Application: konqueror (4.4.2 (KDE 4.4.2))
KDE Platform Version: 4.4.2 (KDE 4.4.2)
Qt Version: 4.6.2
Operating System: Linux 2.6.32-21-generic x86_64
Distribution: Ubuntu lucid (development branch)

-- Information about the crash:
This bug is easily reproduceable. Surf facebook for a while. The crash happens when one clicks on a link that  clears the present view.

The crash can be reproduced some of the time.

 -- Backtrace:
Application: Konqueror (kdeinit4), signal: Aborted
[Current thread is 1 (Thread 0x7f0a4cc83760 (LWP 2689))]

Thread 3 (Thread 0x7f0a367ae710 (LWP 2690)):
#0  __lll_lock_wait_private () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:97
#1  0x00007f0a49c133ac in _L_lock_12430 () from /lib/libc.so.6
#2  0x00007f0a49c11e48 in *__GI___libc_free (mem=0x7f0a49f11e40) at malloc.c:3736
#3  0x00007f0a4662f1ba in ?? () from /lib/libglib-2.0.so.0
#4  0x00007f0a4b276013 in ~QEventDispatcherGlib (this=0x14667e0, __in_chrg=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:366
#5  0x00007f0a4b157364 in QThreadPrivate::finish (arg=<value optimized out>) at thread/qthread_unix.cpp:284
#6  0x00007f0a4b15777d in ~__pthread_cleanup_class (arg=0x7f0a4b55ff20) at /usr/include/pthread.h:535
#7  QThreadPrivate::start (arg=0x7f0a4b55ff20) at thread/qthread_unix.cpp:253
#8  0x00007f0a4aec79ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#9  0x00007f0a49c7a69d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#10 0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f0a2e136710 (LWP 2756)):
#0  0x00007f0a49c6df53 in *__GI___poll (fds=<value optimized out>, nfds=<value optimized out>, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007f0a466334a9 in ?? () from /lib/libglib-2.0.so.0
#2  0x00007f0a466338fc in g_main_context_iteration () from /lib/libglib-2.0.so.0
#3  0x00007f0a4b275566 in QEventDispatcherGlib::processEvents (this=0x30c5400, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:414
#4  0x00007f0a4b24a992 in QEventLoop::processEvents (this=<value optimized out>, flags=) at kernel/qeventloop.cpp:149
#5  0x00007f0a4b24ad6c in QEventLoop::exec (this=0x7f0a2e135db0, flags=) at kernel/qeventloop.cpp:201
#6  0x00007f0a4b154d59 in QThread::exec (this=<value optimized out>) at thread/qthread.cpp:487
#7  0x00007f0a4b22b178 in QInotifyFileSystemWatcherEngine::run (this=0x290b400) at io/qfilesystemwatcher_inotify.cpp:248
#8  0x00007f0a4b157775 in QThreadPrivate::start (arg=0x290b400) at thread/qthread_unix.cpp:248
#9  0x00007f0a4aec79ca in start_thread (arg=<value optimized out>) at pthread_create.c:300
#10 0x00007f0a49c7a69d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#11 0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7f0a4cc83760 (LWP 2689)):
[KCrash Handler]
#5  0x00007f0a49bc7a75 in *__GI_raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#6  0x00007f0a49bcb5c0 in *__GI_abort () at abort.c:92
#7  0x00007f0a49c014fb in __libc_message (do_abort=<value optimized out>, fmt=<value optimized out>) at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
#8  0x00007f0a49c0b5b6 in malloc_printerr (action=3, str=0x7f0a49cdd560 "free(): invalid next size (fast)", ptr=<value optimized out>) at malloc.c:6264
#9  0x00007f0a49c11e53 in *__GI___libc_free (mem=<value optimized out>) at malloc.c:3738
#10 0x00007f0a3821a4b4 in WTF::RefPtr<KJS::SourceElementsNode>::operator= (this=0x49e2828, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:128
#11 ~ListRefPtr (this=0x49e2828, __in_chrg=<value optimized out>) at ../../kjs/wtf/ListRefPtr.h:44
#12 0x00007f0a3821a6d7 in KJS::SourceElementsNode::~SourceElementsNode() () from /usr/lib/libkjs.so.4
#13 0x00007f0a3821b07c in KJS::FunctionBodyNode::~FunctionBodyNode() () from /usr/lib/libkjs.so.4
#14 0x00007f0a381eea68 in ~RefPtr (this=0x7f0a3dfcadc0, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#15 ~FunctionImp (this=0x7f0a3dfcadc0, __in_chrg=<value optimized out>) at ../../kjs/function.cpp:72
#16 0x00007f0a381c4c1b in KJS::Collector::collect () at ../../kjs/collector.cpp:739
#17 0x00007f0a38cd1a3d in KJS::KJSProxyImpl::clear (this=0x1869710) at ../../khtml/ecma/kjs_proxy.cpp:224
#18 0x00007f0a38a85702 in KHTMLPart::clear (this=0x3a78280) at ../../khtml/khtml_part.cpp:1558
#19 0x00007f0a38a87a85 in ~KHTMLPart (this=0x3a78280, __in_chrg=<value optimized out>, __vtt_parm=<value optimized out>) at ../../khtml/khtml_part.cpp:603
#20 0x00007f0a38a85867 in KHTMLPart::clear (this=0x1296a70) at ../../khtml/khtml_part.cpp:1592
#21 0x00007f0a38a86e86 in KHTMLPart::restoreState (this=0x1296a70, stream=...) at ../../khtml/khtml_part.cpp:5465
#22 0x00007f0a407d60af in KonqView::restoreHistory (this=0x12965c0) at ../../../../apps/konqueror/src/konqview.cpp:858
#23 0x00007f0a40814fca in KonqMainWindow::slotGoHistoryDelayed (this=0xc81db0) at ../../../../apps/konqueror/src/konqmainwindow.cpp:2852
#24 0x00007f0a40828737 in KonqMainWindow::qt_metacall (this=0xc81db0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fffee62c650) at ./konqmainwindow.moc:444
#25 0x00007f0a4b25ee3f in QMetaObject::activate (sender=0x49d3ca0, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0xffffffffffffffff) at kernel/qobject.cpp:3293
#26 0x00007f0a4b26665f in QSingleShotTimer::timerEvent (this=0x49d3ca0) at kernel/qtimer.cpp:308
#27 0x00007f0a4b25ba63 in QObject::event (this=0x49d3ca0, e=0x7fffee62cdb0) at kernel/qobject.cpp:1212
#28 0x00007f0a4a3e822c in QApplicationPrivate::notify_helper (this=0xc3e930, receiver=0x49d3ca0, e=0x7fffee62cdb0) at kernel/qapplication.cpp:4300
#29 0x00007f0a4a3ee6fb in QApplication::notify (this=0x7fffee62d350, receiver=0x49d3ca0, e=0x7fffee62cdb0) at kernel/qapplication.cpp:4183
#30 0x00007f0a4b793526 in KApplication::notify (this=0x7fffee62d350, receiver=0x49d3ca0, event=0x7fffee62cdb0) at ../../kdeui/kernel/kapplication.cpp:302
#31 0x00007f0a4b24c06c in QCoreApplication::notifyInternal (this=0x7fffee62d350, receiver=0x49d3ca0, event=0x7fffee62cdb0) at kernel/qcoreapplication.cpp:704
#32 0x00007f0a4b278d42 in QCoreApplication::sendEvent (this=0xc4f2c0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#33 QTimerInfoList::activateTimers (this=0xc4f2c0) at kernel/qeventdispatcher_unix.cpp:603
#34 0x00007f0a4b275824 in timerSourceDispatch (source=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:184
#35 0x00007f0a4662f8c2 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#36 0x00007f0a46633748 in ?? () from /lib/libglib-2.0.so.0
#37 0x00007f0a466338fc in g_main_context_iteration () from /lib/libglib-2.0.so.0
#38 0x00007f0a4b275513 in QEventDispatcherGlib::processEvents (this=0xbc4140, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:412
#39 0x00007f0a4a49846e in QGuiEventDispatcherGlib::processEvents (this=0xa81, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:204
#40 0x00007f0a4b24a992 in QEventLoop::processEvents (this=<value optimized out>, flags=) at kernel/qeventloop.cpp:149
#41 0x00007f0a4b24ad6c in QEventLoop::exec (this=0x7fffee62d050, flags=) at kernel/qeventloop.cpp:201
#42 0x00007f0a4b24eaab in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#43 0x00007f0a4084f076 in kdemain (argc=<value optimized out>, argv=<value optimized out>) at ../../../../apps/konqueror/src/konqmain.cpp:271
#44 0x00000000004070f3 in launch (argc=2, _name=<value optimized out>, args=<value optimized out>, cwd=<value optimized out>, envc=16, envs=<value optimized out>, reset_env=false, tty=0x0, 
    avoid_loops=false, startup_id_str=0x40a4f9 "0") at ../../kinit/kinit.cpp:717
#45 0x0000000000407cb0 in handle_launcher_request (sock=8, who=<value optimized out>) at ../../kinit/kinit.cpp:1209
#46 0x000000000040823a in handle_requests (waitForPid=0) at ../../kinit/kinit.cpp:1402
#47 0x0000000000408e22 in main (argc=4, argv=<value optimized out>, envp=<value optimized out>) at ../../kinit/kinit.cpp:1845

This bug may be a duplicate of or related to bug 223957.

Possible duplicates by query: bug 230501, bug 227104, bug 224828, bug 223957.

Reported using DrKonqi