Bug 302262

Application: konqueror (4.8.3 (4.8.3))
KDE Platform Version: 4.8.3 (4.8.3)
Qt Version: 4.8.2
Operating System: Linux 3.4.2-4.fc17.x86_64 x86_64
Distribution (Platform): Fedora RPMs

-- Information about the crash:
What I was trying to do was open slacker.com in Konqueror.  I do not have flash player installed yet but I do I have Gnash installed.  I tried to open the site but it immediately crashes as soon as the page starts to try and load the flash plugin.  I am using the Webkit engine instead of the khtml engine.  I was hoping to start getting used to not having flash player as it appears that adobe will no longer support linux but still provide security updates for a time.  I tried opening this site three times but it fails exactly the same way each time.  I think this may be a bug related to Gnash but it could be how Konqueror implements Webkit.

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
82	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7f2d8da52880 (LWP 1729))]

Thread 4 (Thread 0x7f2d7f531700 (LWP 1737)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166
#1  0x00007f2d8137d77d in WTF::TCMalloc_PageHeap::scavengerThread (this=0x7f2d81d679a0) at wtf/FastMalloc.cpp:2495
#2  0x00007f2d8137d889 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at wtf/FastMalloc.cpp:1618
#3  0x0000003367407d14 in start_thread (arg=0x7f2d7f531700) at pthread_create.c:309
#4  0x00000033670f199d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 3 (Thread 0x7f2d7ec30700 (LWP 1738)):
#0  0x00000033670e8eef in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007f2d8eebb9b4 in g_main_context_poll (n_fds=1, fds=0x7f2d780029c0, timeout=5398, context=0x7f2d780009a0, priority=<optimized out>) at gmain.c:3440
#2  g_main_context_iterate (context=context@entry=0x7f2d780009a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<error reading variable: Unhandled dwarf expression opcode 0xfa>) at gmain.c:3141
#3  0x00007f2d8eebbad4 in g_main_context_iteration (context=0x7f2d780009a0, may_block=1) at gmain.c:3207
#4  0x00007f2d90ca5506 in QEventDispatcherGlib::processEvents (this=0x7f2d780008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#5  0x00007f2d90c7613f in QEventLoop::processEvents (this=this@entry=0x7f2d7ec2fd20, flags=...) at kernel/qeventloop.cpp:149
#6  0x00007f2d90c763c8 in QEventLoop::exec (this=0x7f2d7ec2fd20, flags=...) at kernel/qeventloop.cpp:204
#7  0x00007f2d90b79650 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501
#8  0x00007f2d90b7c5eb in QThreadPrivate::start (arg=0x16c62b0) at thread/qthread_unix.cpp:307
#9  0x0000003367407d14 in start_thread (arg=0x7f2d7ec30700) at pthread_create.c:309
#10 0x00000033670f199d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7f2d35979700 (LWP 1739)):
#0  0x00000033670e8eef in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007f2d8eebb9b4 in g_main_context_poll (n_fds=1, fds=0x7f2d30002250, timeout=-1, context=0x7f2d300009a0, priority=<optimized out>) at gmain.c:3440
#2  g_main_context_iterate (context=context@entry=0x7f2d300009a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<error reading variable: Unhandled dwarf expression opcode 0xfa>) at gmain.c:3141
#3  0x00007f2d8eebbad4 in g_main_context_iteration (context=0x7f2d300009a0, may_block=1) at gmain.c:3207
#4  0x00007f2d90ca5506 in QEventDispatcherGlib::processEvents (this=0x7f2d300008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#5  0x00007f2d90c7613f in QEventLoop::processEvents (this=this@entry=0x7f2d35978cf0, flags=...) at kernel/qeventloop.cpp:149
#6  0x00007f2d90c763c8 in QEventLoop::exec (this=0x7f2d35978cf0, flags=...) at kernel/qeventloop.cpp:204
#7  0x00007f2d90b79650 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501
#8  0x0000003378fa118e in KIO::NameLookUpThread::run (this=0x1e90a50) at /usr/src/debug/kdelibs-4.8.3/kio/kio/hostinfo.cpp:226
#9  0x00007f2d90b7c5eb in QThreadPrivate::start (arg=0x1e90a50) at thread/qthread_unix.cpp:307
#10 0x0000003367407d14 in start_thread (arg=0x7f2d35979700) at pthread_create.c:309
#11 0x00000033670f199d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7f2d8da52880 (LWP 1729)):
[KCrash Handler]
#6  0x00007f2d80acc099 in QWebFrame::childFrames (this=<optimized out>) at Api/qwebframe.cpp:1032
#7  0x000000338ae0f807 in collectAllChildFrames (frame=0x16d7860, list=...) at /usr/src/debug/kdelibs-4.8.3/kdewebkit/kwebwallet.cpp:93
#8  0x000000338ae0f884 in collectAllChildFrames (frame=frame@entry=0x16e2050, list=...) at /usr/src/debug/kdelibs-4.8.3/kdewebkit/kwebwallet.cpp:96
#9  0x000000338ae11ea9 in KWebWallet::fillFormData (this=0x16e93f0, frame=0x16e2050, recursive=true) at /usr/src/debug/kdelibs-4.8.3/kdewebkit/kwebwallet.cpp:440
#10 0x00007f2d81dab39d in KWebKitPart::slotLoadFinished (this=0x16c1420, ok=true) at /usr/src/debug/kwebkitpart-1.2/src/kwebkitpart.cpp:469
#11 0x00007f2d90c8db9f in QMetaObject::activate (sender=0x16c3340, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff6fa457d0) at kernel/qobject.cpp:3547
#12 0x00007f2d80ae0ea2 in QWebView::loadFinished (this=<optimized out>, _t1=true) at ./moc_qwebview.cpp:216
#13 0x00007f2d90c8db9f in QMetaObject::activate (sender=0x16c4220, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff6fa45920) at kernel/qobject.cpp:3547
#14 0x00007f2d80ad2112 in QWebPage::loadFinished (this=<optimized out>, _t1=true) at ./moc_qwebpage.cpp:389
#15 0x00007f2d80b046e7 in WebCore::FrameLoaderClientQt::emitLoadFinished (this=0x23a4070, ok=<optimized out>) at WebCoreSupport/FrameLoaderClientQt.cpp:1699
#16 0x00007f2d80b04728 in WebCore::FrameLoaderClientQt::dispatchDidFinishLoad (this=0x23a4070) at WebCoreSupport/FrameLoaderClientQt.cpp:527
#17 0x00007f2d80e53216 in WebCore::FrameLoader::checkLoadCompleteForThisFrame (this=0x7f2d36163978) at loader/FrameLoader.cpp:2530
#18 0x00007f2d80e51f23 in WebCore::FrameLoader::recursiveCheckLoadComplete (this=0x7f2d36163978) at loader/FrameLoader.cpp:2641
#19 0x00007f2d80e51f12 in WebCore::FrameLoader::recursiveCheckLoadComplete (this=0x7f2d7ec4b478) at loader/FrameLoader.cpp:2639
#20 0x00007f2d80e51fa0 in WebCore::FrameLoader::checkLoadComplete (this=this@entry=0x7f2d36163978) at loader/FrameLoader.cpp:2654
#21 0x00007f2d80e5207b in WebCore::FrameLoader::finishedLoading (this=0x7f2d36163978) at loader/FrameLoader.cpp:2298
#22 0x00007f2d80e6470a in WebCore::MainResourceLoader::didFinishLoading (this=0x7f2d36a6d480, finishTime=0) at loader/MainResourceLoader.cpp:484
#23 0x00007f2d80e649be in WebCore::MainResourceLoader::continueAfterContentPolicy (this=this@entry=0x7f2d36a6d480, contentPolicy=contentPolicy@entry=(anonymous namespace)::PolicyUse, r=...) at loader/MainResourceLoader.cpp:317
#24 0x00007f2d80e65066 in WebCore::MainResourceLoader::continueAfterContentPolicy (this=0x7f2d36a6d480, policy=(anonymous namespace)::PolicyUse) at loader/MainResourceLoader.cpp:333
#25 0x00007f2d80e6f36c in WebCore::PolicyChecker::continueAfterContentPolicy (this=0x7f2d36163988, policy=(anonymous namespace)::PolicyUse) at loader/PolicyChecker.cpp:187
#26 0x00007f2d80b05073 in WebCore::FrameLoaderClientQt::dispatchDecidePolicyForResponse (this=0x23a4070, function=(void ((anonymous namespace)::PolicyChecker::*)((anonymous namespace)::PolicyChecker * const, (anonymous namespace)::PolicyAction)) 0x7f2d80e6f010 <WebCore::PolicyChecker::continueAfterContentPolicy(WebCore::PolicyAction)>, response=...) at WebCoreSupport/FrameLoaderClientQt.cpp:1213
#27 0x00007f2d80e6ea72 in WebCore::PolicyChecker::checkContentPolicy (this=<optimized out>, response=..., function=<optimized out>, argument=<optimized out>) at loader/PolicyChecker.cpp:104
#28 0x00007f2d80e67c40 in WebCore::MainResourceLoader::didReceiveResponse (this=0x7f2d36a6d480, r=...) at loader/MainResourceLoader.cpp:428
#29 0x00007f2d80e639d9 in WebCore::MainResourceLoader::handleEmptyLoad (this=this@entry=0x7f2d36a6d480, url=..., forURLScheme=<optimized out>) at loader/MainResourceLoader.cpp:517
#30 0x00007f2d80e669f8 in WebCore::MainResourceLoader::loadNow (this=this@entry=0x7f2d36a6d480, r=...) at loader/MainResourceLoader.cpp:583
#31 0x00007f2d80e681e6 in WebCore::MainResourceLoader::load (this=0x7f2d36a6d480, r=..., substituteData=...) at loader/MainResourceLoader.cpp:612
#32 0x00007f2d80e438d5 in WebCore::DocumentLoader::startLoadingMainResource (this=0x7f2d36a86800, identifier=<optimized out>) at loader/DocumentLoader.cpp:798
#33 0x00007f2d80e4cf57 in WebCore::FrameLoader::continueLoadAfterWillSubmitForm (this=0x7f2d36163978) at loader/FrameLoader.cpp:2572
#34 0x00007f2d80e56890 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x7f2d36163978, formState=..., shouldContinue=true) at loader/FrameLoader.cpp:3105
#35 0x00007f2d80e568de in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=<optimized out>, request=..., formState=..., shouldContinue=<optimized out>) at loader/FrameLoader.cpp:2978
#36 0x00007f2d80e6bded in WebCore::PolicyCallback::call (this=0x7fff6fa46530, shouldContinue=true) at loader/PolicyCallback.cpp:103
#37 0x00007f2d80e70569 in WebCore::PolicyChecker::continueAfterNavigationPolicy (this=<optimized out>, policy=<optimized out>) at loader/PolicyChecker.cpp:160
#38 0x00007f2d80b0b787 in WebCore::FrameLoaderClientQt::dispatchDecidePolicyForNavigationAction (this=0x23a4070, function=(void ((anonymous namespace)::PolicyChecker::*)((anonymous namespace)::PolicyChecker * const, (anonymous namespace)::PolicyAction)) 0x7f2d80e6fd60 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=..., request=...) at WebCoreSupport/FrameLoaderClientQt.cpp:1283
#39 0x00007f2d80e716ba in WebCore::PolicyChecker::checkNavigationPolicy (this=0x7f2d36163988, request=..., loader=<optimized out>, formState=..., function=0x7f2d80e568c0 <WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>, argument=0x7f2d36163978) at loader/PolicyChecker.cpp:88
#40 0x00007f2d80e56c69 in WebCore::FrameLoader::loadWithDocumentLoader (this=this@entry=0x7f2d36163978, loader=loader@entry=0x7f2d36a86800, type=type@entry=(anonymous namespace)::FrameLoadTypeRedirectWithLockedBackForwardList, prpFormState=...) at loader/FrameLoader.cpp:1586
#41 0x00007f2d80e57451 in WebCore::FrameLoader::loadWithNavigationAction (this=this@entry=0x7f2d36163978, request=..., action=..., lockHistory=lockHistory@entry=false, type=type@entry=(anonymous namespace)::FrameLoadTypeRedirectWithLockedBackForwardList, formState=...) at loader/FrameLoader.cpp:1492
#42 0x00007f2d80e57fc0 in WebCore::FrameLoader::loadURL (this=this@entry=0x7f2d36163978, newURL=..., referrer=..., frameName=..., lockHistory=lockHistory@entry=false, newLoadType=newLoadType@entry=(anonymous namespace)::FrameLoadTypeRedirectWithLockedBackForwardList, event=..., prpFormState=...) at loader/FrameLoader.cpp:1435
#43 0x00007f2d80e59613 in WebCore::FrameLoader::loadURLIntoChildFrame (this=0x7f2d7ec4b478, url=..., referer=..., childFrame=0x7f2d36163900) at loader/FrameLoader.cpp:1012
#44 0x00007f2d80b07cee in WebCore::FrameLoaderClientQt::createFrame (this=0x16e1e30, url=..., name=..., ownerElement=<optimized out>, referrer=..., allowsScrolling=false, marginWidth=-1, marginHeight=-1) at WebCoreSupport/FrameLoaderClientQt.cpp:1329
#45 0x00007f2d80e802b1 in WebCore::SubframeLoader::loadSubframe (this=this@entry=0x7f2d7ec4b610, ownerElement=ownerElement@entry=0x23a3f70, url=..., name=..., referrer=...) at loader/SubframeLoader.cpp:265
#46 0x00007f2d80e80d2f in WebCore::SubframeLoader::loadOrRedirectSubframe (this=this@entry=0x7f2d7ec4b610, ownerElement=ownerElement@entry=0x23a3f70, url=..., frameName=..., lockHistory=lockHistory@entry=true, lockBackForwardList=lockBackForwardList@entry=true) at loader/SubframeLoader.cpp:240
#47 0x00007f2d80e813e7 in WebCore::SubframeLoader::requestFrame (this=0x7f2d7ec4b610, ownerElement=0x23a3f70, urlString=..., frameName=..., lockHistory=true, lockBackForwardList=true) at loader/SubframeLoader.cpp:83
#48 0x00007f2d80d6850a in openURL (lockBackForwardList=true, lockHistory=true, this=0x23a3f70) at html/HTMLFrameElementBase.cpp:108
#49 WebCore::HTMLFrameElementBase::openURL (this=0x23a3f70, lockHistory=true, lockBackForwardList=true) at html/HTMLFrameElementBase.cpp:96
#50 0x00007f2d80c3b494 in (anonymous namespace)::notifyChildInserted (child=0x23a3f70) at dom/ContainerNode.cpp:1074
#51 0x00007f2d80c3db32 in WebCore::ContainerNode::appendChild (this=0x23a3d60, newChild=..., ec=@0x7fff6fa4728c: 0, shouldLazyAttach=true) at dom/ContainerNode.cpp:645
#52 0x00007f2d80c81cf1 in WebCore::Node::appendChild (this=0x7f2d37088b78, newChild=..., ec=@0x23a4601: 67108864, shouldLazyAttach=4) at dom/Node.cpp:663
#53 0x00007f2d80b7bc07 in WebCore::JSNode::appendChild (this=<optimized out>, exec=0x7f2d375dd9b8) at bindings/js/JSNodeCustom.cpp:183
#54 0x00007f2d806feeab in WebCore::jsNodePrototypeFunctionAppendChild (exec=<optimized out>) at ../../WebCore/generated/JSNode.cpp:498
#55 0x00007f2d379dd1e8 in ?? ()
#56 0x00007f2d375dd9b8 in ?? ()
#57 0x00007f2d37b47d4a in ?? ()
#58 0x0000000000000000 in ?? ()

Reported using DrKonqi