2  0x00007f3c5a7d4006 in start_thread (arg=0x7f3bed585700) at pthread_create.c:305
#3  0x00007f3c5951d5cd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7f3be523c700 (LWP 28196)):
#0  0x00007f3c595148f3 in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007f3c565f5d6e in g_main_context_poll (n_fds=1, fds=0x7f3be806bf30, timeout=-1, context=0x28fece0, priority=<optimized out>) at gmain.c:3440
#2  g_main_context_iterate (dispatch=1, block=<optimized out>, context=0x28fece0, self=<optimized out>) at gmain.c:3141
#3  g_main_context_iterate (context=0x28fece0, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3083
#4  0x00007f3c565f5e8c in g_main_context_iteration (context=0x28fece0, may_block=1) at gmain.c:3207
#5  0x00007f3c565f5ef1 in glib_worker_main (data=<optimized out>) at gmain.c:4879
#6  0x00007f3c56617a15 in g_thread_proxy (data=0x28299e0) at gthread.c:801
#7  0x00007f3c5a7d4006 in start_thread (arg=0x7f3be523c700) at pthread_create.c:305
#8  0x00007f3c5951d5cd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7f3c5bf74780 (LWP 28142)):
[KCrash Handler]
#6  0x00007f3c5946bd75 in __GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#7  0x00007f3c5946d245 in __GI_abort () at abort.c:91
#8  0x00007f3c594aa0be in __libc_message (do_abort=2, fmt=0x7f3c5959e8f0 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:198
#9  0x00007f3c594afe7d in malloc_printerr (action=3, str=0x7f3c5959b888 "free(): invalid pointer", ptr=<optimized out>) at malloc.c:5007
#10 0x00007f3bf4b58e8d in plugin_data_destroy (instance=0x7f3c44bff8b0) at /var/tmp/portage/dev-java/icedtea-web-1.2/work/icedtea-web-1.2/plugin/icedteanp/IcedTeaNPPlugin.cc:2003
#11 ITNP_Destroy (instance=0x7f3c44bff8b0, save=<optimized out>) at /var/tmp/portage/dev-java/icedtea-web-1.2/work/icedtea-web-1.2/plugin/icedteanp/IcedTeaNPPlugin.cc:713
#12 0x00007f3c47a6c91d in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#13 0x00007f3c47a6d838 in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#14 0x00007f3c47a6e009 in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#15 0x00007f3c47b56e2f in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#16 0x00007f3c47b57c8d in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#17 0x00007f3c47738e4c in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#18 0x00007f3c477524db in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#19 0x00007f3c479cfe88 in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#20 0x00007f3c47964e64 in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#21 0x00007f3c475d463b in QWebPage::~QWebPage() () from /usr/lib64/qt4/libQtWebKit.so.4
#22 0x00007f3c48b4cda9 in WebPage::~WebPage (this=0x1e9e010, __in_chrg=<optimized out>) at /var/tmp/portage/kde-misc/kwebkitpart-1.2.0/work/kwebkitpart-1.2.0/src/webpage.cpp:135
#23 0x00007f3c475db7a6 in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#24 0x00007f3c475db7f3 in ?? () from /usr/lib64/qt4/libQtWebKit.so.4
#25 0x00007f3c475db48f in QWebView::~QWebView() () from /usr/lib64/qt4/libQtWebKit.so.4
#26 0x00007f3c48b478e9 in WebView::~WebView (this=0x1ea4bb0, __in_chrg=<optimized out>) at /var/tmp/portage/kde-misc/kwebkitpart-1.2.0/work/kwebkitpart-1.2.0/src/webview.cpp:73
#27 0x00007f3c5ab7d384 in QObjectPrivate::deleteChildren (this=0x1ea48f0) at kernel/qobject.cpp:1908
#28 0x00007f3c59d10d87 in QWidget::~QWidget (this=0x1ea48c0, __in_chrg=<optimized out>) at kernel/qwidget.cpp:1677
#29 0x00007f3c59d11069 in QWidget::~QWidget (this=0x1ea48c0, __in_chrg=<optimized out>) at kernel/qwidget.cpp:1701
#30 0x00007f3c51e57512 in KParts::Part::~Part (this=0x1e873a0, __vtt_parm=0x7f3c48d70990, __in_chrg=<optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.8.3/work/kdelibs-4.8.3/kparts/part.cpp:209
#31 0x00007f3c48b38b57 in KWebKitPart::~KWebKitPart (this=0x1e873a0, __in_chrg=<optimized out>, __vtt_parm=<optimized out>) at /var/tmp/portage/kde-misc/kwebkitpart-1.2.0/work/kwebkitpart-1.2.0/src/kwebkitpart.cpp:186
#32 0x00007f3c48b38bc9 in KWebKitPart::~KWebKitPart (this=0x1e873a0, __in_chrg=<optimized out>, __vtt_parm=<optimized out>) at /var/tmp/portage/kde-misc/kwebkitpart-1.2.0/work/kwebkitpart-1.2.0/src/kwebkitpart.cpp:188
#33 0x00007f3c5252c743 in KonqView::~KonqView (this=0x1e9dcd0, __in_chrg=<optimized out>) at /var/tmp/portage/kde-base/konqueror-4.8.3/work/konqueror-4.8.3/konqueror/src/konqview.cpp:123
#34 0x00007f3c5252ca29 in KonqView::~KonqView (this=0x1e9dcd0, __in_chrg=<optimized out>) at /var/tmp/portage/kde-base/konqueror-4.8.3/work/konqueror-4.8.3/konqueror/src/konqview.cpp:131
#35 0x00007f3c52535da7 in KonqViewManager::removeTab (this=0x977450, currentFrame=0x1e96e18, emitAboutToRemoveSignal=<optimized out>) at /var/tmp/portage/kde-base/konqueror-4.8.3/work/konqueror-4.8.3/konqueror/src/konqviewmanager.cpp:424
#36 0x00007f3c52572732 in KonqMainWindow::removeTab (this=0x8f3550, tabIndex=<optimized out>) at /var/tmp/portage/kde-base/konqueror-4.8.3/work/konqueror-4.8.3/konqueror/src/konqmainwindow.cpp:2477
#37 0x00007f3c5257fe10 in qt_static_metacall (_a=<optimized out>, _id=<optimized out>, _o=0x8f3550, _c=<optimized out>) at /var/tmp/portage/kde-base/konqueror-4.8.3/work/konqueror-4.8.3_build/konqueror/src/konqmainwindow.moc:390
#38 KonqMainWindow::qt_static_metacall (_o=0x8f3550, _c=<optimized out>, _id=<optimized out>, _a=<optimized out>) at /var/tmp/portage/kde-base/konqueror-4.8.3/work/konqueror-4.8.3_build/konqueror/src/konqmainwindow.moc:303
#39 0x00007f3c5ab83d7e in QObject::event (this=0x8f3550, e=<optimized out>) at kernel/qobject.cpp:1195
#40 0x00007f3c59d1607b in QWidget::event (this=0x8f3550, event=0x2743450) at kernel/qwidget.cpp:8830
#41 0x00007f3c5a0d83d3 in QMainWindow::event (this=0x8f3550, event=0x2743450) at widgets/qmainwindow.cpp:1478
#42 0x00007f3c5ba66b37 in KXmlGuiWindow::event (this=0x8f3550, ev=0x2743450) at /var/tmp/portage/kde-base/kdelibs-4.8.3/work/kdelibs-4.8.3/kdeui/xmlgui/kxmlguiwindow.cpp:126
#43 0x00007f3c52563484 in KonqMainWindow::event (this=0x8f3550, e=0x2743450) at /var/tmp/portage/kde-base/konqueror-4.8.3/work/konqueror-4.8.3/konqueror/src/konqmainwindow.cpp:5620
#44 0x00007f3c59cc5474 in notify_helper (e=0x2743450, receiver=0x8f3550, this=0x6f8b10) at kernel/qapplication.cpp:4551
#45 QApplicationPrivate::notify_helper (this=0x6f8b10, receiver=0x8f3550, e=0x2743450) at kernel/qapplication.cpp:4523
#46 0x00007f3c59cca1d3 in QApplication::notify (this=0x7fffadf52c60, receiver=0x8f3550, e=0x2743450) at kernel/qapplication.cpp:4412
#47 0x00007f3c5b966d48 in KApplication::notify (this=0x7fffadf52c60, receiver=0x8f3550, event=0x2743450) at /var/tmp/portage/kde-base/kdelibs-4.8.3/work/kdelibs-4.8.3/kdeui/kernel/kapplication.cpp:311
#48 0x00007f3c5ab6abab in QCoreApplication::notifyInternal (this=0x7fffadf52c60, receiver=0x8f3550, event=0x2743450) at kernel/qcoreapplication.cpp:915
#49 0x00007f3c5ab6e4c9 in sendEvent (event=0x2743450, receiver=0x8f3550) at kernel/qcoreapplication.h:231
#50 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x6112b0) at kernel/qcoreapplication.cpp:1539
#51 0x00007f3c5ab999f3 in sendPostedEvents () at kernel/qcoreapplication.h:236
#52 postEventSourceDispatch (s=0x6fa130) at kernel/qeventdispatcher_glib.cpp:279
#53 0x00007f3c565f5a92 in g_main_dispatch (context=0x6fa000) at gmain.c:2539
#54 g_main_context_dispatch (context=0x6fa000) at gmain.c:3075
#55 0x00007f3c565f5dd5 in g_main_context_iterate (dispatch=1, block=<optimized out>, context=0x6fa000, self=<optimized out>) at gmain.c:3146
#56 g_main_context_iterate (context=0x6fa000, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3083
#57 0x00007f3c565f5e8c in g_main_context_iteration (context=0x6fa000, may_block=1) at gmain.c:3207
#58 0x00007f3c5ab99dd6 in QEventDispatcherGlib::processEvents (this=0x6137d0, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#59 0x00007f3c59d692c6 in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#60 0x00007f3c5ab69652 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#61 0x00007f3c5ab698d7 in QEventLoop::exec (this=0x7fffadf52a80, flags=...) at kernel/qeventloop.cpp:204
#62 0x00007f3c5ab6e7c5 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1187
#63 0x00007f3c5259ffb1 in kdemain (argc=<optimized out>, argv=<optimized out>) at /var/tmp/portage/kde-base/konqueror-4.8.3/work/konqueror-4.8.3/konqueror/src/konqmain.cpp:227
#64 0x0000000000408b74 in launch (argc=1, _name=0x673b58 "konqueror", args=<optimized out>, cwd=0x0, envc=<optimized out>, envs=<optimized out>, reset_env=false, tty=0x0, avoid_loops=false, startup_id_str=0x40b58e "0") at /var/tmp/portage/kde-base/kdelibs-4.8.3/work/kdelibs-4.8.3/kinit/kinit.cpp:734
#65 0x0000000000409c36 in handle_launcher_request (sock=7, who=<optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.8.3/work/kdelibs-4.8.3/kinit/kinit.cpp:1226
#66 0x000000000040a183 in handle_requests (waitForPid=0) at /var/tmp/portage/kde-base/kdelibs-4.8.3/work/kdelibs-4.8.3/kinit/kinit.cpp:1419
#67 0x0000000000405a8d in main (argc=2, argv=0x7fffadf54140, envp=0x7fffadf54410) at /var/tmp/portage/kde-base/kdelibs-4.8.3/work/kdelibs-4.8.3/kinit/kinit.cpp:1907

Possible duplicates by query: bug 300513, bug 299414, bug 299137, bug 297779, bug 297089.

Reported using DrKonqi

Comment 1 Vincent-Xavier JUMEL 2012-06-04 15:28:17 UTC

(In reply to comment #0)
> - Custom settings of the application: Using Java 1.6.0
> 
> I'll try to use Java 1.7
> 
> The crash can be reproduced every time.

Still crashes with java 1.7

Comment 2 Christoph Feck 2012-06-27 12:57:23 UTC

See also bug 297698 for rekonq, so it is probably a WebKit bug.

Comment 3 Vincent-Xavier JUMEL 2012-07-17 13:24:03 UTC

Created attachment 72586 [details]
New crash information added by DrKonqi

konqueror (4.8.97) on KDE Platform 4.8.97 using Qt 4.8.2

- What I was doing when the application crashed:
Browsing http://geogebra.org/cms/en/ website

-- Backtrace (Reduced):
#6  0x00007fd97d43cd75 in __GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#7  0x00007fd97d43e245 in __GI_abort () at abort.c:91
[...]
#9  0x00007fd97d480e7d in malloc_printerr (action=3, str=0x7fd97d56c888 "free(): invalid pointer", ptr=<optimized out>) at malloc.c:5007
#10 0x00007fd917b78e8d in plugin_data_destroy (instance=0x7fd968c2d8b0) at /var/tmp/portage/dev-java/icedtea-web-1.2-r7/work/icedtea-web-1.2/plugin/icedteanp/IcedTeaNPPlugin.cc:2003
#11 ITNP_Destroy (instance=0x7fd968c2d8b0, save=<optimized out>) at /var/tmp/portage/dev-java/icedtea-web-1.2-r7/work/icedtea-web-1.2/plugin/icedteanp/IcedTeaNPPlugin.cc:713

Comment 4 David 2012-08-19 16:13:53 UTC

Created attachment 73304 [details]
New crash information added by DrKonqi

rekonq (0.9.2) on KDE Platform 4.9.00 using Qt 4.8.1

- What I was doing when the application crashed:
I just wanted to use www.pingtest.net - but rekonq crashes as soon as you selected a server (the point the java applet loads)
- Custom settings of the application:
the website i want to use requires java

-- Backtrace (Reduced):
#6  0x00007fe93ce17445 in __GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#7  0x00007fe93ce1abab in __GI_abort () at abort.c:91
[...]
#9  0x00007fe93ce5f626 in malloc_printerr (action=3, str=0x7fe93cf5a081 "free(): invalid pointer", ptr=<optimized out>) at malloc.c:5007
#10 0x00007fe91c3bad7e in ITNP_Destroy(_NPP*, _NPSavedData**) () from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so
#11 0x00007fe93bb1587c in WebCore::PluginView::stop (this=0x7fe91c76e000) at plugins/PluginView.cpp:385

Comment 5 Dawit Alemayehu 2012-09-08 03:20:51 UTC

This is an upstream QtWebKit issue. However, I can tell you that I could no longer reproduce this crash using what will hopefully be released as QtWebKit v2.3.0 and the icedtea java 7 plugin. Regardless, this needs to be reported upstream. See http://trac.webkit.org/wiki/QtWebKitBugs.