Bug 375728

Summary:	konqueror crashes after switching windows
Product:	[Applications] konqueror	Reporter:	kavol <kavol>
Component:	general	Assignee:	Konqueror Bugs <konqueror-bugs-null>
Status:	RESOLVED DOWNSTREAM
Severity:	crash	CC:	axel.braun
Priority:	NOR	Keywords:	drkonqi
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Gentoo Packages
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description kavol 2017-01-29 21:34:46 UTC

Application: konqueror (4.14.24)
KDE Platform Version: 4.14.24
Qt Version: 4.8.6
Operating System: Linux 4.4.39-gentoo x86_64
Distribution (Platform): Gentoo Packages

-- Information about the crash:
- What I was doing when the application crashed:

I was browsing aliexpress.com, then I switched to another app. When trying toswitch back to konqueror, I have found there is DrKonqui waiting instead ... Seems pretty reproducible after logging onto aliexpress.com.

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7ff3a948d780 (LWP 433))]

Thread 6 (Thread 0x7ff38d8a7700 (LWP 434)):
#0  pthread_cond_wait () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00007ff38ed77b7e in WTF::TCMalloc_PageHeap::scavengerThread (this=<optimized out>) at /var/tmp/portage/dev-qt/qtwebkit-4.8.6-r1/work/qt-everywhere-opensource-src-4.8.6/src/3rdparty/webkit/Source/JavaScriptCore/wtf/FastMalloc.cpp:2495
#2  0x00007ff38ed77bb9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at /var/tmp/portage/dev-qt/qtwebkit-4.8.6-r1/work/qt-everywhere-opensource-src-4.8.6/src/3rdparty/webkit/Source/JavaScriptCore/wtf/FastMalloc.cpp:1618
#3  0x00007ff3a7cfc454 in start_thread (arg=0x7ff38d8a7700) at pthread_create.c:333
#4  0x00007ff3a6a6828d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 5 (Thread 0x7ff38cfa6700 (LWP 435)):
#0  0x00007ff3a3dc2bd9 in g_mutex_lock (mutex=mutex@entry=0x7ff3880009a0) at /var/tmp/portage/dev-libs/glib-2.48.2/work/glib-2.48.2/glib/gthread-posix.c:1335
#1  0x00007ff3a3d7e3c7 in g_main_context_prepare (context=context@entry=0x7ff3880009a0, priority=priority@entry=0x7ff38cfa5d10) at /var/tmp/portage/dev-libs/glib-2.48.2/work/glib-2.48.2/glib/gmain.c:3382
#2  0x00007ff3a3d7eed8 in g_main_context_iterate (context=context@entry=0x7ff3880009a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /var/tmp/portage/dev-libs/glib-2.48.2/work/glib-2.48.2/glib/gmain.c:3820
#3  0x00007ff3a3d7f0bc in g_main_context_iteration (context=0x7ff3880009a0, may_block=1) at /var/tmp/portage/dev-libs/glib-2.48.2/work/glib-2.48.2/glib/gmain.c:3901
#4  0x00007ff3a80c6a3e in QEventDispatcherGlib::processEvents (this=0x7ff3880008c0, flags=...) at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/kernel/qeventdispatcher_glib.cpp:452
#5  0x00007ff3a8096491 in QEventLoop::processEvents (this=this@entry=0x7ff38cfa5e50, flags=...) at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/kernel/qeventloop.cpp:149
#6  0x00007ff3a80967f5 in QEventLoop::exec (this=this@entry=0x7ff38cfa5e50, flags=...) at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/kernel/qeventloop.cpp:204
#7  0x00007ff3a7f8ab09 in QThread::exec (this=<optimized out>) at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/thread/qthread.cpp:538
#8  0x00007ff3a7f8d35f in QThreadPrivate::start (arg=0x2131840) at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/thread/qthread_unix.cpp:349
#9  0x00007ff3a7cfc454 in start_thread (arg=0x7ff38cfa6700) at pthread_create.c:333
#10 0x00007ff3a6a6828d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 4 (Thread 0x7ff32f982700 (LWP 452)):
#0  pthread_cond_wait () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00007ff32f9e8d45 in PluginRequestProcessor::queueProcessorThread (this=0x23e6630) at /var/tmp/portage/dev-java/icedtea-web-1.6.1-r1/work/icedtea-web-1.6.1/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:729
#2  0x00007ff32f9e95c9 in queue_processor (data=<optimized out>) at /var/tmp/portage/dev-java/icedtea-web-1.6.1-r1/work/icedtea-web-1.6.1/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:644
#3  0x00007ff3a7cfc454 in start_thread (arg=0x7ff32f982700) at pthread_create.c:333
#4  0x00007ff3a6a6828d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 3 (Thread 0x7ff32f181700 (LWP 453)):
#0  pthread_cond_wait () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00007ff32f9e8d45 in PluginRequestProcessor::queueProcessorThread (this=0x23e6630) at /var/tmp/portage/dev-java/icedtea-web-1.6.1-r1/work/icedtea-web-1.6.1/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:729
#2  0x00007ff32f9e95c9 in queue_processor (data=<optimized out>) at /var/tmp/portage/dev-java/icedtea-web-1.6.1-r1/work/icedtea-web-1.6.1/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:644
#3  0x00007ff3a7cfc454 in start_thread (arg=0x7ff32f181700) at pthread_create.c:333
#4  0x00007ff3a6a6828d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 2 (Thread 0x7ff32e980700 (LWP 454)):
#0  pthread_cond_wait () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00007ff32f9e8d45 in PluginRequestProcessor::queueProcessorThread (this=0x23e6630) at /var/tmp/portage/dev-java/icedtea-web-1.6.1-r1/work/icedtea-web-1.6.1/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:729
#2  0x00007ff32f9e95c9 in queue_processor (data=<optimized out>) at /var/tmp/portage/dev-java/icedtea-web-1.6.1-r1/work/icedtea-web-1.6.1/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:644
#3  0x00007ff3a7cfc454 in start_thread (arg=0x7ff32e980700) at pthread_create.c:333
#4  0x00007ff3a6a6828d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 1 (Thread 0x7ff3a948d780 (LWP 433)):
[KCrash Handler]
#6  0x00007ff32d37e522 in ?? () from /usr/lib64/nsbrowser/plugins/libflashplayer.so
#7  0x00007ff32b49a491 in gdk_event_apply_filters (xevent=xevent@entry=0x7fff28589f30, event=event@entry=0x293fdc0, window=window@entry=0x2519000) at /var/tmp/portage/x11-libs/gtk+-2.24.31/work/gtk+-2.24.31/gdk/x11/gdkevents-x11.c:371
#8  0x00007ff32b49b8d3 in gdk_event_translate (display=display@entry=0x2509040, event=event@entry=0x293fdc0, xevent=xevent@entry=0x7fff28589f30, return_exposes=return_exposes@entry=0) at /var/tmp/portage/x11-libs/gtk+-2.24.31/work/gtk+-2.24.31/gdk/x11/gdkevents-x11.c:1074
#9  0x00007ff32b49d1a6 in _gdk_events_queue (display=display@entry=0x2509040) at /var/tmp/portage/x11-libs/gtk+-2.24.31/work/gtk+-2.24.31/gdk/x11/gdkevents-x11.c:2358
#10 0x00007ff32b49d24e in gdk_event_dispatch (source=<optimized out>, callback=<optimized out>, user_data=<optimized out>) at /var/tmp/portage/x11-libs/gtk+-2.24.31/work/gtk+-2.24.31/gdk/x11/gdkevents-x11.c:2419
#11 0x00007ff3a3d7ed2d in g_main_dispatch (context=0x1b8ee00) at /var/tmp/portage/dev-libs/glib-2.48.2/work/glib-2.48.2/glib/gmain.c:3154
#12 g_main_context_dispatch (context=context@entry=0x1b8ee00) at /var/tmp/portage/dev-libs/glib-2.48.2/work/glib-2.48.2/glib/gmain.c:3769
#13 0x00007ff3a3d7f010 in g_main_context_iterate (context=context@entry=0x1b8ee00, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /var/tmp/portage/dev-libs/glib-2.48.2/work/glib-2.48.2/glib/gmain.c:3840
#14 0x00007ff3a3d7f0bc in g_main_context_iteration (context=0x1b8ee00, may_block=1) at /var/tmp/portage/dev-libs/glib-2.48.2/work/glib-2.48.2/glib/gmain.c:3901
#15 0x00007ff3a80c6a1e in QEventDispatcherGlib::processEvents (this=0x1afbdf0, flags=...) at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/kernel/qeventdispatcher_glib.cpp:450
#16 0x00007ff3a72d49a6 in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at /var/tmp/portage/dev-qt/qtgui-4.8.6-r4/work/qt-everywhere-opensource-src-4.8.6/src/gui/kernel/qguieventdispatcher_glib.cpp:204
#17 0x00007ff3a8096491 in QEventLoop::processEvents (this=this@entry=0x7fff2858a250, flags=...) at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/kernel/qeventloop.cpp:149
#18 0x00007ff3a80967f5 in QEventLoop::exec (this=this@entry=0x7fff2858a250, flags=...) at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/kernel/qeventloop.cpp:204
#19 0x00007ff3a809bd79 in QCoreApplication::exec () at /var/tmp/portage/dev-qt/qtcore-4.8.6-r2/work/qt-everywhere-opensource-src-4.8.6/src/corelib/kernel/qcoreapplication.cpp:1225
#20 0x00007ff3a7236dac in QApplication::exec () at /var/tmp/portage/dev-qt/qtgui-4.8.6-r4/work/qt-everywhere-opensource-src-4.8.6/src/gui/kernel/qapplication.cpp:3823
#21 0x00007ff39875c936 in kdemain (argc=<optimized out>, argv=<optimized out>) at /var/tmp/portage/kde-apps/konqueror-16.04.3-r1/work/konqueror-16.04.3/konqueror/src/konqmain.cpp:227
#22 0x00000000004080ad in launch (argc=argc@entry=2, _name=_name@entry=0x1b3f1d8 "/usr/bin/konqueror", args=0x1b3f1f4 "", args@entry=0x1b3f1eb "--silent", cwd=cwd@entry=0x0, envc=envc@entry=0, envs=<optimized out>, envs@entry=0x1b3f1fc "", reset_env=false, tty=0x0, avoid_loops=false, startup_id_str=0x1b3f204 "jarmilka;1485725282;849043;2992_TIME42162720") at /var/tmp/portage/kde-base/kdelibs-4.14.24/work/kdelibs-4.14.24/kinit/kinit.cpp:726
#23 0x0000000000408ef9 in handle_launcher_request (sock=7, who=<optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.14.24/work/kdelibs-4.14.24/kinit/kinit.cpp:1218
#24 0x00000000004095d7 in handle_requests (waitForPid=waitForPid@entry=0) at /var/tmp/portage/kde-base/kdelibs-4.14.24/work/kdelibs-4.14.24/kinit/kinit.cpp:1411
#25 0x00000000004052dd in main (argc=2, argv=0x7fff2858ad08, envp=0x7fff2858ad20) at /var/tmp/portage/kde-base/kdelibs-4.14.24/work/kdelibs-4.14.24/kinit/kinit.cpp:1899

Possible duplicates by query: bug 374946.

Reported using DrKonqi

Comment 1 Christoph Feck 2017-02-01 00:35:18 UTC

Crash is in libflashplayer.so

Please report this issue directly to Flash developers.

Comment 2 kavol 2017-02-03 14:10:38 UTC

(In reply to Christoph Feck from comment #1)
> Crash is in libflashplayer.so
> 
> Please report this issue directly to Flash developers.

well, I am no programming expert, but ... are you sure?

couldn't be the root cause in something like wrong pointer _being passed_ to Flash?

I do not experience such crashes with Qupzilla or SeaMonkey (both having Flash enabled)

also, a crashing plugin bringing down the whole browser isn't a nice behaviour, I've lived under some (probably unfounded) impression that Konqueror implements some sandboxing ...

Comment 3 Christoph Feck 2017-02-16 14:27:06 UTC

*** Bug 376511 has been marked as a duplicate of this bug. ***