Bug 321000

Application: kmail (4.10.4)
KDE Platform Version: 4.10.4
Qt Version: 4.8.4
Operating System: Linux 3.9.4-101.fc17.x86_64 x86_64
Distribution (Platform): Fedora RPMs

-- Information about the crash:
- What I was doing when the application crashed:
Firefox, Gnote and Kmail open (under KDE). Away from the computer about one hour. When I returned, Kmail had crashed

The crash can be reproduced sometimes.

-- Backtrace:
Application: KMail (kmail), signal: Aborted
Using host libthread_db library "/lib64/libthread_db.so.1".
82	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7f9991198880 (LWP 1575))]

Thread 4 (Thread 0x7f9983f31700 (LWP 1776)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166
#1  0x0000003b662a2295 in WTF::TCMalloc_PageHeap::scavengerThread (this=0x3b66d359e0) at /usr/src/debug/webkit-qtwebkit-23/Source/WTF/wtf/FastMalloc.cpp:2571
#2  0x0000003b662a22e9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at /usr/src/debug/webkit-qtwebkit-23/Source/WTF/wtf/FastMalloc.cpp:1767
#3  0x0000003afea07d14 in start_thread (arg=0x7f9983f31700) at pthread_create.c:309
#4  0x0000003afdef168d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 3 (Thread 0x7f99424ea700 (LWP 1832)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166
#1  0x0000003b65fe8339 in JSC::BlockAllocator::blockFreeingThreadMain (this=0x7f998369a398) at /usr/src/debug/webkit-qtwebkit-23/Source/JavaScriptCore/heap/BlockAllocator.cpp:128
#2  0x0000003b662d0a1e in WTF::wtfThreadEntryPoint (param=0x1797f60) at /usr/src/debug/webkit-qtwebkit-23/Source/WTF/wtf/ThreadingPthreads.cpp:196
#3  0x0000003afea07d14 in start_thread (arg=0x7f99424ea700) at pthread_create.c:309
#4  0x0000003afdef168d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7f99418ab700 (LWP 1834)):
#0  0x0000003afdee8bdf in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x0000003affe47af4 in g_main_context_poll (n_fds=1, fds=0x7f99340029c0, timeout=8074, context=0x7f99340009a0, priority=<optimized out>) at gmain.c:3440
#2  g_main_context_iterate (context=context@entry=0x7f99340009a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3141
#3  0x0000003affe47c14 in g_main_context_iteration (context=0x7f99340009a0, may_block=1) at gmain.c:3207
#4  0x0000003b093a5eb6 in QEventDispatcherGlib::processEvents (this=0x7f99340008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#5  0x0000003b0937651f in QEventLoop::processEvents (this=this@entry=0x7f99418aad00, flags=...) at kernel/qeventloop.cpp:149
#6  0x0000003b093767a8 in QEventLoop::exec (this=0x7f99418aad00, flags=...) at kernel/qeventloop.cpp:204
#7  0x0000003b09278970 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:542
#8  0x0000003b0927b94c in QThreadPrivate::start (arg=0x16fa120) at thread/qthread_unix.cpp:338
#9  0x0000003afea07d14 in start_thread (arg=0x7f99418ab700) at pthread_create.c:309
#10 0x0000003afdef168d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7f9991198880 (LWP 1575)):
[KCrash Handler]
#5  0x0000003afde35935 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#6  0x0000003afde370e8 in __GI_abort () at abort.c:91
#7  0x0000003afde74e8b in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x3afdf78928 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:198
#8  0x0000003afde7c00e in malloc_printerr (ptr=0x1a4f740, str=0x3afdf767e2 "invalid fastbin entry (free)", action=3) at malloc.c:5027
#9  _int_free (av=0x3afe1b0720, p=0x1a4f730, have_lock=0) at malloc.c:3948
#10 0x0000003b092c52c8 in QString::free (d=0x1a4f740) at tools/qstring.cpp:1235
#11 0x00000035660d2cbd in MailCommon::Util::agentInstances(bool) () from /lib64/libmailcommon.so.4
#12 0x0000003566cef043 in KMKernel::stopAgentInstance() () from /lib64/libkmailprivate.so.4
#13 0x000000355a0a5828 in KCrash::defaultCrashHandler(int) () from /lib64/libkdeui.so.5
#14 <signal handler called>
#15 0x0000003afde35935 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#16 0x0000003afde370e8 in __GI_abort () at abort.c:91
#17 0x0000003afde74e8b in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x3afdf78928 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:198
#18 0x0000003afde7c00e in malloc_printerr (ptr=0x1a4f740, str=0x3afdf767e2 "invalid fastbin entry (free)", action=3) at malloc.c:5027
#19 _int_free (av=0x3afe1b0720, p=0x1a4f730, have_lock=0) at malloc.c:3948
#20 0x0000003b03e1db2d in _dbus_object_tree_dispatch_and_unlock (tree=0x16e8100, message=message@entry=0x1953470) at dbus-object-tree.c:901
#21 0x0000003b03e0fa83 in dbus_connection_dispatch (connection=0x1a4f8f0) at dbus-connection.c:4685
#22 0x0000003b0a41bac9 in q_dbus_connection_dispatch (connection=<optimized out>) at qdbus_symbols_p.h:115
#23 QDBusConnectionPrivate::doDispatch (this=0x1a4e4c0) at qdbusintegrator.cpp:1133
#24 0x0000003b0a41fbe5 in QDBusConnectionPrivate::socketRead (this=0x1a4e4c0, fd=14) at qdbusintegrator.cpp:1153
#25 0x0000003b0938cc8f in QMetaObject::activate (sender=0x1a522c0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffa0fd6060) at kernel/qobject.cpp:3539
#26 0x0000003b093d7a0e in QSocketNotifier::activated (this=<optimized out>, _t1=14) at .moc/release-shared/moc_qsocketnotifier.cpp:102
#27 0x0000003b0939465b in QSocketNotifier::event (this=0x1a522c0, e=0x7fffa0fd6680) at kernel/qsocketnotifier.cpp:317
#28 0x0000003b5d7ca5ac in QApplicationPrivate::notify_helper (this=this@entry=0x121c600, receiver=receiver@entry=0x1a522c0, e=e@entry=0x7fffa0fd6680) at kernel/qapplication.cpp:4562
#29 0x0000003b5d7cea2a in QApplication::notify (this=0x7fffa0fd6c40, receiver=0x1a522c0, e=0x7fffa0fd6680) at kernel/qapplication.cpp:4423
#30 0x000000355a046f06 in KApplication::notify(QObject*, QEvent*) () from /lib64/libkdeui.so.5
#31 0x0000003b0937786e in QCoreApplication::notifyInternal (this=0x7fffa0fd6c40, receiver=0x1a522c0, event=0x7fffa0fd6680) at kernel/qcoreapplication.cpp:949
#32 0x0000003b093a5698 in sendEvent (event=0x7fffa0fd6680, receiver=<optimized out>) at kernel/qcoreapplication.h:231
#33 socketNotifierSourceDispatch (source=source@entry=0x122cf80) at kernel/qeventdispatcher_glib.cpp:110
#34 0x0000003affe47825 in g_main_dispatch (context=0x122cd40) at gmain.c:2539
#35 g_main_context_dispatch (context=context@entry=0x122cd40) at gmain.c:3075
#36 0x0000003affe47b58 in g_main_context_iterate (context=context@entry=0x122cd40, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3146
#37 0x0000003affe47c14 in g_main_context_iteration (context=0x122cd40, may_block=1) at gmain.c:3207
#38 0x0000003b093a5e96 in QEventDispatcherGlib::processEvents (this=0x11bfaf0, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#39 0x0000003b5d86a5ee in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at kernel/qguieventdispatcher_glib.cpp:207
#40 0x0000003b0937651f in QEventLoop::processEvents (this=this@entry=0x7fffa0fd68c0, flags=...) at kernel/qeventloop.cpp:149
#41 0x0000003b093767a8 in QEventLoop::exec (this=0x7fffa0fd68c0, flags=...) at kernel/qeventloop.cpp:204
#42 0x0000003b0937b638 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1221
#43 0x0000000000402dad in ?? ()
#44 0x0000003afde21735 in __libc_start_main (main=0x4023a0, argc=3, ubp_av=0x7fffa0fd6e58, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffa0fd6e48) at libc-start.c:226
#45 0x0000000000403275 in _start ()

This bug may be a duplicate of or related to bug 314123.

Possible duplicates by query: bug 320526, bug 320128, bug 316775, bug 316488, bug 315334.

Reported using DrKonqi