Application: kmail (4.9.1)
KDE Platform Version: 4.9.1 (Compiled from sources)
Qt Version: 4.8.2
Operating System: Linux 3.5.1-gentoo x86_64
Distribution: "Gentoo Base System release 2.1"

-- Information about the crash:
- What I was doing when the application crashed:
* add a spreadsheet shape to an empty document
* double click to activate it
* double click a cell to start the editor
* close words with the opened Editor.

The root is, that CellEditor sets d->selection to cellEditor->selection() upon construction, but references it in its destructor AFTER the cellTool (in this case a TableTool) got destroyed.

-- Backtrace:
Application: KMail (kmail), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f551bcc6780 (LWP 13108))]

Thread 3 (Thread 0x7f54ff3f9700 (LWP 13296)):
#0  0x00007f5516dafdcc in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f550d20e34c in WTF::TCMalloc_PageHeap::scavengerThread() () from /usr/lib64/qt4/libQtWebKit.so.4
#2  0x00007f550d20e479 in WTF::TCMalloc_PageHeap::runScavengerThread(void*) () from /usr/lib64/qt4/libQtWebKit.so.4
#3  0x00007f5516dabec6 in start_thread () from /lib64/libpthread.so.0
#4  0x00007f5518fc39bd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7f54fcb99700 (LWP 13956)):
[KCrash Handler]
#6  Nepomuk::ResourceManager::mainModel (this=0x512c676e69727453) at /var/tmp/paludis/kde-base-kdelibs-4.9.1/work/kdelibs-4.9.1/nepomuk/core/resourcemanager.cpp:493
#7  0x00007f5511d8ea6d in Nepomuk::ResourceData::load (this=0x7f54b40057d0) at /var/tmp/paludis/kde-base-kdelibs-4.9.1/work/kdelibs-4.9.1/nepomuk/core/resourcedata.cpp:458
#8  0x00007f5511d8f219 in Nepomuk::ResourceData::property (this=0x7f54b40057d0, uri=...) at /var/tmp/paludis/kde-base-kdelibs-4.9.1/work/kdelibs-4.9.1/nepomuk/core/resourcedata.cpp:272
#9  0x00007f5511da4473 in Nepomuk::Resource::property (this=0x7f54fcb98d00, uri=...) at /var/tmp/paludis/kde-base-kdelibs-4.9.1/work/kdelibs-4.9.1/nepomuk/core/resource.cpp:303
#10 0x00007f55151e80aa in MessageCore::NepomukResourceRetrieverRunnable::run (this=0x550d580) at /var/tmp/paludis/kde-base-kdepim-common-libs-4.9.1/work/kdepim-common-libs-4.9.1/messagecore/asyncnepomukresourceretriever.cpp:48
#11 0x00007f5519811eca in QThreadPoolThread::run (this=0x400a760) at concurrent/qthreadpool.cpp:107
#12 0x00007f551981dc3b in QThreadPrivate::start (arg=0x400a760) at thread/qthread_unix.cpp:307
#13 0x00007f5516dabec6 in start_thread () from /lib64/libpthread.so.0
#14 0x00007f5518fc39bd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7f551bcc6780 (LWP 13108)):
#0  0x00007f5516dafdcc in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f551981e13b in wait (time=18446744073709551615, this=0x3ff6390) at thread/qwaitcondition_unix.cpp:86
#2  QWaitCondition::wait (this=<optimized out>, mutex=0x4009ca8, time=18446744073709551615) at thread/qwaitcondition_unix.cpp:158
#3  0x00007f5519810f4e in QThreadPoolPrivate::waitForDone (this=0x4009c20, msecs=-1) at concurrent/qthreadpool.cpp:298
#4  0x00007f5519811874 in QThreadPool::~QThreadPool (this=0x400aae8, __in_chrg=<optimized out>) at concurrent/qthreadpool.cpp:440
#5  0x00007f55151e6c34 in ~AsyncNepomukResourceRetrieverPrivate (this=0x400aae0, __in_chrg=<optimized out>) at /var/tmp/paludis/kde-base-kdepim-common-libs-4.9.1/work/kdepim-common-libs-4.9.1/messagecore/asyncnepomukresourceretriever.cpp:59
#6  MessageCore::AsyncNepomukResourceRetriever::~AsyncNepomukResourceRetriever (this=0x3ff48b0, __in_chrg=<optimized out>) at /var/tmp/paludis/kde-base-kdepim-common-libs-4.9.1/work/kdepim-common-libs-4.9.1/messagecore/asyncnepomukresourceretriever.cpp:124
#7  0x00007f5514c311c9 in ~CallbackNepomukResourceRetriever (this=0x3ff48b0, __in_chrg=<optimized out>) at /var/tmp/paludis/kde-base-kdepim-common-libs-4.9.1/work/kdepim-common-libs-4.9.1/messagelist/core/callbacknepomukresourceretriever.h:32
#8  MessageList::CallbackNepomukResourceRetriever::~CallbackNepomukResourceRetriever (this=0x3ff48b0, __in_chrg=<optimized out>) at /var/tmp/paludis/kde-base-kdepim-common-libs-4.9.1/work/kdepim-common-libs-4.9.1/messagelist/core/callbacknepomukresourceretriever.h:32
#9  0x00007f5518f15639 in __run_exit_handlers (status=0, listp=0x7f551927b5c8 <__exit_funcs>, run_list_atexit=true) at exit.c:78
#10 0x00007f5518f156c5 in __GI_exit (status=<optimized out>) at exit.c:100
#11 0x00007f5518eff614 in __libc_start_main (main=0x402620 <main(int, char**)>, argc=3, ubp_av=0x7fffc84cb048, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffc84cb038) at libc-start.c:258
#12 0x0000000000403515 in _start () at ../sysdeps/x86_64/elf/start.S:113

Reported using DrKonqi