Bug 327392

Application: konqueror (4.11.2)
KDE Platform Version: 4.11.2
Qt Version: 4.8.5
Operating System: Linux 3.11.7-200.fc19.x86_64 x86_64
Distribution (Platform): Fedora RPMs

-- Information about the crash:
- What I was doing when the application crashed:View some of the sites rich flash animation cause this failure.

The crash can be reproduced sometimes.

-- Backtrace:
Application: Konqueror (konqueror), signal: Aborted
Using host libthread_db library "/lib64/libthread_db.so.1".
81	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7f56aeb018c0 (LWP 2124))]

Thread 7 (Thread 0x7f569fe3b700 (LWP 2125)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000039196cde2d in WTF::TCMalloc_PageHeap::scavengerThread (this=<optimized out>) at /usr/src/debug/webkit-qtwebkit-23/Source/WTF/wtf/FastMalloc.cpp:2571
#2  0x00000039196cde69 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at /usr/src/debug/webkit-qtwebkit-23/Source/WTF/wtf/FastMalloc.cpp:1767
#3  0x00000038f0407c53 in start_thread (arg=0x7f569fe3b700) at pthread_create.c:308
#4  0x00000038efcf5dbd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 6 (Thread 0x7f569db2a700 (LWP 2127)):
#0  0x00000038efceb7fd in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x00000038f20480f4 in g_main_context_poll (priority=2147483647, n_fds=1, fds=0x7f56500013e0, timeout=1501, context=0x7f56500009c0) at gmain.c:3995
#2  g_main_context_iterate (context=context@entry=0x7f56500009c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3696
#3  0x00000038f20481fc in g_main_context_iteration (context=0x7f56500009c0, may_block=1) at gmain.c:3762
#4  0x00000038fb1a7166 in QEventDispatcherGlib::processEvents (this=0x7f56500008e0, flags=...) at kernel/qeventdispatcher_glib.cpp:427
#5  0x00000038fb178ecf in QEventLoop::processEvents (this=this@entry=0x7f569db29d20, flags=...) at kernel/qeventloop.cpp:149
#6  0x00000038fb1791c5 in QEventLoop::exec (this=this@entry=0x7f569db29d20, flags=...) at kernel/qeventloop.cpp:204
#7  0x00000038fb07866f in QThread::exec (this=<optimized out>) at thread/qthread.cpp:536
#8  0x00000038fb07ad0f in QThreadPrivate::start (arg=0x176e250) at thread/qthread_unix.cpp:338
#9  0x00000038f0407c53 in start_thread (arg=0x7f569db2a700) at pthread_create.c:308
#10 0x00000038efcf5dbd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 5 (Thread 0x7f5657da5700 (LWP 2130)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x000000391940e5bd in JSC::BlockAllocator::blockFreeingThreadMain (this=0x7f569f5a0398) at /usr/src/debug/webkit-qtwebkit-23/Source/JavaScriptCore/heap/BlockAllocator.cpp:128
#2  0x00000039196fd686 in WTF::wtfThreadEntryPoint (param=0x2f597d0) at /usr/src/debug/webkit-qtwebkit-23/Source/WTF/wtf/ThreadingPthreads.cpp:196
#3  0x00000038f0407c53 in start_thread (arg=0x7f5657da5700) at pthread_create.c:308
#4  0x00000038efcf5dbd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 4 (Thread 0x7f564f4f3700 (LWP 2162)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00007f564f5123ab in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x00000038f0407c53 in start_thread (arg=0x7f564f4f3700) at pthread_create.c:308
#3  0x00000038efcf5dbd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 3 (Thread 0x7f564ecf2700 (LWP 2163)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00007f564f5123ab in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x00000038f0407c53 in start_thread (arg=0x7f564ecf2700) at pthread_create.c:308
#3  0x00000038efcf5dbd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 2 (Thread 0x7f564e4f1700 (LWP 2164)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00007f564f5123ab in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#2  0x00000038f0407c53 in start_thread (arg=0x7f564e4f1700) at pthread_create.c:308
#3  0x00000038efcf5dbd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 1 (Thread 0x7f56aeb018c0 (LWP 2124)):
[KCrash Handler]
#6  0x00000038efc359e9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#7  0x00000038efc370f8 in __GI_abort () at abort.c:90
#8  0x00000038efc75d17 in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x38efd7d242 "*** %s ***: %s terminated\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:196
#9  0x00000038efd0d657 in __GI___fortify_fail (msg=msg@entry=0x38efd7d1e8 "buffer overflow detected") at fortify_fail.c:31
#10 0x00000038efd0b820 in __GI___chk_fail () at chk_fail.c:28
#11 0x00000038efd0d5c7 in __fdelt_chk (d=<optimized out>) at fdelt_chk.c:25
#12 0x00007f5655d0a0e9 in gnash::GnashPluginScriptObject::readPlayer (this=this@entry=0x3569420, fd=134744072) at pluginScriptObject.cpp:717
#13 0x00007f5655d0ad36 in readPlayer (this=0x3569420) at pluginScriptObject.cpp:698
#14 gnash::GnashPluginScriptObject::GetVariable (this=this@entry=0x3569420, name="$version") at pluginScriptObject.cpp:631
#15 0x00007f5655d0d2a0 in gnash::GetVariableCallback (npobj=0x3569420, args=0x7fffe065c338, argCount=1, result=0x7fffe065c300) at callbacks.cpp:144
#16 0x00007f5655d098fc in gnash::GnashPluginScriptObject::Invoke (this=0x3569420, name=0x7f564c0cf4f0, args=0x7fffe065c338, argCount=1, result=0x7fffe065c300) at pluginScriptObject.cpp:527
#17 0x000000391830455f in JSC::Bindings::CInstance::invokeMethod () from /lib64/libQtWebKit.so.4
#18 0x000000391830b9f8 in callRuntimeMethod () from /lib64/libQtWebKit.so.4
#19 0x0000003919556f81 in handleHostCall (kind=JSC::CodeForCall, callee=..., pc=0x7f5641d01ba0, execCallee=0x7f56571a51b0) at /usr/src/debug/webkit-qtwebkit-23/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1363
#20 setUpCall (callLinkInfo=<optimized out>, calleeAsValue=..., kind=JSC::CodeForCall, pc=0x7f5641d01ba0, execCallee=0x7f56571a51b0) at /usr/src/debug/webkit-qtwebkit-23/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1407
#21 genericCall (kind=JSC::CodeForCall, pc=0x7f5641d01ba0, exec=0x7f56571a5150) at /usr/src/debug/webkit-qtwebkit-23/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1463
#22 JSC::LLInt::llint_slow_path_call (exec=0x7f56571a5150, pc=0x7f5641d01ba0) at /usr/src/debug/webkit-qtwebkit-23/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1469
#23 0x000000391955f6e2 in llint_op_call () from /lib64/libQtWebKit.so.4
#24 0x00007f56422a17b0 in ?? ()
#25 0x00007f56438d3bc0 in ?? ()
#26 0x0000000000000000 in ?? ()

Possible duplicates by query: bug 325964, bug 323830, bug 322782, bug 318896, bug 316052.

Reported using DrKonqi