Application that crashed: konqueror
Version of the application: 4.3.4 (KDE 4.3.4)
KDE Version: 4.3.4 (KDE 4.3.4)
Qt Version: 4.5.2
Operating System: Linux 2.6.31-17-generic x86_64
Distribution: Ubuntu 9.10

What I was doing when the application crashed:
I click on the New Notifications icon in the lower right corner, and it pops up a box of recent notifications. When I try to click a link inside a notification, Konq segfaults. English language. 100% repeatable.

 -- Backtrace:
Application: Konqueror (kdeinit4), signal: Segmentation fault
The current source language is "auto; currently c".
[KCrash Handler]
#5  khtml::BidiContext::deref (this=0x1000000010) at ../../khtml/rendering/bidi.cpp:206
#6  0x00007fec70469264 in khtml::RootInlineBox::setLineBreakInfo (this=0x367a1d8, obj=0x0, breakPos=<value optimized out>, status=..., context=0x0) at ../../khtml/rendering/render_line.cpp:1177
#7  0x00007fec7046933a in khtml::RootInlineBox::childRemoved (this=0x1000000010, box=0x367a240) at ../../khtml/rendering/render_line.cpp:1161
#8  0x00007fec704693a5 in khtml::InlineFlowBox::removeFromLine (this=0x367a280, child=0x367a240) at ../../khtml/rendering/render_line.cpp:226
#9  0x00007fec70469f8d in khtml::InlineBox::detach (this=0x367a240, renderArena=0x2c58490, noRemove=40) at ../../khtml/rendering/render_line.cpp:81
#10 0x00007fec70468648 in khtml::InlineFlowBox::deleteLine (this=0x367a280, arena=0x2c58490) at ../../khtml/rendering/render_line.cpp:209
#11 0x00007fec70468648 in khtml::InlineFlowBox::deleteLine (this=0x367a1d8, arena=0x2c58490) at ../../khtml/rendering/render_line.cpp:209
#12 0x00007fec7041d65c in khtml::RenderContainer::removeChildNode (this=0x34d2eb8, oldChild=0x34d3058) at ../../khtml/rendering/render_container.cpp:224
#13 0x00007fec704041af in khtml::RenderBlock::removeChild (this=0x34d2c60, oldChild=<value optimized out>) at ../../khtml/rendering/render_block.cpp:670
#14 0x00007fec70413f3e in khtml::RenderObject::remove (this=0x34d2b38) at ../../khtml/rendering/render_object.h:847
#15 khtml::RenderObject::detach (this=0x34d2b38) at ../../khtml/rendering/render_object.cpp:2365
#16 0x00007fec70420932 in khtml::RenderBox::detach (this=0x34d2b38) at ../../khtml/rendering/render_box.cpp:224
#17 0x00007fec7041e28c in khtml::RenderContainer::updatePseudoChild (this=0x34d2a98, type=khtml::RenderStyle::AFTER) at ../../khtml/rendering/render_container.cpp:342
#18 0x00007fec7041e3f4 in khtml::RenderContainer::updatePseudoChildren (this=0x34d2a98) at ../../khtml/rendering/render_container.cpp:298
#19 0x00007fec7036ea87 in DOM::ElementImpl::recalcStyle (this=0x30802f0, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:970
#20 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#21 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x3080030, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#22 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#23 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x307fcc0, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#24 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#25 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x307f900, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#26 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#27 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x307f510, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#28 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#29 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x307f290, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#30 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#31 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x307efd0, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#32 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#33 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x307ed30, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#34 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#35 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x307ebb0, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#36 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#37 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x307e880, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#38 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#39 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x2f9dc90, change=DOM::NodeImpl::Inherit) at ../../khtml/xml/dom_elementimpl.cpp:990
#40 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#41 0x00007fec7036ead7 in DOM::ElementImpl::recalcStyle (this=0x2d3fe20, change=DOM::NodeImpl::NoChange) at ../../khtml/xml/dom_elementimpl.cpp:990
#42 0x00007fec703b7749 in DOM::HTMLElementImpl::recalcStyle (this=0x1000000010, ch=DOM::NodeImpl::NoChange) at ../../khtml/html/html_elementimpl.cpp:242
#43 0x00007fec7035de3f in DOM::DocumentImpl::recalcStyle (this=0x2d03380, change=DOM::NodeImpl::NoChange) at ../../khtml/xml/dom_docimpl.cpp:1436
#44 0x00007fec703565fd in DOM::DocumentImpl::updateDocumentsRendering () at ../../khtml/xml/dom_docimpl.cpp:1478
#45 0x00007fec70539e40 in KJS::Window::afterScriptExecution (this=0x1000000010) at ../../khtml/ecma/kjs_window.cpp:1269
#46 0x00007fec705684b4 in KJS::JSEventListener::handleEvent (this=0x41f7050, evt=...) at ../../khtml/ecma/kjs_events.cpp:119
#47 0x00007fec70364aa7 in DOM::NodeImpl::handleLocalEvents (this=<value optimized out>, evt=<value optimized out>, useCapture=<value optimized out>) at ../../khtml/xml/dom_nodeimpl.cpp:731
#48 0x00007fec70364f72 in DOM::NodeImpl::dispatchGenericEvent (this=0x4ed09a0, evt=0x27837a0) at ../../khtml/xml/dom_nodeimpl.cpp:501
#49 0x00007fec7036500e in DOM::NodeImpl::dispatchEvent (this=0x4ed09a0, evt=0x27837a0, exceptioncode=@0x7fffeb7b3b2c, tempEvent=true) at ../../khtml/xml/dom_nodeimpl.cpp:453
#50 0x00007fec702c9b09 in KHTMLView::dispatchMouseEvent (this=0x2a79900, eventId=<value optimized out>, targetNode=0x4ed09a0, targetNodeNonShared=<value optimized out>, 
    cancelable=<value optimized out>, detail=<value optimized out>, _mouse=<value optimized out>, setUnder=true, mouseEventType=1, orient=0) at ../../khtml/khtmlview.cpp:3717
#51 0x00007fec702d3907 in KHTMLView::mouseReleaseEvent (this=0x2a79900, _mouse=0x7fffeb7b44f0) at ../../khtml/khtmlview.cpp:1578
#52 0x00007fec818f19c0 in QWidget::event (this=0x2a79900, event=0x7fffeb7b44f0) at kernel/qwidget.cpp:7549
#53 0x00007fec81c4d2a6 in QFrame::event (this=0x2a79900, e=0x7fffeb7b44f0) at widgets/qframe.cpp:559
#54 0x00007fec702d2215 in KHTMLView::widgetEvent (this=0x2a79900, e=0x0) at ../../khtml/khtmlview.cpp:2338
#55 0x00007fec702d252f in KHTMLView::eventFilter (this=0x2a79900, o=0x2a82570, e=0x7fffeb7b44f0) at ../../khtml/khtmlview.cpp:2191
#56 0x00007fec838f5f47 in QCoreApplicationPrivate::sendThroughObjectEventFilters (this=<value optimized out>, receiver=0x2a82570, event=0x7fffeb7b44f0) at kernel/qcoreapplication.cpp:726
#57 0x00007fec818a2ecc in QApplicationPrivate::notify_helper (this=0x26366f0, receiver=0x2a82570, e=0x7fffeb7b44f0) at kernel/qapplication.cpp:4052
#58 0x00007fec818aa011 in QApplication::notify (this=<value optimized out>, receiver=0x2a82570, e=0x7fffeb7b44f0) at kernel/qapplication.cpp:3758
#59 0x00007fec824d9e56 in KApplication::notify (this=0x7fffeb7b6550, receiver=0x2a82570, event=0x7fffeb7b44f0) at ../../kdeui/kernel/kapplication.cpp:302
#60 0x00007fec838f6c2c in QCoreApplication::notifyInternal (this=0x7fffeb7b6550, receiver=0x2a82570, event=0x7fffeb7b44f0) at kernel/qcoreapplication.cpp:610
#61 0x00007fec818a98e0 in QCoreApplication::sendSpontaneousEvent (receiver=0x2a82570, event=0x7fffeb7b44f0, alienWidget=0x2a82570, nativeWidget=0x271c170, buttonDown=<value optimized out>, 
    lastMouseReceiver=<value optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:216
#62 QApplicationPrivate::sendMouseEvent (receiver=0x2a82570, event=0x7fffeb7b44f0, alienWidget=0x2a82570, nativeWidget=0x271c170, buttonDown=<value optimized out>, 
    lastMouseReceiver=<value optimized out>) at kernel/qapplication.cpp:2924
#63 0x00007fec8190fa0e in QETWidget::translateMouseEvent (this=0x271c170, event=<value optimized out>) at kernel/qapplication_x11.cpp:4409
#64 0x00007fec8190eaa9 in QApplication::x11ProcessEvent (this=<value optimized out>, event=0x7fffeb7b6020) at kernel/qapplication_x11.cpp:3550
#65 0x00007fec81937d0c in x11EventSourceDispatch (s=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:146
#66 0x00007fec807d3bce in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#67 0x00007fec807d7598 in ?? () from /lib/libglib-2.0.so.0
#68 0x00007fec807d76c0 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#69 0x00007fec8391f1a6 in QEventDispatcherGlib::processEvents (this=0x25ad040, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:327
#70 0x00007fec819374be in QGuiEventDispatcherGlib::processEvents (this=0x1000000010, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:202
#71 0x00007fec838f5532 in QEventLoop::processEvents (this=<value optimized out>, flags=) at kernel/qeventloop.cpp:149
#72 0x00007fec838f5904 in QEventLoop::exec (this=0x7fffeb7b6350, flags=) at kernel/qeventloop.cpp:201
#73 0x00007fec838f7ab9 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:888
#74 0x00007fec77c8df16 in kdemain () from /usr/lib/libkdeinit4_konqueror.so
#75 0x0000000000406da8 in launch (argc=2, _name=<value optimized out>, args=<value optimized out>, cwd=<value optimized out>, envc=16, envs=<value optimized out>, reset_env=false, tty=0x0, 
    avoid_loops=false, startup_id_str=0x26053e4 "BunnyHutch;1264371532;232378;2267_TIME297490801") at ../../kinit/kinit.cpp:677
#76 0x0000000000407aa0 in handle_launcher_request (sock=8, who=<value optimized out>) at ../../kinit/kinit.cpp:1169
#77 0x0000000000407f51 in handle_requests (waitForPid=0) at ../../kinit/kinit.cpp:1362
#78 0x0000000000408bb2 in main (argc=1, argv=<value optimized out>, envp=<value optimized out>) at ../../kinit/kinit.cpp:1793

This bug may be a duplicate of or related to bug 206832

Reported using DrKonqi