Application that crashed: konqueror
Version of the application: 4.3.1 (KDE 4.3.1)
KDE Version: 4.3.1 (KDE 4.3.1)
Qt Version: 4.5.2
Operating System: Linux 2.6.30.8-64.fc11.x86_64 x86_64

What I was doing when the application crashed:
Konqueror/KJS crashes on exit when doing the following:

1) konqueror http://www.dd-wrt.com/site/support/router-database
2) Type "WBR2-G%" (without the quotes) into the search field
3) Try to delete the % with a backspace, note that the whole text field has become "stuck", backspace does nothing, can't select with mouse etc
4) Close konqueror from "X" in top-right corner, acknowledge the "data modified but not submitted" warning
5) Crash

 -- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
[KCrash Handler]
#5  0x00000037eea74eed in KJS::JSValue::marked (this=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/kjs/collector.h:133
#6  KJS::JSVariableObject::mark (this=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/kjs/JSVariableObject.cpp:84
#7  0x00000037eea352ef in KJS::Collector::markStackObjectsConservatively (start=<value optimized out>, end=0x7fff1e3f9000) at /usr/src/debug/kdelibs-4.3.1/kjs/collector.cpp:473
#8  0x00000037eea35a55 in KJS::Collector::markCurrentThreadConservatively () at /usr/src/debug/kdelibs-4.3.1/kjs/collector.cpp:553
#9  0x00000037eea35ad3 in KJS::Collector::collect () at /usr/src/debug/kdelibs-4.3.1/kjs/collector.cpp:687
#10 0x0000003dfaa45175 in KJS::KJSProxyImpl::~KJSProxyImpl (this=0x1454a10, __in_chrg=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/ecma/kjs_proxy.cpp:114
#11 0x0000003dfa814c57 in khtml::ChildFrame::~ChildFrame (this=0x157b520, __in_chrg=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/khtmlpart_p.h:99
#12 0x0000003dfa806527 in KHTMLPart::~KHTMLPart (this=0x13d70d0, __in_chrg=<value optimized out>, __vtt_parm=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/khtml_part.cpp:622
#13 0x00000037e8048f8f in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#14 0x00000037e804e095 in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#15 0x00000037e80a3f7f in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#16 0x00000037e80a45f8 in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#17 0x00000037e68e2051 in KMainWindow::closeEvent (this=0x1135490, e=0x7fff1e3eef20) at /usr/src/debug/kdelibs-4.3.1/kdeui/widgets/kmainwindow.cpp:598
#18 0x00000037e80963da in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#19 0x00000037e5bdd718 in QWidget::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#20 0x00000037e5f4ff6b in QMainWindow::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#21 0x00000037e691c803 in KXmlGuiWindow::event (this=0x0, ev=0x1) at /usr/src/debug/kdelibs-4.3.1/kdeui/xmlgui/kxmlguiwindow.cpp:131
#22 0x00000037e80a452c in KConfigGroup::writeEntry(QString const&, QStringList const&, QFlags<KConfigBase::WriteConfigFlag>) () at /usr/src/debug/kdelibs-4.3.1/kdecore/config/kconfiggroup.cpp:954
#23 0x00000037e5b8f69c in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#24 0x00000037e5b968fe in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#25 0x00000037e6811b56 in KApplication::notify (this=0x7fff1e3f7320, receiver=0x1135490, event=0x7fff1e3eef20) at /usr/src/debug/kdelibs-4.3.1/kdeui/kernel/kapplication.cpp:302
#26 0x00000037e3f3f59c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
#27 0x00000037e5be2ad1 in QWidgetPrivate::close_helper(QWidgetPrivate::CloseMode) () from /usr/lib64/libQtGui.so.4
#28 0x00000037e5be9f26 in QApplication::x11ClientMessage(QWidget*, _XEvent*, bool) () from /usr/lib64/libQtGui.so.4
#29 0x00000037e5bfa5d4 in QApplication::x11ProcessEvent(_XEvent*) () from /usr/lib64/libQtGui.so.4
#30 0x00000037e5c227dc in ?? () from /usr/lib64/libQtGui.so.4
#31 0x00000037e2e3790e in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#32 0x00000037e2e3b0e8 in ?? () from /lib64/libglib-2.0.so.0
#33 0x00000037e2e3b20a in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#34 0x00000037e3f67936 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#35 0x00000037e5c21f8e in ?? () from /usr/lib64/libQtGui.so.4
#36 0x00000037e3f3ded2 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#37 0x00000037e3f3e2a4 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#38 0x00000037e7784dec in KIO::NetAccess::enter_loop (this=0x7fff1e3f0bd0) at /usr/src/debug/kdelibs-4.3.1/kio/kio/netaccess.cpp:502
#39 0x00000037e778543f in KIO::NetAccess::synchronousRunInternal (this=0x7fff1e3f0bd0, job=0x13c8df0, window=<value optimized out>, data=0x7fff1e3f0e00, finalURL=0x7fff1e3f0d40, 
    metaData=0x7fff1e3f0de0) at /usr/src/debug/kdelibs-4.3.1/kio/kio/netaccess.cpp:487
#40 0x00000037e7785ac1 in KIO::NetAccess::synchronousRun (job=0x13c8df0, window=0x0, data=0x7fff1e3f0e00, finalURL=0x7fff1e3f0d40, metaData=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kio/kio/netaccess.cpp:277
#41 0x0000003dfaa6bad2 in KJS::XMLHttpRequest::send (this=0x7f8bc8870280, _body=<value optimized out>, ec=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/ecma/xmlhttprequest.cpp:481
#42 0x0000003dfaa6c56f in KJS::XMLHttpRequestProtoFunc::callAsFunction (this=<value optimized out>, exec=0x7fff1e3f19e0, thisObj=0x7f8bc8870280, args=@0x7fff1e3f10a0)
    at /usr/src/debug/kdelibs-4.3.1/khtml/ecma/xmlhttprequest.cpp:868
#43 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#44 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f19e0, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#45 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc87db540, exec=0x7fff1e3f23d0, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#46 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#47 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f23d0, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#48 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc885f840, exec=0x7fff1e3f2dc0, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#49 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#50 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f2dc0, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#51 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc885eac0, exec=0x7fff1e3f3880, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#52 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#53 0x00000037eea479d5 in KJS::FunctionProtoFunc::callAsFunction (this=<value optimized out>, exec=0x7fff1e3f3880, thisObj=0x7f8bc885eac0, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function_object.cpp:123
#54 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#55 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f3880, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#56 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc8833fc0, exec=0x7fff1e3f4340, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#57 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#58 0x00000037eea479d5 in KJS::FunctionProtoFunc::callAsFunction (this=<value optimized out>, exec=0x7fff1e3f4340, thisObj=0x7f8bc8833fc0, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function_object.cpp:123
#59 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#60 0x00000037eea80fd2 in KJS::Machine::runBlock (exec=0x7fff1e3f4340, codeBlock=<value optimized out>, parentExec=<value optimized out>) at codes.def:1192
#61 0x00000037eea6163a in KJS::FunctionImp::callAsFunction (this=0x7f8bc885e8c0, exec=0x15805c0, thisObj=<value optimized out>, args=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/kjs/function.cpp:144
#62 0x00000037eea64f09 in KJS::JSObject::call (this=0x0, exec=0x37eecb9f70, thisObj=0x0, args=@0x1) at /usr/src/debug/kdelibs-4.3.1/kjs/object.cpp:69
#63 0x0000003dfaa5e141 in KJS::JSEventListener::handleEvent (this=0x19c6a70, evt=@0x7fff1e3f45d0) at /usr/src/debug/kdelibs-4.3.1/khtml/ecma/kjs_events.cpp:106
#64 0x0000003dfa85e48c in DOM::NodeImpl::handleLocalEvents (this=<value optimized out>, evt=<value optimized out>, useCapture=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/khtml/xml/dom_nodeimpl.cpp:718
#65 0x0000003dfa85e941 in DOM::NodeImpl::dispatchGenericEvent (this=0x17e8400, evt=0x19bf2a0) at /usr/src/debug/kdelibs-4.3.1/khtml/xml/dom_nodeimpl.cpp:501
#66 0x0000003dfa85e9ce in DOM::NodeImpl::dispatchEvent (this=0x17e8400, evt=0x19bf2a0, exceptioncode=@0x7fff1e3f46dc, tempEvent=true) at /usr/src/debug/kdelibs-4.3.1/khtml/xml/dom_nodeimpl.cpp:453
#67 0x0000003dfa85f2c2 in DOM::NodeImpl::dispatchKeyEvent (this=<value optimized out>, key=0x7fff1e3f5020, keypress=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.1/khtml/xml/dom_nodeimpl.cpp:694
#68 0x0000003dfa7c6145 in KHTMLView::dispatchKeyEvent (this=0x1416fd0, _ke=0x7fff1e3f5020) at /usr/src/debug/kdelibs-4.3.1/khtml/khtmlview.cpp:1650
#69 0x0000003dfa7cd920 in KHTMLView::keyReleaseEvent (this=0x1416fd0, _ke=0x7fff1e3f5020) at /usr/src/debug/kdelibs-4.3.1/khtml/khtmlview.cpp:1987
#70 0x00000037e5bddd54 in QWidget::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#71 0x00000037e5f35916 in QFrame::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#72 0x00000037e5fc4bf1 in QAbstractScrollArea::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#73 0x0000003dfa7cd033 in KHTMLView::event (this=0x1416fd0, e=<value optimized out>) at /usr/src/debug/kdelibs-4.3.1/khtml/khtmlview.cpp:546
#74 0x00000037e5b8f69c in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#75 0x00000037e5b97413 in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#76 0x00000037e6811b56 in KApplication::notify (this=0x7fff1e3f7320, receiver=0x17e90b0, event=0x7fff1e3f5020) at /usr/src/debug/kdelibs-4.3.1/kdeui/kernel/kapplication.cpp:302
#77 0x00000037e3f3f59c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
#78 0x00000037e5c1e8ba in ?? () from /usr/lib64/libQtGui.so.4
#79 0x00000037e5c20e50 in ?? () from /usr/lib64/libQtGui.so.4
#80 0x00000037e5bfa4e4 in QApplication::x11ProcessEvent(_XEvent*) () from /usr/lib64/libQtGui.so.4
#81 0x00000037e5c227dc in ?? () from /usr/lib64/libQtGui.so.4
#82 0x00000037e2e3790e in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#83 0x00000037e2e3b0e8 in ?? () from /lib64/libglib-2.0.so.0
#84 0x00000037e2e3b20a in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#85 0x00000037e3f67936 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#86 0x00000037e5c21f8e in ?? () from /usr/lib64/libQtGui.so.4
#87 0x00000037e3f3ded2 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#88 0x00000037e3f3e2a4 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#89 0x00000037e3f40439 in QCoreApplication::exec() () from /usr/lib64/libQtCore.so.4
#90 0x00000037e80cf4e3 in kdemain () from /usr/lib64/libkdeinit4_konqueror.so
#91 0x0000003fdda1ea2d in __libc_start_main () from /lib64/libc.so.6
#92 0x0000000000400759 in _start ()

Reported using DrKonqi