Bug 319333

Application: rekonq (2.3.0)
KDE Platform Version: 4.10.2
Qt Version: 4.8.4
Operating System: Linux 3.8.8-202.fc18.x86_64 x86_64
Distribution (Platform): Fedora RPMs

-- Information about the crash:
- What I was doing when the application crashed:

1. Open: http://forums.overclockers.com.au/showthread.php?t=1074078&page=3
2. Find thread's page switcher (paginator).
3. Click on page number 2.

Reproducible always now, but I managed to get from page 1 to 2 before I hit this Rekonq crash while switching from page 2 to 3.

If you can't reproduce it, try:
1. Open: http://forums.overclockers.com.au/showthread.php?t=1074078
2. Navigate through thread pages one by one.

-- Backtrace:
Application: rekonq (rekonq), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
81	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7ff0241a1880 (LWP 27139))]

Thread 7 (Thread 0x7ff017832700 (LWP 27140)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x0000003a9a2169bd in WTF::TCMalloc_PageHeap::scavengerThread (this=0x3a9ac01d00 <WTF::pageheap_memory>) at wtf/FastMalloc.cpp:2495
#2  0x0000003a9a216ac9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at wtf/FastMalloc.cpp:1618
#3  0x0000003a28e07d15 in start_thread (arg=0x7ff017832700) at pthread_create.c:308
#4  0x0000003a286f248d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114

Thread 6 (Thread 0x7ff016f21700 (LWP 27141)):
#0  0x0000003a28e0aacf in __pthread_mutex_unlock_usercnt (mutex=0x7ff010000a60, decr=decr@entry=1) at pthread_mutex_unlock.c:52
#1  0x0000003a28e0ab2a in __GI___pthread_mutex_unlock (mutex=<optimized out>) at pthread_mutex_unlock.c:297
#2  0x0000003a28284dd1 in g_mutex_unlock (mutex=<optimized out>) at gthread-posix.c:229
#3  0x0000003a282471c5 in g_main_context_release (context=<optimized out>, context@entry=0x7ff0100009a0) at gmain.c:2833
#4  0x0000003a28247cd5 in g_main_context_iterate (context=context@entry=0x7ff0100009a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3292
#5  0x0000003a28247e44 in g_main_context_iteration (context=0x7ff0100009a0, may_block=1) at gmain.c:3351
#6  0x0000003a31fa6126 in QEventDispatcherGlib::processEvents (this=0x7ff0100008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#7  0x0000003a31f7680f in QEventLoop::processEvents (this=this@entry=0x7ff016f20d00, flags=...) at kernel/qeventloop.cpp:149
#8  0x0000003a31f76a98 in QEventLoop::exec (this=0x7ff016f20d00, flags=...) at kernel/qeventloop.cpp:204
#9  0x0000003a31e78980 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:542
#10 0x0000003a31e7b95c in QThreadPrivate::start (arg=0x18cf510) at thread/qthread_unix.cpp:338
#11 0x0000003a28e07d15 in start_thread (arg=0x7ff016f21700) at pthread_create.c:308
#12 0x0000003a286f248d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114

Thread 5 (Thread 0x7fefccb50700 (LWP 27195)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00007fefccb733d3 in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x0000003a28e07d15 in start_thread (arg=0x7fefccb50700) at pthread_create.c:308
#3  0x0000003a286f248d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114

Thread 4 (Thread 0x7fefcc34f700 (LWP 27196)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00007fefccb733d3 in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x0000003a28e07d15 in start_thread (arg=0x7fefcc34f700) at pthread_create.c:308
#3  0x0000003a286f248d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114

Thread 3 (Thread 0x7fefcbb4e700 (LWP 27197)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00007fefccb733d3 in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x0000003a28e07d15 in start_thread (arg=0x7fefcbb4e700) at pthread_create.c:308
#3  0x0000003a286f248d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114

Thread 2 (Thread 0x7fefc1f9e700 (LWP 27220)):
#0  0x0000003a286e99ad in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x0000003a28247d24 in g_main_context_poll (priority=2147483647, n_fds=3, fds=0x7fefbc0010c0, timeout=-1, context=0x2ab4b50) at gmain.c:3584
#2  g_main_context_iterate (context=0x2ab4b50, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3285
#3  0x0000003a28248182 in g_main_loop_run (loop=0x214cef0) at gmain.c:3484
#4  0x0000003a3a8cc546 in gdbus_shared_thread_func (user_data=0x1ee2100) at gdbusprivate.c:277
#5  0x0000003a2826b605 in g_thread_proxy (data=0x262ed90) at gthread.c:797
#6  0x0000003a28e07d15 in start_thread (arg=0x7fefc1f9e700) at pthread_create.c:308
#7  0x0000003a286f248d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114

Thread 1 (Thread 0x7ff0241a1880 (LWP 27139)):
[KCrash Handler]
#6  0x000000000388d820 in ?? ()
#7  0x0000003a31f7de29 in QMetaObject::cast (this=0x3a9ab03040 <QWebFrame::staticMetaObject>, obj=0x1adb3f0) at kernel/qmetaobject.cpp:274
#8  0x0000003a999a4c54 in qobject_cast<QWebFrame*> (object=<optimized out>) at /usr/include/QtCore/qobject.h:380
#9  WebCore::FrameNetworkingContextQt::networkAccessManager (this=<optimized out>) at WebCoreSupport/FrameNetworkingContextQt.cpp:51
#10 0x0000003a99f0ef42 in WebCore::QNetworkReplyHandler::start (this=0x2f08a30) at platform/network/qt/QNetworkReplyHandler.cpp:665
#11 0x0000003a99f0dce2 in flush (this=0x2f08a68) at platform/network/qt/QNetworkReplyHandler.cpp:195
#12 WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x2f08a68) at platform/network/qt/QNetworkReplyHandler.cpp:187
#13 0x0000003a99f0ecfa in ~QueueLocker (this=<synthetic pointer>, __in_chrg=<optimized out>) at platform/network/qt/QNetworkReplyHandler.cpp:203
#14 WebCore::QNetworkReplyWrapper::receiveMetaData (this=0x371bda0) at platform/network/qt/QNetworkReplyHandler.cpp:276
#15 0x0000003a31f8ceef in QMetaObject::activate (sender=0x2338250, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3539
#16 0x0000003a31f7f907 in QMetaMethod::invoke (this=this@entry=0x7fffaea15a50, object=object@entry=0x2338250, connectionType=Qt::DirectConnection, connectionType@entry=Qt::AutoConnection, returnValue=..., val0=..., val1=..., val2=..., val3=..., val4=..., val5=..., val6=..., val7=..., val8=..., val9=...) at kernel/qmetaobject.cpp:1664
#17 0x0000003a31f81cdc in QMetaObject::invokeMethod (obj=0x2338250, member=<optimized out>, type=Qt::AutoConnection, ret=..., val0=..., val1=..., val2=..., val3=..., val4=..., val5=..., val6=..., val7=..., val8=..., val9=...) at kernel/qmetaobject.cpp:1179
#18 0x0000003a964c319c in invokeMethod (val9=..., val8=..., val7=..., val6=..., val5=..., val4=..., val3=..., val2=..., val1=..., val0=..., type=Qt::AutoConnection, member=0x3a9662647a "finished", obj=0x2338250) at /usr/include/QtCore/qobjectdefs.h:418
#19 KDEPrivate::AccessManagerReply::emitFinished (this=this@entry=0x2338250, state=state@entry=true, type=type@entry=Qt::AutoConnection) at /usr/src/debug/kdelibs-4.10.2/kio/kio/accessmanagerreply_p.cpp:484
#20 0x0000003a964c4495 in KDEPrivate::AccessManagerReply::slotResult (this=0x2338250, kJob=0x1d630c0) at /usr/src/debug/kdelibs-4.10.2/kio/kio/accessmanagerreply_p.cpp:427
#21 0x0000003a31f8ceef in QMetaObject::activate (sender=0x1d630c0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffaea16000) at kernel/qobject.cpp:3539
#22 0x0000003c0a334232 in KJob::result (this=this@entry=0x1d630c0, _t1=_t1@entry=0x1d630c0) at /usr/src/debug/kdelibs-4.10.2/x86_64-redhat-linux-gnu/kdecore/kjob.moc:207
#23 0x0000003c0a334270 in KJob::emitResult (this=0x1d630c0) at /usr/src/debug/kdelibs-4.10.2/kdecore/jobs/kjob.cpp:318
#24 0x0000003a964f72d5 in KIO::SimpleJob::slotFinished (this=this@entry=0x1d630c0) at /usr/src/debug/kdelibs-4.10.2/kio/kio/job.cpp:494
#25 0x0000003a964fe7e2 in KIO::TransferJob::slotFinished (this=0x1d630c0) at /usr/src/debug/kdelibs-4.10.2/kio/kio/job.cpp:1081
#26 0x0000003a31f8ceef in QMetaObject::activate (sender=0x2b1ee90, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3539
#27 0x0000003a9659a2b1 in KIO::SlaveInterface::dispatch (this=0x2b1ee90, _cmd=104, rawdata=...) at /usr/src/debug/kdelibs-4.10.2/kio/kio/slaveinterface.cpp:172
#28 0x0000003a9659738a in KIO::SlaveInterface::dispatch (this=0x2b1ee90) at /usr/src/debug/kdelibs-4.10.2/kio/kio/slaveinterface.cpp:88
#29 0x0000003a9658b8ee in KIO::Slave::gotInput (this=0x2b1ee90) at /usr/src/debug/kdelibs-4.10.2/kio/kio/slave.cpp:344
#30 0x0000003a31f8ceef in QMetaObject::activate (sender=0x1a5cbc0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3539
#31 0x0000003a964cc222 in dequeue (this=<optimized out>) at /usr/src/debug/kdelibs-4.10.2/kio/kio/connection.cpp:82
#32 KIO::ConnectionPrivate::dequeue (this=0x2e414f0) at /usr/src/debug/kdelibs-4.10.2/kio/kio/connection.cpp:71
#33 0x0000003a31f8c3ce in QObject::event (this=0x1a5cbc0, e=<optimized out>) at kernel/qobject.cpp:1194
#34 0x000000331d3ca5cc in QApplicationPrivate::notify_helper (this=this@entry=0x15c52d0, receiver=receiver@entry=0x1a5cbc0, e=e@entry=0x1dc6dd0) at kernel/qapplication.cpp:4562
#35 0x000000331d3cea4a in QApplication::notify (this=0x7fffaea17190, receiver=0x1a5cbc0, e=0x1dc6dd0) at kernel/qapplication.cpp:4423
#36 0x0000003c0aa46f16 in KApplication::notify (this=0x7fffaea17190, receiver=0x1a5cbc0, event=0x1dc6dd0) at /usr/src/debug/kdelibs-4.10.2/kdeui/kernel/kapplication.cpp:311
#37 0x0000003a31f77abe in QCoreApplication::notifyInternal (this=0x7fffaea17190, receiver=receiver@entry=0x1a5cbc0, event=event@entry=0x1dc6dd0) at kernel/qcoreapplication.cpp:946
#38 0x0000003a31f7b571 in sendEvent (event=0x1dc6dd0, receiver=0x1a5cbc0) at kernel/qcoreapplication.h:231
#39 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x158b140) at kernel/qcoreapplication.cpp:1570
#40 0x0000003a31fa5f73 in sendPostedEvents () at kernel/qcoreapplication.h:236
#41 postEventSourceDispatch (s=s@entry=0x15c8900) at kernel/qeventdispatcher_glib.cpp:279
#42 0x0000003a28247a55 in g_main_dispatch (context=0x15c8520) at gmain.c:2715
#43 g_main_context_dispatch (context=context@entry=0x15c8520) at gmain.c:3219
#44 0x0000003a28247d88 in g_main_context_iterate (context=context@entry=0x15c8520, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3290
#45 0x0000003a28247e44 in g_main_context_iteration (context=0x15c8520, may_block=1) at gmain.c:3351
#46 0x0000003a31fa6106 in QEventDispatcherGlib::processEvents (this=0x158caa0, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#47 0x000000331d46a73e in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at kernel/qguieventdispatcher_glib.cpp:207
#48 0x0000003a31f7680f in QEventLoop::processEvents (this=this@entry=0x7fffaea17050, flags=...) at kernel/qeventloop.cpp:149
#49 0x0000003a31f76a98 in QEventLoop::exec (this=0x7fffaea17050, flags=...) at kernel/qeventloop.cpp:204
#50 0x0000003a31f7b888 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1218
#51 0x00007ff0242ebc85 in kdemain () from /lib64/libkdeinit4_rekonq.so
#52 0x0000003a28621a05 in __libc_start_main (main=0x4008b0 <main>, argc=1, ubp_av=0x7fffaea172d8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffaea172c8) at libc-start.c:225
#53 0x00000000004008e1 in _start ()

Possible duplicates by query: bug 317548, bug 316818, bug 310643, bug 307634.

Reported using DrKonqi