Bug 324079

Application: konqueror (4.10.5)
KDE Platform Version: 4.10.5
Qt Version: 4.8.4
Operating System: Linux 3.8.0-26-generic i686
Distribution: Linux Mint 15 Olivia

-- Information about the crash:
Crashing with multi taps open

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
[Current thread is 1 (Thread 0xb4c0e740 (LWP 6654))]

Thread 12 (Thread 0xaffc0b40 (LWP 6661)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb75d0dcb in poll () from /lib/i386-linux-gnu/libc.so.6
#2  0xb522f2db in g_poll () from /lib/i386-linux-gnu/libglib-2.0.so.0
#3  0xb52206d0 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0xb5220831 in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#5  0xb5c31c3f in QEventDispatcherGlib::processEvents (this=0xaf600468, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#6  0xb5bfe3ec in QEventLoop::processEvents (this=this@entry=0xaffc0228, flags=...) at kernel/qeventloop.cpp:149
#7  0xb5bfe6e1 in QEventLoop::exec (this=this@entry=0xaffc0228, flags=...) at kernel/qeventloop.cpp:204
#8  0xb5ae9fec in QThread::exec (this=this@entry=0x8a2bc98) at thread/qthread.cpp:542
#9  0xb5bddf2d in QInotifyFileSystemWatcherEngine::run (this=0x8a2bc98) at io/qfilesystemwatcher_inotify.cpp:256
#10 0xb5aecb18 in QThreadPrivate::start (arg=0x8a2bc98) at thread/qthread_unix.cpp:338
#11 0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#12 0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 11 (Thread 0xacdcab40 (LWP 6683)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb52fc84b in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0xb75edd7c in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0xabb51ae5 in WTF::TCMalloc_PageHeap::scavengerThread() () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#4  0xabb51b1f in WTF::TCMalloc_PageHeap::runScavengerThread(void*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#5  0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#6  0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 10 (Thread 0xa9d34b40 (LWP 6684)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb52fc84b in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0xb75edd7c in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0xabb82f63 in WTF::ThreadCondition::wait(WTF::Mutex&) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#4  0xab861b1b in JSC::BlockAllocator::blockFreeingThreadMain() () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#5  0xabb67982 in WTF::threadEntryPoint(void*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#6  0xabb82b12 in WTF::wtfThreadEntryPoint(void*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#7  0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#8  0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 9 (Thread 0xa90d6b40 (LWP 6685)):
#0  timerSourceCheck (source=0x87e3df8) at kernel/qeventdispatcher_glib.cpp:175
#1  0xb5220117 in g_main_context_check () from /lib/i386-linux-gnu/libglib-2.0.so.0
#2  0xb5220662 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#3  0xb5220831 in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0xb5c31c3f in QEventDispatcherGlib::processEvents (this=0xa166a00, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#5  0xb5bfe3ec in QEventLoop::processEvents (this=this@entry=0xa90d6258, flags=...) at kernel/qeventloop.cpp:149
#6  0xb5bfe6e1 in QEventLoop::exec (this=this@entry=0xa90d6258, flags=...) at kernel/qeventloop.cpp:204
#7  0xb5ae9fec in QThread::exec (this=this@entry=0xa2aa2f8) at thread/qthread.cpp:542
#8  0xb5aea14b in QThread::run (this=0xa2aa2f8) at thread/qthread.cpp:609
#9  0xb5aecb18 in QThreadPrivate::start (arg=0xa2aa2f8) at thread/qthread_unix.cpp:338
#10 0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#11 0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 8 (Thread 0xaf5ffb40 (LWP 6694)):
#0  0xb77a0425 in __kernel_vsyscall ()
#1  0xb75f38e2 in clock_gettime () from /lib/i386-linux-gnu/libc.so.6
#2  0xb5b4b0d5 in do_gettime (frac=0xaf5fef70, sec=0xaf5fef68) at tools/qelapsedtimer_unix.cpp:123
#3  qt_gettime () at tools/qelapsedtimer_unix.cpp:140
#4  0xb5c3280e in QTimerInfoList::updateCurrentTime (this=this@entry=0xad102334) at kernel/qeventdispatcher_unix.cpp:354
#5  0xb5c32b9a in QTimerInfoList::timerWait (this=0xad102334, tm=...) at kernel/qeventdispatcher_unix.cpp:461
#6  0xb5c31373 in timerSourcePrepareHelper (src=<optimized out>, timeout=0xaf5ff09c) at kernel/qeventdispatcher_glib.cpp:136
#7  0xb5c3140d in timerSourcePrepare (source=0xad102300, timeout=0xaf5ff09c) at kernel/qeventdispatcher_glib.cpp:169
#8  0xb521fd21 in g_main_context_prepare () from /lib/i386-linux-gnu/libglib-2.0.so.0
#9  0xb52205cf in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#10 0xb5220831 in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#11 0xb5c31c3f in QEventDispatcherGlib::processEvents (this=0xad102000, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#12 0xb5bfe3ec in QEventLoop::processEvents (this=this@entry=0xaf5ff238, flags=...) at kernel/qeventloop.cpp:149
#13 0xb5bfe6e1 in QEventLoop::exec (this=this@entry=0xaf5ff238, flags=...) at kernel/qeventloop.cpp:204
#14 0xb5ae9fec in QThread::exec (this=this@entry=0x93f02d0) at thread/qthread.cpp:542
#15 0xb70fc0ef in KIO::NameLookUpThread::run (this=0x93f02d0) at ../../kio/kio/hostinfo.cpp:226
#16 0xb5aecb18 in QThreadPrivate::start (arg=0x93f02d0) at thread/qthread_unix.cpp:338
#17 0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#18 0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 7 (Thread 0xa7b4cb40 (LWP 6744)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb52fc84b in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0xb75edd7c in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0xa7b6d368 in queue_processor(void*) () from /usr/lib/jvm/java-7-openjdk-i386/jre/lib/i386/IcedTeaPlugin.so
#4  0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#5  0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 6 (Thread 0xa734bb40 (LWP 6745)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb52fc84b in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0xb75edd7c in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0xa7b6d368 in queue_processor(void*) () from /usr/lib/jvm/java-7-openjdk-i386/jre/lib/i386/IcedTeaPlugin.so
#4  0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#5  0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 5 (Thread 0xa6b4ab40 (LWP 6746)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb52fc84b in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0xb75edd7c in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0xa7b6d368 in queue_processor(void*) () from /usr/lib/jvm/java-7-openjdk-i386/jre/lib/i386/IcedTeaPlugin.so
#4  0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#5  0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 4 (Thread 0xaedfeb40 (LWP 6792)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb52fc84b in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0xb75edd7c in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0xa5733acf in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#4  0xa52f88b5 in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#5  0xa5733d8c in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#6  0xa5734436 in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#7  0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#8  0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 3 (Thread 0xae5fdb40 (LWP 6793)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb52fc84b in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0xb75edd7c in pthread_cond_wait () from /lib/i386-linux-gnu/libc.so.6
#3  0xa5733acf in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#4  0xa52f88b5 in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#5  0xa5733d8c in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#6  0xa5734436 in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#7  0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#8  0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 2 (Thread 0x9ad4eb40 (LWP 6794)):
#0  0xb77a0424 in __kernel_vsyscall ()
#1  0xb52fcc33 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/i386-linux-gnu/libpthread.so.0
#2  0xb75eddd4 in pthread_cond_timedwait () from /lib/i386-linux-gnu/libc.so.6
#3  0xa5733aa6 in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#4  0xa5678533 in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#5  0xa5733d8c in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#6  0xa5734436 in ?? () from /opt/mint-flashplugin-11/libflashplayer.so
#7  0xb52f8d78 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#8  0xb75e03de in clone () from /lib/i386-linux-gnu/libc.so.6

Thread 1 (Thread 0xb4c0e740 (LWP 6654)):
[KCrash Handler]
#7  0xabb827b7 in WTF::OSAllocator::reserveAndCommit(unsigned int, WTF::OSAllocator::Usage, bool, bool, bool) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#8  0xabb82899 in WTF::OSAllocator::reserveUncommitted(unsigned int, WTF::OSAllocator::Usage, bool, bool, bool) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#9  0xabb655c7 in WTF::PageAllocationAligned::allocate(unsigned int, unsigned int, WTF::OSAllocator::Usage, bool, bool) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#10 0xab8585e5 in JSC::CopiedSpace::tryAllocateOversize(unsigned int, void**) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#11 0xab85a3e0 in JSC::CopiedSpace::tryAllocateSlowCase(unsigned int, void**) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#12 0xabab9549 in JSC::Butterfly::resizeArray(JSC::JSGlobalData&, unsigned int, bool, unsigned int, unsigned int, bool, unsigned int) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#13 0xabaae6f7 in JSC::JSObject::increaseVectorLength(JSC::JSGlobalData&, unsigned int) [clone .part.116] () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#14 0xabab3a9e in JSC::JSObject::putByIndexBeyondVectorLengthWithArrayStorage(JSC::ExecState*, unsigned int, JSC::JSValue, bool, JSC::ArrayStorage*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#15 0xaba819e0 in JSC::JSArray::push(JSC::ExecState*, JSC::JSValue) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#16 0xaba40496 in JSC::arrayProtoFuncPush(JSC::ExecState*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#17 0xaf7425af in ?? ()
#18 0xab94c261 in JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#19 0xaba4df5e in JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#20 0xaba75f4e in JSC::functionProtoFuncApply(JSC::ExecState*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#21 0xaf74230f in ?? ()
#22 0xab94c261 in JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#23 0xaba4df5e in JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#24 0xaa4e4563 in WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext*, WebCore::Event*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#25 0xaa7200b2 in WebCore::EventTarget::fireEventListeners(WebCore::Event*, WebCore::EventTargetData*, WTF::Vector<WebCore::RegisteredEventListener, 1u>&) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#26 0xaa720360 in WebCore::EventTarget::fireEventListeners(WebCore::Event*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#27 0xaa73587f in WebCore::Node::handleLocalEvents(WebCore::Event*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#28 0xaa7159b5 in WebCore::EventContext::handleLocalEvents(WebCore::Event*) const () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#29 0xaa718dbf in WebCore::EventDispatcher::dispatchEvent(WTF::PassRefPtr<WebCore::Event>) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#30 0xaa72b620 in WebCore::MouseEventDispatchMediator::dispatchEvent(WebCore::EventDispatcher*) const () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#31 0xaa7171d7 in WebCore::EventDispatcher::dispatchEvent(WebCore::Node*, WTF::PassRefPtr<WebCore::EventDispatchMediator>) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#32 0xaa73c1a4 in WebCore::Node::dispatchMouseEvent(WebCore::PlatformMouseEvent const&, WTF::AtomicString const&, int, WebCore::Node*) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#33 0xaab51bfd in WebCore::EventHandler::dispatchMouseEvent(WTF::AtomicString const&, WebCore::Node*, bool, int, WebCore::PlatformMouseEvent const&, bool) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#34 0xaab55d73 in WebCore::EventHandler::handleMouseReleaseEvent(WebCore::PlatformMouseEvent const&) () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#35 0xaa4202c5 in void QWebPagePrivate::mouseReleaseEvent<QMouseEvent>(QMouseEvent*) () at /build/buildd/qtwebkit-source-2.3.0/Source/WebCore/page/DragClient.h:68
#36 0xaa4209fc in QWebPage::event(QEvent*) () at /build/buildd/qtwebkit-source-2.3.0/Source/WebCore/page/DragClient.h:68
#37 0xaa420c4a in QWebView::mouseReleaseEvent(QMouseEvent*) () at /build/buildd/qtwebkit-source-2.3.0/Source/WebCore/page/DragClient.h:68
#38 0xaf7337ec in KWebView::mouseReleaseEvent (this=0xa2b3d88, event=0xbfb37cd4) at ../../kdewebkit/kwebview.cpp:80
#39 0xb61ca710 in QWidget::event (this=0xa2b3d88, event=0xbfb37cd4) at kernel/qwidget.cpp:8375
#40 0xaa42281f in QWebView::event(QEvent*) () at /build/buildd/qtwebkit-source-2.3.0/Source/WebCore/page/DragClient.h:68
#41 0xb6173c7c in QApplicationPrivate::notify_helper (this=0x85cce10, receiver=0xa2b3d88, e=0xbfb37cd4) at kernel/qapplication.cpp:4567
#42 0xb6177587 in QApplication::notify (this=0x85cce10, receiver=0xa2b3d88, e=0xbfb37cd4) at kernel/qapplication.cpp:4110
#43 0xb6ced491 in KApplication::notify (this=0xbfb38528, receiver=0xa2b3d88, event=0xbfb37cd4) at ../../kdeui/kernel/kapplication.cpp:311
#44 0xb5bff90e in QCoreApplication::notifyInternal (this=0xbfb38528, receiver=receiver@entry=0xa2b3d88, event=event@entry=0xbfb37cd4) at kernel/qcoreapplication.cpp:946
#45 0xb617a823 in sendEvent (event=<optimized out>, receiver=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#46 QApplicationPrivate::sendMouseEvent (receiver=receiver@entry=0xa2b3d88, event=event@entry=0xbfb37cd4, alienWidget=alienWidget@entry=0xa2b3d88, nativeWidget=nativeWidget@entry=0xa2a10a0, buttonDown=buttonDown@entry=0xb6b06d14 <qt_button_down>, lastMouseReceiver=..., spontaneous=spontaneous@entry=true) at kernel/qapplication.cpp:3178
#47 0xb61fc785 in QETWidget::translateMouseEvent (this=0xa2a10a0, event=0xbfb380fc) at kernel/qapplication_x11.cpp:4631
#48 0xb61fb575 in QApplication::x11ProcessEvent (this=0xbfb38528, event=0xbfb380fc) at kernel/qapplication_x11.cpp:3746
#49 0xb622a954 in x11EventSourceDispatch (s=0x859f670, callback=0x0, user_data=0x0) at kernel/qguieventdispatcher_glib.cpp:146
#50 0xb52203b3 in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#51 0xb5220750 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#52 0xb5220831 in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#53 0xb5c31c21 in QEventDispatcherGlib::processEvents (this=this@entry=0x85c3dd0, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#54 0xb622aa5a in QGuiEventDispatcherGlib::processEvents (this=0x85c3dd0, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#55 0xb5bfe3ec in QEventLoop::processEvents (this=this@entry=0xbfb383f8, flags=...) at kernel/qeventloop.cpp:149
#56 0xb5bfe6e1 in QEventLoop::exec (this=this@entry=0xbfb383f8, flags=...) at kernel/qeventloop.cpp:204
#57 0xb5c043fa in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1218
#58 0xb6171fc4 in QApplication::exec () at kernel/qapplication.cpp:3828
#59 0xb776af8c in kdemain (argc=1, argv=0xbfb38734) at ../../../konqueror/src/konqmain.cpp:242
#60 0x0804855b in main (argc=1, argv=0xbfb38734) at konqueror_dummy.cpp:3

Reported using DrKonqi