Application: konqueror (4.6.00 (4.6.0)) KDE Platform Version: 4.6.00 (4.6.0) (Compiled from sources) Qt Version: 4.7.1 Operating System: Linux 2.6.36-gentoo x86_64 Distribution: "Gentoo Base System release 1.12.14" -- Information about the crash: - What I was doing when the application crashed: I browsed to http://phoronix.com and before the page loaded completely, Konqueror crashed. This is almost certainly due to some ads on that page, as this wasn't happening as recently as a few days ago, but today it has happened six times in a row now. Note: This sounds very similar to bug #243739, but the backtrace is different, so I suspect it's not the same bug. The crash can be reproduced every time. -- Backtrace: Application: Konqueror (kdeinit4), signal: Segmentation fault [Current thread is 1 (Thread 0x7fa20b31b760 (LWP 2401))] Thread 5 (Thread 0x7fa1efb77710 (LWP 2436)): #0 0x00007fa20895c913 in select () at ../sysdeps/unix/syscall-template.S:82 #1 0x00007fa209f15ddc in QProcessManager::run (this=0x7fa20a269f60) at io/qprocess_unix.cpp:245 #2 0x00007fa209e47ede in QThreadPrivate::start (arg=0x7fa20a269f60) at thread/qthread_unix.cpp:285 #3 0x00007fa209bb78c4 in start_thread (arg=<value optimized out>) at pthread_create.c:297 #4 0x00007fa2089631dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 4 (Thread 0x7fa1ef278710 (LWP 2440)): #0 pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:211 #1 0x00007fa209e48a01 in wait (this=<value optimized out>, mutex=0x40019f0, time=30000) at thread/qwaitcondition_unix.cpp:86 #2 QWaitCondition::wait (this=<value optimized out>, mutex=0x40019f0, time=30000) at thread/qwaitcondition_unix.cpp:160 #3 0x00007fa209e3dac1 in QThreadPoolThread::run (this=0x126e720) at concurrent/qthreadpool.cpp:140 #4 0x00007fa209e47ede in QThreadPrivate::start (arg=0x126e720) at thread/qthread_unix.cpp:285 #5 0x00007fa209bb78c4 in start_thread (arg=<value optimized out>) at pthread_create.c:297 #6 0x00007fa2089631dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 3 (Thread 0x7fa1edc11710 (LWP 2442)): #0 pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:211 #1 0x00007fa209e48a01 in wait (this=<value optimized out>, mutex=0x40c9a10, time=30000) at thread/qwaitcondition_unix.cpp:86 #2 QWaitCondition::wait (this=<value optimized out>, mutex=0x40c9a10, time=30000) at thread/qwaitcondition_unix.cpp:160 #3 0x00007fa209e3dac1 in QThreadPoolThread::run (this=0x40c9bc0) at concurrent/qthreadpool.cpp:140 #4 0x00007fa209e47ede in QThreadPrivate::start (arg=0x40c9bc0) at thread/qthread_unix.cpp:285 #5 0x00007fa209bb78c4 in start_thread (arg=<value optimized out>) at pthread_create.c:297 #6 0x00007fa2089631dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 2 (Thread 0x7fa1f0d5f710 (LWP 2447)): #0 pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:211 #1 0x00007fa209e48a01 in wait (this=<value optimized out>, mutex=0x40c9a10, time=30000) at thread/qwaitcondition_unix.cpp:86 #2 QWaitCondition::wait (this=<value optimized out>, mutex=0x40c9a10, time=30000) at thread/qwaitcondition_unix.cpp:160 #3 0x00007fa209e3dac1 in QThreadPoolThread::run (this=0x28f8c30) at concurrent/qthreadpool.cpp:140 #4 0x00007fa209e47ede in QThreadPrivate::start (arg=0x28f8c30) at thread/qthread_unix.cpp:285 #5 0x00007fa209bb78c4 in start_thread (arg=<value optimized out>) at pthread_create.c:297 #6 0x00007fa2089631dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 1 (Thread 0x7fa20b31b760 (LWP 2401)): [KCrash Handler] #6 isNull (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:550 #7 operator! (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:556 #8 KHTMLPart::loadObjectElement (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/khtml_part.cpp:4198 #9 0x00007fa1f41cd354 in DOM::HTMLObjectBaseElementImpl::computeContent (this=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/html/html_objectimpl.cpp:538 #10 0x00007fa1f414c801 in DOM::NodeBaseImpl::appendChild (this=0x18d9ef0, newChild=0x20a56e0, exceptioncode=@0x7ffffd1ae5b8) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom_nodeimpl.cpp:1795 #11 0x00007fa1f42f2eda in DOMNodeProtoFunc::callAsFunction (this=0x7fa1f0528980, exec=0x7ffffd1af010, thisObj=<value optimized out>, args=...) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/ecma/kjs_dom.cpp:642 #12 0x00007fa1f3a22ee1 in call (exec=0x7ffffd1af010, codeBlock=..., parentExec=0x7ffffd1afab0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/object.h:626 #13 KJS::Machine::runBlock (exec=0x7ffffd1af010, codeBlock=..., parentExec=0x7ffffd1afab0) at codes.def:1223 #14 0x00007fa1f3a017d1 in KJS::FunctionImp::callAsFunction (this=0x7fa20b1a43c0, exec=0x7ffffd1afab0, thisObj=<value optimized out>, args=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/function.cpp:172 #15 0x00007fa1f3a22ee1 in call (exec=0x7ffffd1afab0, codeBlock=..., parentExec=0x7ffffd1b0550) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/object.h:626 #16 KJS::Machine::runBlock (exec=0x7ffffd1afab0, codeBlock=..., parentExec=0x7ffffd1b0550) at codes.def:1223 #17 0x00007fa1f3a017d1 in KJS::FunctionImp::callAsFunction (this=0x7fa20b1a4440, exec=0x7ffffd1b0550, thisObj=<value optimized out>, args=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/function.cpp:172 #18 0x00007fa1f3a22ee1 in call (exec=0x7ffffd1b0550, codeBlock=..., parentExec=0x1976a70) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/object.h:626 #19 KJS::Machine::runBlock (exec=0x7ffffd1b0550, codeBlock=..., parentExec=0x1976a70) at codes.def:1223 #20 0x00007fa1f3a017d1 in KJS::FunctionImp::callAsFunction (this=0x7fa20b1a45c0, exec=0x1976a70, thisObj=<value optimized out>, args=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/function.cpp:172 #21 0x00007fa1f4355039 in call (this=0x2e75850, evt=...) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kjs/object.h:626 #22 KJS::JSEventListener::handleEvent (this=0x2e75850, evt=...) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/ecma/kjs_events.cpp:108 #23 0x00007fa1f4174e7e in DOM::EventTargetImpl::handleLocalEvents (this=<value optimized out>, evt=<value optimized out>, useCapture=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom2_eventsimpl.cpp:62 #24 0x00007fa1f414b9db in DOM::NodeImpl::dispatchGenericEvent (this=0x18f2cc8, evt=0x2362470) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom_nodeimpl.cpp:469 #25 0x00007fa1f414babe in DOM::NodeImpl::dispatchEvent (this=0x18f2cc8, evt=0x2362470, exceptioncode=@0x7ffffd1b088c, tempEvent=true) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom_nodeimpl.cpp:401 #26 0x00007fa1f414d339 in DOM::NodeImpl::dispatchHTMLEvent (this=0x18f2cc8, _id=36, canBubbleArg=<value optimized out>, cancelableArg=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/xml/dom_nodeimpl.cpp:520 #27 0x00007fa1f40c3f9b in KHTMLPart::slotFinishedParsing (this=0x40d8e00) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/khtml_part.cpp:2208 #28 0x00007fa1f40e2faf in KHTMLPart::qt_metacall (this=0x40d8e00, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7ffffd1b0a00) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/khtml/khtml_part.moc:281 #29 0x00007fa209f511bf in QMetaObject::activate (sender=0x18f2cb0, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272 #30 0x00007fa1f4131c40 in DOM::DocumentImpl::qt_metacall (this=0x18f2cb0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/khtml/dom_docimpl.moc:74 #31 0x00007fa1f41a7e08 in DOM::HTMLDocumentImpl::qt_metacall (this=0x7ffffd1add70, _c=QMetaObject::InvokeMetaMethod, _id=109, _a=0x2c5b0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/khtml/html_documentimpl.moc:69 #32 0x00007fa209f511bf in QMetaObject::activate (sender=0x1702ae0, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272 #33 0x00007fa1f4196447 in khtml::HTMLTokenizer::write (this=0x1702ae0, str=<value optimized out>, appendData=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/html/htmltokenizer.cpp:1893 #34 0x00007fa1f4192d10 in khtml::HTMLTokenizer::notifyFinished (this=0x1702ae0, finishedObj=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/html/htmltokenizer.cpp:2136 #35 0x00007fa1f42b3eaf in khtml::CachedScript::checkNotify (this=0x20a4e60) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/misc/loader.cpp:397 #36 0x00007fa1f42b7ddc in khtml::CachedScript::data (this=0x20a4e60, buffer=<value optimized out>, eof=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/misc/loader.cpp:389 #37 0x00007fa1f42b7927 in khtml::Loader::slotFinished (this=0x16cc060, job=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/khtml/misc/loader.cpp:1262 #38 0x00007fa1f42b7c33 in khtml::Loader::qt_metacall (this=0x16cc060, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7ffffd1b10b0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/khtml/loader.moc:141 #39 0x00007fa209f511bf in QMetaObject::activate (sender=0x2d5c700, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272 #40 0x00007fa20a3ac7b2 in KJob::result (this=0x7ffffd1add70, _t1=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/kdecore/kjob.moc:194 #41 0x00007fa20a3aca50 in KJob::emitResult (this=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kdecore/jobs/kjob.cpp:312 #42 0x00007fa2037bbf33 in KIO::SimpleJob::slotFinished (this=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/job.cpp:525 #43 0x00007fa2037bc842 in KIO::TransferJob::slotFinished (this=0x2d5c700) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/job.cpp:1118 #44 0x00007fa2037ba311 in KIO::TransferJob::qt_metacall (this=0x2d5c700, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7ffffd1b14f0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/kio/jobclasses.moc:367 #45 0x00007fa209f511bf in QMetaObject::activate (sender=0x166d9a0, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272 #46 0x00007fa20386dc9d in KIO::SlaveInterface::dispatch (this=0x166d9a0, _cmd=104, rawdata=...) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/slaveinterface.cpp:173 #47 0x00007fa20386acdd in KIO::SlaveInterface::dispatch (this=0x166d9a0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/slaveinterface.cpp:89 #48 0x00007fa20385e6f6 in KIO::Slave::gotInput (this=0x166d9a0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/slave.cpp:348 #49 0x00007fa20385e8dc in KIO::Slave::qt_metacall (this=0x166d9a0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7ffffd1b1980) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/kio/slave.moc:82 #50 0x00007fa209f511bf in QMetaObject::activate (sender=0x40f9990, m=<value optimized out>, local_signal_index=<value optimized out>, argv=0x2c5b0) at kernel/qobject.cpp:3272 #51 0x00007fa203788c47 in KIO::ConnectionPrivate::dequeue (this=0x18341a0) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kio/kio/connection.cpp:82 #52 0x00007fa203788d6d in KIO::Connection::qt_metacall (this=0x40f9990, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x24c6c20) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0_build/kio/connection.moc:79 #53 0x00007fa209f4b26e in QObject::event (this=0x40f9990, e=0x7ffffd1add70) at kernel/qobject.cpp:1211 #54 0x00007fa2090c54ac in QApplicationPrivate::notify_helper (this=0x12b81c0, receiver=0x40f9990, e=0x2f08280) at kernel/qapplication.cpp:4445 #55 0x00007fa2090ca8ed in QApplication::notify (this=0x7ffffd1b25e0, receiver=0x40f9990, e=0x2f08280) at kernel/qapplication.cpp:4324 #56 0x00007fa20ad13216 in KApplication::notify (this=0x7ffffd1b25e0, receiver=0x40f9990, event=0x2f08280) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kdeui/kernel/kapplication.cpp:311 #57 0x00007fa209f395db in QCoreApplication::notifyInternal (this=0x7ffffd1b25e0, receiver=0x40f9990, event=0x2f08280) at kernel/qcoreapplication.cpp:732 #58 0x00007fa209f3c561 in sendEvent (receiver=0x0, event_type=<value optimized out>, data=0x1223b30) at kernel/qcoreapplication.h:215 #59 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=<value optimized out>, data=0x1223b30) at kernel/qcoreapplication.cpp:1373 #60 0x00007fa209f65a83 in sendPostedEvents (s=0x12bad20) at kernel/qcoreapplication.h:220 #61 postEventSourceDispatch (s=0x12bad20) at kernel/qeventdispatcher_glib.cpp:277 #62 0x00007fa2057833d1 in g_main_dispatch (context=0x12bac40) at gmain.c:2149 #63 g_main_context_dispatch (context=0x12bac40) at gmain.c:2702 #64 0x00007fa205787308 in g_main_context_iterate (context=0x12bac40, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2780 #65 0x00007fa2057874bc in g_main_context_iteration (context=0x12bac40, may_block=1) at gmain.c:2843 #66 0x00007fa209f655c3 in QEventDispatcherGlib::processEvents (this=0x12b8180, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:415 #67 0x00007fa209176d7e in QGuiEventDispatcherGlib::processEvents (this=0x7ffffd1add70, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:204 #68 0x00007fa209f38332 in QEventLoop::processEvents (this=<value optimized out>, flags=) at kernel/qeventloop.cpp:149 #69 0x00007fa209f38714 in QEventLoop::exec (this=0x7ffffd1b23d0, flags=) at kernel/qeventloop.cpp:201 #70 0x00007fa209f3c78b in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1009 #71 0x00007fa1fb3f23c2 in kdemain (argc=<value optimized out>, argv=<value optimized out>) at /var/tmp/portage/kde-base/konqueror-4.6.0/work/konqueror-4.6.0/konqueror/src/konqmain.cpp:219 #72 0x00000000004080ea in launch (argc=2, _name=<value optimized out>, args=<value optimized out>, cwd=<value optimized out>, envc=-48549440, envs=<value optimized out>, reset_env=false, tty=0x0, avoid_loops=false, startup_id_str=0x1276984 "i7-920;1299984916;334502;13015_TIME526562887") at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kinit/kinit.cpp:730 #73 0x0000000000408cf0 in handle_launcher_request (sock=8, who=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kinit/kinit.cpp:1222 #74 0x000000000040921b in handle_requests (waitForPid=19305288) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kinit/kinit.cpp:1415 #75 0x0000000000409df1 in main (argc=4, argv=<value optimized out>, envp=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.6.0/work/kdelibs-4.6.0/kinit/kinit.cpp:1903 Possible duplicates by query: bug 243739. Reported using DrKonqi
Created attachment 60318 [details] New crash information added by DrKonqi konqueror (4.6.3 (4.6.3)) on KDE Platform 4.6.3 (4.6.3) using Qt 4.7.3 Here's the same crash, with a more specific url. $ konqueror 'http://feedproxy.google.com/~r/Phoronix/~3/NZxxlx8frUE/vr.php' konqueror(23789)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "libkhtmlpart.so" konqueror(23789)/kdeui (kdelibs): Attempt to use QAction "kwrite" with KXMLGUIFactory! konqueror(23789)/kdeui (kdelibs): Attempt to use QAction "mozilla-firefox-3" with KXMLGUIFactory! konqueror(23789)/kdeui (kdelibs): Attempt to use QAction "" with KXMLGUIFactory! QPainter::begin: Widget painting can only begin as a result of a paintEvent QPainter::translate: Painter not active QPainter::setClipRect: Painter not active konqueror(23789)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "libnsplugin.so" Connecting to deprecated signal QDBusConnectionInterface::serviceOwnerChanged(QString,QString,QString) nspluginviewer(23799)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "/usr/lib/firefox/plugins/libflashplayer.so" nspluginviewer(23799)/nspluginviewer (plugin): Can't create plugin class konqueror(23789)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "libnsplugin.so" nspluginviewer(23799)/kdecore (KLibrary) findLibraryInternal: plugins should not have a 'lib' prefix: "/usr/lib/firefox/plugins/libflashplayer.so" nspluginviewer(23799)/nspluginviewer (plugin): Can't create plugin class KCrash: Application 'konqueror' crashing... KCrash: Attempting to start /usr/lib64/kde4/libexec/drkonqi from kdeinit sock_file=/home/work/.kde4/socket-moltowork/kdeinit4__0 -- Backtrace (Reduced): #6 isNull (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:558 #7 operator! (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:564 #8 KHTMLPart::loadObjectElement (this=<value optimized out>, frame=<value optimized out>, url=<value optimized out>, serviceType=<value optimized out>, params=<value optimized out>) at /home/portagetmp/portage/kde-base/kdelibs-4.6.3-r1/work/kdelibs-4.6.3/khtml/khtml_part.cpp:4201 #9 0x00007feadb6ee654 in DOM::HTMLObjectBaseElementImpl::computeContent (this=<value optimized out>) at /home/portagetmp/portage/kde-base/kdelibs-4.6.3-r1/work/kdelibs-4.6.3/khtml/html/html_objectimpl.cpp:538 #10 0x00007feadb65aef1 in DOM::NodeBaseImpl::appendChild (this=0x7feaf5639930, newChild=0x7feaf5f79960, exceptioncode=@0x7fff4a8cd198) at /home/portagetmp/portage/kde-base/kdelibs-4.6.3-r1/work/kdelibs-4.6.3/khtml/xml/dom_nodeimpl.cpp:1795
This is very hard to reproduce inside the valgrind, here is the vg warnings from current master (kdelibs 06ea57b3a0f193185f185d4c652d1bd4d6d246f5) ==715== Invalid read of size 4 ==715== at 0xC098B10: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (khtml_part.cpp:4194) ==715== by 0xC1A381B: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:538 ==715== by 0xC1A0DC4: DOM::HTMLPartContainerElementImpl::computeContentIfNeeded() (html_objectimpl.cpp:89) ==715== by 0xC1A0D8A: DOM::HTMLPartContainerElementImpl::close() (html_objectimpl.cpp:80) ==715== by 0xC11F577: DOM::NodeBaseImpl::appendChild(DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1795) ==715== by 0xC2FCA30: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:642) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC359044: KJS::JSEventListener::handleEvent(DOM::Event&) (kjs_events.cpp:108) ==715== by 0xC143898: DOM::EventTargetImpl::handleLocalEvents(DOM::EventImpl*, bool) (dom2_eventsimpl.cpp:62) ==715== by 0xC11B619: DOM::NodeImpl::dispatchGenericEvent(DOM::EventImpl*, int&) (dom_nodeimpl.cpp:469) ==715== by 0xC11B273: DOM::NodeImpl::dispatchEvent(DOM::EventImpl*, int&, bool) (dom_nodeimpl.cpp:401) ==715== by 0xC11B939: DOM::NodeImpl::dispatchHTMLEvent(int, bool, bool) (dom_nodeimpl.cpp:520) ==715== by 0xC08D688: KHTMLPart::slotFinishedParsing() (khtml_part.cpp:2206) ==715== by 0xC0ABFDC: KHTMLPart::qt_metacall(QMetaObject::Call, int, void**) (khtml_part.moc:281) ==715== by 0x50D407C: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237) ==715== by 0x50E34CB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278) ==715== by 0xC112D00: DOM::DocumentImpl::finishedParsing() (dom_docimpl.moc:85) ==715== by 0xC112CBB: DOM::DocumentImpl::qt_metacall(QMetaObject::Call, int, void**) (dom_docimpl.moc:74) ==715== by 0xC17F001: DOM::HTMLDocumentImpl::qt_metacall(QMetaObject::Call, int, void**) (html_documentimpl.moc:69) ==715== by 0x50D407C: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237) ==715== by 0x50E34CB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278) ==715== by 0xC13F5B4: khtml::Tokenizer::finishedParsing() (xml_tokenizer.moc:83) ==715== by 0xC168E25: khtml::HTMLTokenizer::end() (htmltokenizer.cpp:1932) ==715== by 0xC168C0E: khtml::HTMLTokenizer::write(khtml::TokenizerString const&, bool) (htmltokenizer.cpp:1894) ==715== by 0xC169C82: khtml::HTMLTokenizer::notifyFinished(khtml::CachedObject*) (htmltokenizer.cpp:2137) ==715== by 0xC2B6E23: khtml::CachedScript::checkNotify() (loader.cpp:397) ==715== by 0xC2B6D5C: khtml::CachedScript::data(QBuffer&, bool) (loader.cpp:389) ==715== by 0xC2BACAC: khtml::Loader::slotFinished(KJob*) (loader.cpp:1262) ==715== by 0xC2BD34B: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:141) ==715== by 0x50D407C: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237) ==715== by 0x50E34CB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278) ==715== by 0x4E0A00D: KJob::result(KJob*) (kjob.moc:194) ==715== by 0x4E0961C: KJob::emitResult() (kjob.cpp:312) ==715== by 0x435883C: KIO::SimpleJob::slotFinished() (job.cpp:494) ==715== by 0x435B563: KIO::TransferJob::slotFinished() (job.cpp:1081) ==715== by 0x4362C55: KIO::TransferJob::qt_metacall(QMetaObject::Call, int, void**) (jobclasses.moc:369) ==715== by 0x50D407C: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237) ==715== by 0x50E34CB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278) ==715== by 0x4408FD0: KIO::SlaveInterface::finished() (slaveinterface.moc:171) ==715== by 0x440659B: KIO::SlaveInterface::dispatch(int, QByteArray const&) (slaveinterface.cpp:172) ==715== by 0x440623D: KIO::SlaveInterface::dispatch() (slaveinterface.cpp:88) ==715== Address 0xa8cb244 is 28 bytes inside a block of size 32 free'd ==715== at 0x402920B: realloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==715== by 0x4FCA602: qRealloc(void*, unsigned int) (qmalloc.cpp:65) ==715== by 0x4FF17F6: QListData::realloc(int) (qlist.cpp:221) ==715== by 0x4FF18BB: QListData::append(int) (qlist.cpp:243) ==715== by 0x4FF1942: QListData::append() (qlist.cpp:253) ==715== by 0x4FF1BDF: QListData::insert(int) (qlist.cpp:305) ==715== by 0xC0B4C42: QList<khtml::ChildFrame*>::insert(QList<khtml::ChildFrame*>::iterator, khtml::ChildFrame* const&) (qlist.h:441) ==715== by 0xC098A1F: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (khtml_part.cpp:4187) ==715== by 0xC1A381B: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:538) ==715== by 0xC1A0DC4: DOM::HTMLPartContainerElementImpl::computeContentIfNeeded() (html_objectimpl.cpp:89) ==715== by 0xC1A0D8A: DOM::HTMLPartContainerElementImpl::close() (html_objectimpl.cpp:80) ==715== by 0xC11EF5F: DOM::NodeBaseImpl::replaceChild(DOM::NodeImpl*, DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1648) ==715== by 0xC2FCBF3: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:652) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC84A6E1: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC88EB6B: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1223) ==715== by 0xC862A61: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==715== by 0xC33DAA0: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:626) ==715== by 0xC359044: KJS::JSEventListener::handleEvent(DOM::Event&) (kjs_events.cpp:108) ==715== by 0xC143898: DOM::EventTargetImpl::handleLocalEvents(DOM::EventImpl*, bool) (dom2_eventsimpl.cpp:62) ==715== by 0xC11B619: DOM::NodeImpl::dispatchGenericEvent(DOM::EventImpl*, int&) (dom_nodeimpl.cpp:469) ==715== by 0xC11BA6F: DOM::NodeImpl::dispatchWindowEvent(DOM::EventImpl*) (dom_nodeimpl.cpp:542)
Possible dupe: https://bugs.kde.org/show_bug.cgi?id=240684 Do you have plugins enabled or not?
I have kde-base/nsplugins installed, but I don't install Flash, and Java is disabled by default. So, the situation is likely similar to bug 240684.
Using the testcase from bug #240684 I get the same crash (same backtrace) as I pasted in this bug. Disabling plugins fixes the crash. So yes, this looks like a dupe.
*** Bug 280874 has been marked as a duplicate of this bug. ***
*** Bug 281233 has been marked as a duplicate of this bug. ***
*** Bug 284997 has been marked as a duplicate of this bug. ***
*** Bug 288625 has been marked as a duplicate of this bug. ***
*** Bug 296142 has been marked as a duplicate of this bug. ***
Created attachment 70283 [details] New crash information added by DrKonqi kontact (4.8.0) on KDE Platform 4.8.1 (4.8.1) using Qt 4.7.4 - What I was doing when the application crashed: Reading a Phoronix article in Akregator, just turned to page 2. -- Backtrace (Reduced): #6 isNull (this=0x1000000c1) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:568 #7 operator! (this=0x1000000c1) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:574 #8 KHTMLPart::loadObjectElement (this=<optimized out>, frame=<optimized out>, url=..., serviceType=..., params=...) at /var/tmp/portage/kde-base/kdelibs-4.8.1-r2/work/kdelibs-4.8.1/khtml/khtml_part.cpp:4202 #9 0x00007f231309b56c in DOM::HTMLObjectBaseElementImpl::computeContent (this=0x7be44e0) at /var/tmp/portage/kde-base/kdelibs-4.8.1-r2/work/kdelibs-4.8.1/khtml/html/html_objectimpl.cpp:538 #10 0x00007f231301d061 in DOM::NodeBaseImpl::appendChild (this=0x73ff1c0, newChild=0x7be44f0, exceptioncode=@0x7fffe301b008) at /var/tmp/portage/kde-base/kdelibs-4.8.1-r2/work/kdelibs-4.8.1/khtml/xml/dom_nodeimpl.cpp:1801
Note: the page that caused the crash in the previous comment was http://www.phoronix.com/scan.php?page=article&item=ubuntu_1204_kvmhist&num=2 I didn't have the URL handy at that time.
Created attachment 70291 [details] New crash information added by DrKonqi kontact (4.8.2) on KDE Platform 4.8.2 (4.8.2) using Qt 4.8.1 - What I was doing when the application crashed: opening a phoronix article with akregator -- Backtrace (Reduced): #7 isNull (this=<optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:580 #8 operator! (this=<optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:586 #9 KHTMLPart::loadObjectElement (this=0xcf18b90, frame=0xdb1cce0, url=..., serviceType=..., params=...) at ../../khtml/khtml_part.cpp:4202 #10 0xab2b8c5c in DOM::HTMLObjectBaseElementImpl::computeContent (this=0xdb1cce0) at ../../khtml/html/html_objectimpl.cpp:536 #11 0xab2b4779 in computeContentIfNeeded (this=0xdb1cce0) at ../../khtml/html/html_objectimpl.cpp:89
*** Bug 295572 has been marked as a duplicate of this bug. ***
Created attachment 71618 [details] New crash information added by DrKonqi akregator (4.8.3) on KDE Platform 4.8.3 (4.8.3) using Qt 4.8.1 - What I was doing when the application crashed: Opening tabs in phoronix in the background - Custom settings of the application: I've recently set Left Mouse click on "Open Background tab" instead of "Open tab". Maybe this is not related with the bug -- Backtrace (Reduced): #6 isNull (this=0x1000000c1) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:580 #7 operator! (this=0x1000000c1) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:586 #8 KHTMLPart::loadObjectElement (this=0x10fe230, frame=0x5059b30, url=..., serviceType=..., params=...) at ../../khtml/khtml_part.cpp:4202 #9 0x00007f41ad90018d in DOM::HTMLObjectBaseElementImpl::computeContent (this=0x5059b30) at ../../khtml/html/html_objectimpl.cpp:536 #10 0x00007f41ad882e9f in DOM::NodeBaseImpl::appendChild (this=0x6df8150, newChild=0x5059b40, exceptioncode=@0x7fffad2bcb18: 0) at ../../khtml/xml/dom_nodeimpl.cpp:1801
*** Bug 302772 has been marked as a duplicate of this bug. ***
Created attachment 72518 [details] New crash information added by DrKonqi akregator (4.8.4) on KDE Platform 4.8.4 (4.8.4) using Qt 4.8.2 - What I was doing when the application crashed: I opened a Phoronix article from Akregator. The article started to load with a window that said "close advertisement". Before I could close the ad, Akregator segfaulted. - Unusual behavior I noticed: After I restarted Akregator, I noticed that the article did not show in the list of unread articles--perhaps this was refreshed. -- Backtrace (Reduced): #6 operator== (value=0, this=0x9c) at /usr/include/QtCore/qbasicatomic.h:70 #7 isNull (this=0x11ed2350) at /usr/include/QtCore/qsharedpointer_impl.h:580 #8 operator! (this=0x11ed2350) at /usr/include/QtCore/qsharedpointer_impl.h:586 #9 KHTMLPart::loadObjectElement (this=0x9716750, frame=0x111ddc60, url=..., serviceType=..., params=...) at /usr/src/debug/kdelibs-4.8.4/khtml/khtml_part.cpp:4202 #10 0x0000003914f07c4d in DOM::HTMLObjectBaseElementImpl::computeContent (this=0x111ddc60) at /usr/src/debug/kdelibs-4.8.4/khtml/html/html_objectimpl.cpp:536
Created attachment 72698 [details] Valgrind log. Find attached a valgrind log, as Tommi said valgrind runs didn't make akregator(in my case) crash. Akregator 1.6.6 on KDE 4.8.3. Qt 4.8.2. This is what I think it's the relevant part: ==13604== Invalid read of size 8 ==13604== at 0x21C19055: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (khtml_part.cpp:4202) ==13604== by 0x21D00D5C: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:536) ==13604== by 0x21C8690E: DOM::NodeBaseImpl::appendChild(DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1801) ==13604== by 0x21E15C02: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:642) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x21E71769: KJS::JSEventListener::handleEvent(DOM::Event&) (object.h:626) ==13604== by 0x21CA98FC: DOM::EventTargetImpl::handleLocalEvents(DOM::EventImpl*, bool) (dom2_eventsimpl.cpp:62) ==13604== Address 0x4e86f360 is 32 bytes inside a block of size 40 free'd ==13604== at 0x4C28CCE: realloc (vg_replace_malloc.c:632) ==13604== by 0x72E4735: QListData::realloc(int) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.2) ==13604== by 0x72E47E6: QListData::append(int) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.2) ==13604== by 0x21C18F39: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (qlist.h:454) ==13604== by 0x21D00D5C: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:536) ==13604== by 0x21C86D77: DOM::NodeBaseImpl::replaceChild(DOM::NodeImpl*, DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1654) ==13604== by 0x21E15AE3: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:652) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== ==13604== Invalid read of size 8 ==13604== at 0x21C190A6: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (khtml_part.cpp:4203) ==13604== by 0x21D00D5C: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:536) ==13604== by 0x21C8690E: DOM::NodeBaseImpl::appendChild(DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1801) ==13604== by 0x21E15C02: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:642) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x21E71769: KJS::JSEventListener::handleEvent(DOM::Event&) (object.h:626) ==13604== by 0x21CA98FC: DOM::EventTargetImpl::handleLocalEvents(DOM::EventImpl*, bool) (dom2_eventsimpl.cpp:62) ==13604== Address 0x4e86f360 is 32 bytes inside a block of size 40 free'd ==13604== at 0x4C28CCE: realloc (vg_replace_malloc.c:632) ==13604== by 0x72E4735: QListData::realloc(int) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.2) ==13604== by 0x72E47E6: QListData::append(int) (in /usr/lib/x86_64-linux-gnu/libQtCore.so.4.8.2) ==13604== by 0x21C18F39: KHTMLPart::loadObjectElement(DOM::HTMLPartContainerElementImpl*, QString const&, QString const&, QStringList const&) (qlist.h:454) ==13604== by 0x21D00D5C: DOM::HTMLObjectBaseElementImpl::computeContent() (html_objectimpl.cpp:536) ==13604== by 0x21C86D77: DOM::NodeBaseImpl::replaceChild(DOM::NodeImpl*, DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1654) ==13604== by 0x21E15AE3: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:652) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626) ==13604== by 0x225FE387: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==13604== by 0x22619B7A: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0ul> const&, KJS::ExecState*) (object.h:626)
*** Bug 306137 has been marked as a duplicate of this bug. ***
*** Bug 309524 has been marked as a duplicate of this bug. ***
*** Bug 315440 has been marked as a duplicate of this bug. ***
Created attachment 78705 [details] New crash information added by DrKonqi kontact (4.10.2) on KDE Platform 4.10.2 "release 553" using Qt 4.8.4 The crash happened when I tried to open a kde-apps.org application page in Akregator. Opening the page in Konqueror now doesn't cause the crash. -- Backtrace (Reduced): #6 isNull (this=0x1000000c1) at /usr/include/QtCore/qsharedpointer_impl.h:580 #7 operator! (this=0x1000000c1) at /usr/include/QtCore/qsharedpointer_impl.h:586 #8 KHTMLPart::loadObjectElement (this=0x2fbaa00, frame=0x8b4f100, url=..., serviceType=..., params=...) at /usr/src/debug/kdelibs-4.10.2/khtml/khtml_part.cpp:4216 #9 0x00007f921aae759d in DOM::HTMLObjectBaseElementImpl::computeContent (this=0x8b4f100) at /usr/src/debug/kdelibs-4.10.2/khtml/html/html_objectimpl.cpp:536 #10 0x00007f921aa6bfaf in DOM::NodeBaseImpl::appendChild (this=0x6261fb0, newChild=0x8b4f110, exceptioncode=@0x7fff731967f8: 0) at /usr/src/debug/kdelibs-4.10.2/khtml/xml/dom_nodeimpl.cpp:1801
This crash is happening quite often.
*** Bug 243739 has been marked as a duplicate of this bug. ***
*** Bug 318120 has been marked as a duplicate of this bug. ***
*** Bug 235179 has been marked as a duplicate of this bug. ***
Created attachment 88028 [details] KDE bug assistant Surfing with Akregator. Does this have to do with an ATI/mesa bug and the Phoronix ad system during changes to alpha in the browser?
Thank you for the crash reports. As it has been a while since this was reported, can you please test and confirm if this issue is still occurring or if this bug report can be marked as resolved. I have set the bug status to "needsinfo" pending your response, please change back to "reported" or "resolved/worksforme" when you respond, thank you.
It's been months since I last used KDE and even longer since I last used konqueror. I am not able to test. > 14 grudnia 2020 02:38 Justin Zobel <bugzilla_noreply@kde.org> napisał(a): > > > https://bugs.kde.org/show_bug.cgi?id=268341 > > Justin Zobel <justin.zobel@gmail.com> changed: > > What |Removed |Added > ---------------------------------------------------------------------------- > CC| |justin.zobel@gmail.com > Resolution|--- |WAITINGFORINFO > Status|CONFIRMED |NEEDSINFO > > --- Comment #28 from Justin Zobel <justin.zobel@gmail.com> --- > Thank you for the crash reports. > > As it has been a while since this was reported, can you please test and confirm > if this issue is still occurring or if this bug report can be marked as > resolved. > > I have set the bug status to "needsinfo" pending your response, please change > back to "reported" or "resolved/worksforme" when you respond, thank you. > > -- > You are receiving this mail because: > You are on the CC list for the bug.
I just tried to trigger the same bug I reported 8 years ago from Akregator. Using Akregator 5.13.2 tonight,I had no problem opening a Phoronix article. Works for me, Donald
I'm able to browse Phoronix w/Konqueror 20.08.3 on Fedora 32.
(In reply to Justin Zobel from comment #28) > Thank you for the crash reports. > > As it has been a while since this was reported, can you please test and > confirm if this issue is still occurring or if this bug report can be marked > as resolved. > > I have set the bug status to "needsinfo" pending your response, please > change back to "reported" or "resolved/worksforme" when you respond, thank > you. Sorry, I'm not using konqueror for a few years (>5)
Several users have confirmed now working, setting to resolved. If any other users are still experiencing this issue feel free to reopen.