Bug 168982 - Konqueror crashes on certain web pages
Summary: Konqueror crashes on certain web pages
Status: RESOLVED WORKSFORME
Alias: None
Product: konqueror
Classification: Applications
Component: kjs (show other bugs)
Version: unspecified
Platform: FreeBSD Ports FreeBSD
: NOR crash
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords: triaged
Depends on:
Blocks:
 
Reported: 2008-08-12 16:02 UTC by Krzysztof Jurewicz
Modified: 2018-10-27 03:40 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Krzysztof Jurewicz 2008-08-12 16:02:12 UTC
Version:            (using KDE 4.1.0)
Installed from:    FreeBSD Ports
Compiler:          gcc (GCC) 4.2.1 20070719  [FreeBSD] 
OS:                FreeBSD

When entering certain web pages, Konqueror crashes (e.g. it crashes on http://www.onet.pl and http://www.interia.pl and doesn't crash on http://www.wp.pl ). Also it sometimes crashes after clicking on links, which seems random.

Backtrace of crash that happened after opening http://www.onet.pl is included below.

Application: Konqueror (konqueror), signal SIGSEGV
[New Thread 0x2a101200 (LWP 100134)]
[Switching to Thread 0x2a101200 (LWP 100134)]
[KCrash handler]
#6  0x2c06de63 in KJS::Collector::markStackObjectsConservatively (
    start=0xbfbfba90, end=0xbfbfba90)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/collector.cpp:459
#7  0x2c06e291 in KJS::Collector::markCurrentThreadConservatively ()
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/collector.cpp:549
#8  0x2c06e2b7 in KJS::Collector::markStackObjectsConservatively ()
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/collector.cpp:609
#9  0x2c06e334 in KJS::Collector::collect ()
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/collector.cpp:681
#10 0x2c06ec69 in KJS::Collector::allocate (s=8)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/collector.cpp:326
#11 0x2c0ada4d in KJS::JSCell::operator new (size=8)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/value.cpp:41
#12 0x2c0adbc5 in KJS::jsString (s=@0xbfbfbea0)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/value.cpp:192
#13 0x2c090ac4 in KJS::StringProtoFunc::callAsFunction (this=0x2d5e7ea0, 
    exec=0xbfbfc360, thisObj=0x2e60e180, args=@0xbfbfc300)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/string_object.cpp:740
#14 0x2c0af27a in KJS::JSObject::call (this=0x2d5e7ea0, exec=0xbfbfc360, 
    thisObj=0x2e60e180, args=@0xbfbfc300)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/object.cpp:99
#15 0x2c0ce9cc in KJS::Machine::runBlock (exec=0xbfbfc360, 
    codeBlock=@0x2d8e5d54, parentExec=0xbfbfc880) at codes.def:1206
#16 0x2c0aad29 in KJS::FunctionImp::callAsFunction (this=0x2d5e1bc0, 
    exec=0xbfbfc880, thisObj=0x2d5e1240, args=@0xbfbfc820)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/function.cpp:143
#17 0x2c0af27a in KJS::JSObject::call (this=0x2d5e1bc0, exec=0xbfbfc880, 
    thisObj=0x2d5e1240, args=@0xbfbfc820)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/object.cpp:99
#18 0x2c0ce9cc in KJS::Machine::runBlock (exec=0xbfbfc880, 
    codeBlock=@0x2d64e2d4, parentExec=0xbfbfcda0) at codes.def:1206
#19 0x2c0aad29 in KJS::FunctionImp::callAsFunction (this=0x2d5e7de0, 
    exec=0xbfbfcda0, thisObj=0x2d5e1240, args=@0xbfbfcd40)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/function.cpp:143
#20 0x2c0af27a in KJS::JSObject::call (this=0x2d5e7de0, exec=0xbfbfcda0, 
    thisObj=0x2d5e1240, args=@0xbfbfcd40)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/object.cpp:99
#21 0x2c0ce9cc in KJS::Machine::runBlock (exec=0xbfbfcda0, 
    codeBlock=@0x2d8e5f94, parentExec=0xbfbfd330) at codes.def:1206
#22 0x2c0aad29 in KJS::FunctionImp::callAsFunction (this=0x2d5e1160, 
    exec=0xbfbfd330, thisObj=0x2d5d0000, args=@0xbfbfd260)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/function.cpp:143
#23 0x2c0af27a in KJS::JSObject::call (this=0x2d5e1160, exec=0xbfbfd330, 
    thisObj=0x2d5d0000, args=@0xbfbfd260)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/object.cpp:99
#24 0x2c0ce9cc in KJS::Machine::runBlock (exec=0xbfbfd330, 
    codeBlock=@0x2ba7d494, parentExec=0x0) at codes.def:1206
#25 0x2c072353 in KJS::FunctionBodyNode::execute (this=0x2ba7d440, 
    exec=0xbfbfd330)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/nodes.cpp:927
#26 0x2c0b1a68 in KJS::Interpreter::evaluate (this=0x2d706800, 
    sourceURL=@0xbfbfd4e4, startingLineNumber=1, code=0x2da02000, 
    codeLength=1397, thisV=0x2d5d0000)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/interpreter.cpp:557
#27 0x2c0b1c8e in KJS::Interpreter::evaluate (this=0x2d706800, 
    sourceURL=@0xbfbfd4e4, startingLineNumber=1, code=@0xbfbfd4e8, 
    thisV=0x2d5d0000)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kjs/interpreter.cpp:499
#28 0x2be7276b in KJS::KJSProxyImpl::evaluate (this=0x2bae8460, 
    filename=@0xbfbfd578, baseLine=1, str=@0xbfbfd6c0, n=@0xbfbfd5cc, 
    completion=0xbfbfd558)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/khtml/ecma/kjs_proxy.cpp:157
#29 0x2bc5e967 in KHTMLPart::executeScript (this=0x2bac96e0, 
    filename=@0xbfbfd5e8, baseLine=1, n=@0xbfbfd5cc, script=@0xbfbfd6c0)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/khtml/khtml_part.cpp:1219
#30 0x2bceb1e2 in khtml::HTMLTokenizer::scriptExecution (this=0x2d83a800, 
    str=@0xbfbfd6c0, scriptURL=@0xbfbfd6c4, baseLine=0)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/khtml/html/htmltokenizer.cpp:475
#31 0x2bceb3cc in khtml::HTMLTokenizer::notifyFinished (this=0x2d83a800)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/khtml/html/htmltokenizer.cpp:2097
#32 0x2bdf8624 in khtml::CachedScript::checkNotify (this=0x2da52dd0)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/khtml/misc/loader.cpp:388
#33 0x2bdfe0b4 in khtml::CachedScript::data (this=0x2da52dd0, 
    buffer=@0x2da6a5e4, eof=true)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/khtml/misc/loader.cpp:380
#34 0x2bdfb2a9 in khtml::Loader::slotFinished (this=0x2ba7baf0, 
    job=0x2bad6bf0)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/khtml/misc/loader.cpp:1397
#35 0x2bdfb5a4 in khtml::Loader::qt_metacall (this=0x2ba7baf0, 
    _c=QMetaObject::InvokeMetaMethod, _id=3, _a=0xbfbfd8ec) at loader.moc:129
#36 0x28e44aa0 in QMetaObject::activate ()
   from /usr/local/lib/qt4/libQtCore.so.4
#37 0x28e44e94 in QMetaObject::activate ()
   from /usr/local/lib/qt4/libQtCore.so.4
#38 0x28adef44 in KJob::result (this=0x2bad6bf0, _t1=0x2bad6bf0)
    at kjob.moc:186
#39 0x28adf452 in KJob::emitResult (this=0x2bad6bf0)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kdecore/jobs/kjob.cpp:290
#40 0x282e6598 in KIO::SimpleJob::slotFinished (this=0x2bad6bf0)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kio/kio/job.cpp:498
#41 0x282e69ba in KIO::TransferJob::slotFinished (this=0x2bad6bf0)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kio/kio/job.cpp:967
#42 0x282ee446 in KIO::TransferJob::qt_metacall (this=0x2bad6bf0, 
    _c=QMetaObject::InvokeMetaMethod, _id=7, _a=0xbfbfdb48)
    at jobclasses.moc:336
#43 0x28e44aa0 in QMetaObject::activate ()
   from /usr/local/lib/qt4/libQtCore.so.4
#44 0x28e44e94 in QMetaObject::activate ()
   from /usr/local/lib/qt4/libQtCore.so.4
#45 0x2839e8e6 in KIO::SlaveInterface::finished (this=0x2bad6340)
    at slaveinterface.moc:161
#46 0x283a0a34 in KIO::SlaveInterface::dispatch (this=0x2bad6340, _cmd=104, 
    rawdata=@0xbfbfdcc4)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kio/kio/slaveinterface.cpp:175
#47 0x283a164c in KIO::SlaveInterface::dispatch (this=0x2bad6340)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kio/kio/slaveinterface.cpp:90
#48 0x28391797 in KIO::Slave::gotInput (this=0x2bad6340)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kio/kio/slave.cpp:319
#49 0x28392fdd in KIO::Slave::qt_metacall (this=0x2bad6340, 
    _c=QMetaObject::InvokeMetaMethod, _id=2, _a=0xbfbfddd8) at slave.moc:75
#50 0x28e44aa0 in QMetaObject::activate ()
   from /usr/local/lib/qt4/libQtCore.so.4
#51 0x28e44e94 in QMetaObject::activate ()
   from /usr/local/lib/qt4/libQtCore.so.4
#52 0x282b1db3 in KIO::Connection::readyRead (this=0x2bad6900)
    at connection.moc:84
#53 0x282b2d96 in KIO::ConnectionPrivate::dequeue (this=0x2bad6900)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kio/kio/connection.cpp:82
#54 0x282b3c05 in KIO::Connection::qt_metacall (this=0x2bad6900, 
    _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x2a10690c)
    at connection.moc:72
#55 0x28e40f59 in QMetaCallEvent::placeMetaCall ()
   from /usr/local/lib/qt4/libQtCore.so.4
#56 0x28e439bf in QObject::event () from /usr/local/lib/qt4/libQtCore.so.4
#57 0x293e5b3c in QApplicationPrivate::notify_helper ()
   from /usr/local/lib/qt4/libQtGui.so.4
#58 0x293ec52c in QApplication::notify ()
   from /usr/local/lib/qt4/libQtGui.so.4
#59 0x286af4a3 in KApplication::notify (this=0xbfbfe68c, receiver=0x2bad6900, 
    event=0x2bacba00)
    at /usr/ports/x11/kdelibs4/work/kdelibs-4.1.0/kdeui/kernel/kapplication.cpp:311
#60 0x28e34307 in QCoreApplication::notifyInternal ()
   from /usr/local/lib/qt4/libQtCore.so.4
#61 0x28e3555d in QCoreApplicationPrivate::sendPostedEvents ()
   from /usr/local/lib/qt4/libQtCore.so.4
#62 0x2bad6900 in ?? ()
#63 0x2bacba00 in ?? ()
#64 0xbfbfe244 in ?? ()
#65 0x00a6acc8 in ?? ()
#66 0x00000000 in ?? ()
#67 0x000016e4 in ?? ()
#68 0x28e5c5bd in QTimerInfoList::getTime ()
   from /usr/local/lib/qt4/libQtCore.so.4
#69 0x2a1410c0 in ?? ()
#70 0x2a1820c0 in ?? ()
#71 0x2804c900 in _rtld_error () from /libexec/ld-elf.so.1
Comment 1 Maksim Orlovich 2008-08-12 16:47:37 UTC
Thanks for the report 

#6  0x2c06de63 in KJS::Collector::markStackObjectsConservatively (
    start=0xbfbfba90, end=0xbfbfba90)

If this frame from GDB is right than the stack detection in the GC somehow got broken on FBSD....

The first thing to check would be whether kjs/config.h in the build directory of kdelibs has HAVE_PTHREAD_NP_H defined, I don't know how easy that is to check w/ports build. Though, in all likelyhood one would have to figure out what currentThreadStackBase() in collector.cpp is doing (wrong). 

Now, I don't have FBSD, so I guess unless you feel like being adventurous/generous, and debugging this by yourself, I'll likely have to chase down some contacts to get this right... So I'd appreciate if you let me know what FreeBSD version this is, on what architecture (it looks like x86 from BT, but just in case...), and if there is anything unusual about the ports you're using that any FreeBSD people I talk to may want to know about.
Comment 2 Krzysztof Jurewicz 2008-08-13 02:32:31 UTC
I feel a bit adventurous, but I absolutely don't feel qualified, so it would be a good idea if someone else do debugging.

HAVE_PTHREAD_NP_H is defined.

Here is system information from Konqueror's user agent string: FreeBSD 7.0-RELEASE-p2; X11; i386. The system uses GENERIC kernel.

KDE is compiled with -march=pentium-m, there should be nothing unusual in ports i'm using.
Comment 3 Krzysztof Jurewicz 2008-08-13 02:51:33 UTC
And the FreeBSD ports' Makefile's version:

$FreeBSD: ports/x11/kdelibs4/Makefile,v 1.227 2008/08/09 16:52:27 miwi Exp $
Comment 4 Christoph Feck 2013-09-12 21:37:48 UTC
This crash report is at least 3 years old and there were no further comments or status updates since then.

Therefore we believe that this crash is already fixed in recent KDE 4 versions or the backtrace is no longer applicable to the current KDE 4 sources.

If the crash still happens with a recent KDE version (4.10.5 or 4.11), please add an updated backtrace or provide steps to reproduce. For more information, see http://techbase.kde.org/Development/Tutorials/Debugging/How_to_create_useful_crash_reports

(To prevent automatic closing of this bug in the future, please set the bug status to ASSIGNED or CONFIRMED)
Comment 5 Andrew Crouthamel 2018-09-24 02:09:48 UTC
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information as soon as possible and set the bug status as REPORTED. Due to regular bug tracker maintenance, if the bug is still in NEEDSINFO status with no change in 30 days, the bug will be closed as RESOLVED > WORKSFORME due to lack of needed information.

For more information about our bug triaging procedures please read the wiki located here: https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please set the bug status as REPORTED so that the KDE team knows that the bug is ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 6 Andrew Crouthamel 2018-10-27 03:40:15 UTC
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least 30 days. The bug is now closed as RESOLVED > WORKSFORME due to lack of needed information.

For more information about our bug triaging procedures please read the wiki located here: https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

Thank you for helping us make KDE software even better for everyone!