Application: konqueror (4.8.5 (4.8.5)) KDE Platform Version: 4.8.5 (4.8.5) Qt Version: 4.8.2 Operating System: Linux 3.5.3-1.fc17.x86_64 x86_64 Distribution: "Fedora release 17 (Beefy Miracle)" -- Information about the crash: - What I was doing when the application crashed: I've just logged into Volksbank(.cz) account and it crashed. I was browsing the site with KHTML but file downloads didn't work due to some stupid code on the site, so I wanted to try with WebKit. After switching to WebKit, I got the login prompt again. (Note that the account credentials stored in kdewallet weren't prefilled, well, another bug?) After logging in, I got the security question whether I want to run the java application. I've chosen to run it and Konqueror crashed shortly after that. Note that I got a lot of duplicates suggested - but all of them seem to concern the Flash plugin, but this is NOT the case here. -- Backtrace: Application: Konqueror (konqueror), signal: Segmentation fault Using host libthread_db library "/lib64/libthread_db.so.1". 82 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) [Current thread is 1 (Thread 0x7f3bff214880 (LWP 1763))] Thread 10 (Thread 0x7f3bebeff700 (LWP 2509)): #0 0x00000038468e8bcf in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87 #1 0x0000003849847964 in g_main_context_poll (n_fds=1, fds=0x7f3be4002960, timeout=-1, context=0x7f3be40008c0, priority=<optimized out>) at gmain.c:3440 #2 g_main_context_iterate (context=context@entry=0x7f3be40008c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3141 #3 0x0000003849847a84 in g_main_context_iteration (context=0x7f3be40008c0, may_block=1) at gmain.c:3207 #4 0x00000034671a44e6 in QEventDispatcherGlib::processEvents (this=0x7f3be4002940, flags=...) at kernel/qeventdispatcher_glib.cpp:424 #5 0x000000346717513f in QEventLoop::processEvents (this=this@entry=0x7f3bebefecf0, flags=...) at kernel/qeventloop.cpp:149 #6 0x00000034671753c8 in QEventLoop::exec (this=0x7f3bebefecf0, flags=...) at kernel/qeventloop.cpp:204 #7 0x0000003467078650 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501 #8 0x000000346cba2d0e in KIO::NameLookUpThread::run (this=0x41cfb30) at /usr/src/debug/kdelibs-4.8.5/kio/kio/hostinfo.cpp:226 #9 0x000000346707b5eb in QThreadPrivate::start (arg=0x41cfb30) at thread/qthread_unix.cpp:307 #10 0x0000003847407d14 in start_thread (arg=0x7f3bebeff700) at pthread_create.c:309 #11 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 9 (Thread 0x7f3beade3700 (LWP 2780)): #0 0x00000038468ea9e3 in select () at ../sysdeps/unix/syscall-template.S:82 #1 0x0000003467155182 in QProcessManager::run (this=0x34674cc3c0) at io/qprocess_unix.cpp:245 #2 0x000000346707b5eb in QThreadPrivate::start (arg=0x34674cc3c0) at thread/qthread_unix.cpp:307 #3 0x0000003847407d14 in start_thread (arg=0x7f3beade3700) at pthread_create.c:309 #4 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 8 (Thread 0x7f3bf109a700 (LWP 15240)): #0 0x00000038468e8bcf in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87 #1 0x0000003849847964 in g_main_context_poll (n_fds=2, fds=0x7f3bec007360, timeout=-1, context=0x7f3bec006020, priority=<optimized out>) at gmain.c:3440 #2 g_main_context_iterate (context=context@entry=0x7f3bec006020, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3141 #3 0x0000003849847a84 in g_main_context_iteration (context=0x7f3bec006020, may_block=1) at gmain.c:3207 #4 0x00000034671a4506 in QEventDispatcherGlib::processEvents (this=0x7f3bec006cf0, flags=...) at kernel/qeventdispatcher_glib.cpp:426 #5 0x000000346717513f in QEventLoop::processEvents (this=this@entry=0x7f3bf1099cf0, flags=...) at kernel/qeventloop.cpp:149 #6 0x00000034671753c8 in QEventLoop::exec (this=0x7f3bf1099cf0, flags=...) at kernel/qeventloop.cpp:204 #7 0x0000003467078650 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501 #8 0x0000003467155b4f in QInotifyFileSystemWatcherEngine::run (this=0x1534adf0) at io/qfilesystemwatcher_inotify.cpp:248 #9 0x000000346707b5eb in QThreadPrivate::start (arg=0x1534adf0) at thread/qthread_unix.cpp:307 #10 0x0000003847407d14 in start_thread (arg=0x7f3bf109a700) at pthread_create.c:309 #11 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 7 (Thread 0x7f3bea5e2700 (LWP 15327)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166 #1 0x000000347621677d in WTF::TCMalloc_PageHeap::scavengerThread (this=0x3476c00980) at wtf/FastMalloc.cpp:2495 #2 0x0000003476216889 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at wtf/FastMalloc.cpp:1618 #3 0x0000003847407d14 in start_thread (arg=0x7f3bea5e2700) at pthread_create.c:309 #4 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 6 (Thread 0x7f3be9de1700 (LWP 15328)): #0 0x00000038468e8bcf in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87 #1 0x0000003849847964 in g_main_context_poll (n_fds=1, fds=0x7f3bd4002a50, timeout=7457, context=0x7f3bd4008540, priority=<optimized out>) at gmain.c:3440 #2 g_main_context_iterate (context=context@entry=0x7f3bd4008540, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3141 #3 0x0000003849847a84 in g_main_context_iteration (context=0x7f3bd4008540, may_block=1) at gmain.c:3207 #4 0x00000034671a4506 in QEventDispatcherGlib::processEvents (this=0x7f3bd4002ae0, flags=...) at kernel/qeventdispatcher_glib.cpp:426 #5 0x000000346717513f in QEventLoop::processEvents (this=this@entry=0x7f3be9de0d20, flags=...) at kernel/qeventloop.cpp:149 #6 0x00000034671753c8 in QEventLoop::exec (this=0x7f3be9de0d20, flags=...) at kernel/qeventloop.cpp:204 #7 0x0000003467078650 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501 #8 0x000000346707b5eb in QThreadPrivate::start (arg=0xd778130) at thread/qthread_unix.cpp:307 #9 0x0000003847407d14 in start_thread (arg=0x7f3be9de1700) at pthread_create.c:309 #10 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 5 (Thread 0x7f3b8db3f700 (LWP 15624)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166 #1 0x00007f3b89745603 in queue_processor (data=0xa921430) at /usr/src/debug/icedtea-web-1.2/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:727 #2 0x0000003847407d14 in start_thread (arg=0x7f3b8db3f700) at pthread_create.c:309 #3 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 4 (Thread 0x7f3b89723700 (LWP 15625)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166 #1 0x00007f3b89745603 in queue_processor (data=0xa921430) at /usr/src/debug/icedtea-web-1.2/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:727 #2 0x0000003847407d14 in start_thread (arg=0x7f3b89723700) at pthread_create.c:309 #3 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 3 (Thread 0x7f3b88f22700 (LWP 15626)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:166 #1 0x00007f3b89745603 in queue_processor (data=0xa921430) at /usr/src/debug/icedtea-web-1.2/plugin/icedteanp/IcedTeaPluginRequestProcessor.cc:727 #2 0x0000003847407d14 in start_thread (arg=0x7f3b88f22700) at pthread_create.c:309 #3 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 2 (Thread 0x7f3b85b7c700 (LWP 15641)): #0 0x00000038468e8bcf in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87 #1 0x0000003849847964 in g_main_context_poll (n_fds=1, fds=0x7f3bd8000980, timeout=-1, context=0x7506370, priority=<optimized out>) at gmain.c:3440 #2 g_main_context_iterate (context=context@entry=0x7506370, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3141 #3 0x0000003849847a84 in g_main_context_iteration (context=0x7506370, may_block=may_block@entry=1) at gmain.c:3207 #4 0x0000003849847ad1 in glib_worker_main (data=<optimized out>) at gmain.c:4879 #5 0x000000384986a305 in g_thread_proxy (data=0x7a7b1e0) at gthread.c:801 #6 0x0000003847407d14 in start_thread (arg=0x7f3b85b7c700) at pthread_create.c:309 #7 0x00000038468f167d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 1 (Thread 0x7f3bff214880 (LWP 1763)): [KCrash Handler] #6 magazine_chain_pop_head (magazine_chunks=0x1cc9bc0) at gslice.c:528 #7 thread_memory_magazine1_alloc (ix=<optimized out>, tmem=<optimized out>) at gslice.c:835 #8 g_slice_alloc (mem_size=mem_size@entry=16) at gslice.c:994 #9 0x000000384986245e in g_slist_prepend (list=0x0, data=data@entry=0x1ccada0) at gslist.c:265 #10 0x0000003471e4d832 in _gst_debug_category_new (name=name@entry=0x3471ead927 "default", color=color@entry=512, description=description@entry=0x0) at gstinfo.c:1417 #11 0x0000003471e4d933 in _gst_debug_init () at gstinfo.c:352 #12 0x0000003471e25d76 in init_pre (error=<optimized out>, data=<optimized out>, group=<optimized out>, context=<optimized out>) at gst.c:588 #13 0x0000003471e25fa5 in init_pre (context=<optimized out>, group=<optimized out>, data=<optimized out>, error=<optimized out>) at gst.c:630 #14 0x00000038498525f0 in g_option_context_parse (context=context@entry=0x2d7bca0, argc=argc@entry=0x0, argv=argv@entry=0x0, error=0x7fff8afbabc0) at goption.c:1771 #15 0x0000003471e26535 in gst_init_check (argc=0x0, argv=0x0, err=<optimized out>) at gst.c:445 #16 0x0000003475f95a39 in (anonymous namespace)::doGstInit () at platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:172 #17 0x0000003475f95bf6 in WebCore::MediaPlayerPrivateGStreamer::isAvailable () at platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:185 #18 0x0000003475f95c49 in WebCore::MediaPlayerPrivateGStreamer::registerMediaEngine (registrar=0x3475f92b20 <(anonymous namespace)::addMediaEngine((anonymous namespace)::CreateMediaEnginePlayer, (anonymous namespace)::MediaEngineSupportedTypes, (anonymous namespace)::MediaEngineSupportsType, (anonymous namespace)::MediaEngineGetSitesInMediaCache, (anonymous namespace)::MediaEngineClearMediaCache, (anonymous namespace)::MediaEngineClearMediaCacheForSite)>) at platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:161 #19 0x0000003475f916d6 in (anonymous namespace)::installedMediaEngines () at platform/graphics/MediaPlayer.cpp:187 #20 0x0000003475f91867 in (anonymous namespace)::bestMediaEngineForTypeAndCodecs (type=..., codecs=..., current=current@entry=0x0) at platform/graphics/MediaPlayer.cpp:236 #21 0x0000003475f92532 in WebCore::MediaPlayer::supportsType (contentType=...) at platform/graphics/MediaPlayer.cpp:632 #22 0x0000003475afaf2f in WebCore::DOMImplementation::createDocument (type=..., frame=0x7f3b8e518900, url=..., inViewSourceMode=<optimized out>) at dom/DOMImplementation.cpp:339 #23 0x0000003475ce10e1 in WebCore::DocumentWriter::createDocument (this=this@entry=0x7f3b8e3cf070, url=...) at loader/DocumentWriter.cpp:106 #24 0x0000003475ce19f2 in WebCore::DocumentWriter::begin (this=0x7f3b8e3cf070, urlReference=..., dispatch=true, origin=0x0) at loader/DocumentWriter.cpp:122 #25 0x0000003475fd0251 in WebCore::SVGImage::dataChanged (this=0x7f3b8e3dbc78, allDataReceived=<optimized out>) at svg/graphics/SVGImage.cpp:283 #26 0x0000003475ccd6c9 in WebCore::CachedImage::data (this=0x7f3b8e46e400, data=..., allDataReceived=allDataReceived@entry=true) at loader/cache/CachedImage.cpp:278 #27 0x000000347616b709 in WebCore::CachedResourceRequest::didFinishLoading (this=0x7f3b8e3faa80, loader=0x7f3b8e541000) at loader/cache/CachedResourceRequest.cpp:166 #28 0x0000003475d1ad07 in WebCore::SubresourceLoader::didFinishLoading (this=0x7f3b8e541000, finishTime=0) at loader/SubresourceLoader.cpp:196 #29 0x0000003475f0dd93 in WebCore::QNetworkReplyHandler::finish (this=0x12291370) at platform/network/qt/QNetworkReplyHandler.cpp:454 #30 0x0000003475f0dc42 in flush (this=0x122913a8) at platform/network/qt/QNetworkReplyHandler.cpp:195 #31 WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x122913a8) at platform/network/qt/QNetworkReplyHandler.cpp:187 #32 0x0000003475f0dcb5 in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x122913a8, method=(void ((anonymous namespace)::QNetworkReplyHandler::*)((anonymous namespace)::QNetworkReplyHandler * const)) 0x3475f0dcc0 <WebCore::QNetworkReplyHandler::finish()>) at platform/network/qt/QNetworkReplyHandler.cpp:164 #33 0x0000003475f0e75f in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0xd9ed420) at platform/network/qt/QNetworkReplyHandler.cpp:349 #34 0x000000346718cb9f in QMetaObject::activate (sender=0x42433f0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3547 #35 0x000000346717e237 in QMetaMethod::invoke (this=this@entry=0x7fff8afbb4c0, object=object@entry=0x42433f0, connectionType=Qt::DirectConnection, connectionType@entry=Qt::AutoConnection, returnValue=..., val0=..., val1=..., val2=..., val3=..., val4=..., val5=..., val6=..., val7=..., val8=..., val9=...) at kernel/qmetaobject.cpp:1664 #36 0x000000346718060c in QMetaObject::invokeMethod (obj=0x42433f0, member=<optimized out>, type=Qt::AutoConnection, ret=..., val0=..., val1=..., val2=..., val3=..., val4=..., val5=..., val6=..., val7=..., val8=..., val9=...) at kernel/qmetaobject.cpp:1179 #37 0x000000346cac313c in invokeMethod (val9=..., val8=..., val7=..., val6=..., val5=..., val4=..., val3=..., val2=..., val1=..., val0=..., type=Qt::AutoConnection, member=0x346cc2505a "finished", obj=0x42433f0) at /usr/include/QtCore/qobjectdefs.h:418 #38 KDEPrivate::AccessManagerReply::emitFinished (this=this@entry=0x42433f0, state=state@entry=true, type=type@entry=Qt::AutoConnection) at /usr/src/debug/kdelibs-4.8.5/kio/kio/accessmanagerreply_p.cpp:484 #39 0x000000346cac4435 in KDEPrivate::AccessManagerReply::slotResult (this=0x42433f0, kJob=0x128ec7b0) at /usr/src/debug/kdelibs-4.8.5/kio/kio/accessmanagerreply_p.cpp:427 #40 0x000000346718cb9f in QMetaObject::activate (sender=0x128ec7b0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff8afbba70) at kernel/qobject.cpp:3547 #41 0x000000346a133b62 in KJob::result (this=this@entry=0x128ec7b0, _t1=_t1@entry=0x128ec7b0) at /usr/src/debug/kdelibs-4.8.5/x86_64-redhat-linux-gnu/kdecore/kjob.moc:207 #42 0x000000346a133ba0 in KJob::emitResult (this=0x128ec7b0) at /usr/src/debug/kdelibs-4.8.5/kdecore/jobs/kjob.cpp:318 #43 0x000000346caf7115 in KIO::SimpleJob::slotFinished (this=this@entry=0x128ec7b0) at /usr/src/debug/kdelibs-4.8.5/kio/kio/job.cpp:494 #44 0x000000346cafe532 in KIO::TransferJob::slotFinished (this=0x128ec7b0) at /usr/src/debug/kdelibs-4.8.5/kio/kio/job.cpp:1081 #45 0x000000346718cb9f in QMetaObject::activate (sender=0x13556f50, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3547 #46 0x000000346cadb1e0 in KIO::DataSlave::dispatchNext (this=0x13556f50) at /usr/src/debug/kdelibs-4.8.5/kio/kio/dataslave.cpp:114 #47 0x000000346718cb9f in QMetaObject::activate (sender=0x142c4550, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3547 #48 0x000000346718ab1c in QObject::event (this=0x142c4550, e=<optimized out>) at kernel/qobject.cpp:1157 #49 0x0000003467fca37c in QApplicationPrivate::notify_helper (this=this@entry=0x1cc6f80, receiver=receiver@entry=0x142c4550, e=e@entry=0x7fff8afbc560) at kernel/qapplication.cpp:4551 #50 0x0000003467fce7fa in QApplication::notify (this=0x7fff8afbcad0, receiver=0x142c4550, e=0x7fff8afbc560) at kernel/qapplication.cpp:4412 #51 0x000000346b8462b6 in KApplication::notify (this=0x7fff8afbcad0, receiver=0x142c4550, event=0x7fff8afbc560) at /usr/src/debug/kdelibs-4.8.5/kdeui/kernel/kapplication.cpp:311 #52 0x00000034671763ee in QCoreApplication::notifyInternal (this=0x7fff8afbcad0, receiver=0x142c4550, event=0x7fff8afbc560) at kernel/qcoreapplication.cpp:915 #53 0x00000034671a6d52 in sendEvent (event=0x7fff8afbc560, receiver=<optimized out>) at kernel/qcoreapplication.h:231 #54 QTimerInfoList::activateTimers (this=0x1cc76e0) at kernel/qeventdispatcher_unix.cpp:611 #55 0x00000034671a3e84 in timerSourceDispatch (source=<optimized out>) at kernel/qeventdispatcher_glib.cpp:186 #56 timerSourceDispatch (source=source@entry=0x1cc7680) at kernel/qeventdispatcher_glib.cpp:180 #57 0x0000003849847695 in g_main_dispatch (context=0x1cc93a0) at gmain.c:2539 #58 g_main_context_dispatch (context=context@entry=0x1cc93a0) at gmain.c:3075 #59 0x00000038498479c8 in g_main_context_iterate (context=context@entry=0x1cc93a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3146 #60 0x0000003849847a84 in g_main_context_iteration (context=0x1cc93a0, may_block=1) at gmain.c:3207 #61 0x00000034671a44e6 in QEventDispatcherGlib::processEvents (this=0x1c9b530, flags=...) at kernel/qeventdispatcher_glib.cpp:424 #62 0x000000346806a2ee in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at kernel/qguieventdispatcher_glib.cpp:207 #63 0x000000346717513f in QEventLoop::processEvents (this=this@entry=0x7fff8afbc7d0, flags=...) at kernel/qeventloop.cpp:149 #64 0x00000034671753c8 in QEventLoop::exec (this=0x7fff8afbc7d0, flags=...) at kernel/qeventloop.cpp:204 #65 0x000000346717a1b8 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1187 #66 0x000000346aeaf5e2 in kdemain (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/kde-baseapps-4.8.5/konqueror/src/konqmain.cpp:227 #67 0x0000003846821735 in __libc_start_main (main=0x400820 <main(int, char**)>, argc=3, ubp_av=0x7fff8afbcd58, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff8afbcd48) at libc-start.c:226 #68 0x0000000000400851 in _start () Possible duplicates by query: bug 294354, bug 294353, bug 293844, bug 292861, bug 287429. Reported using DrKonqi
Created attachment 73702 [details] New crash information added by DrKonqi konqueror (4.8.5 (4.8.5)) on KDE Platform 4.8.5 (4.8.5) using Qt 4.8.2 - What I was doing when the application crashed: It crashes reproducibly, although the backtrace looks a bit different this time ... -- Backtrace (Reduced): #6 0x0000003846835925 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #7 0x00000038468370d8 in __GI_abort () at abort.c:91 [...] #9 0x000000384687bfee in malloc_printerr (ptr=0x87d790, str=0x3846978960 "free(): invalid next size (normal)", action=3) at malloc.c:5027 #10 _int_free (av=0x3846bb0720, p=0x87d780, have_lock=0) at malloc.c:3948 #11 0x000000384984d37f in g_free (mem=0x87d790) at gmem.c:252
The problem is upstream at Gstreamer, please report this there.
(In reply to comment #2) > The problem is upstream at Gstreamer, please report this there. I'm not that sure, have you examined also the trace from the second crash? - to me, it looks more like that konqueror does something bad to the plugins which results in crash which is blamed on the plugin then ... /me is going to try again
Created attachment 73717 [details] New crash information added by DrKonqi konqueror (4.8.5 (4.8.5)) on KDE Platform 4.8.5 (4.8.5) using Qt 4.8.2 - What I was doing when the application crashed: another crash under the same circumstances gstreamer involved again, but this time the code path differs - DrKonqi did not suggest this as duplicate (I got suggestion for kded crash ... guess the DKonqi AI needs some work too :-)) -- Backtrace (Reduced): #6 magazine_cache_pop_magazine (countp=0x17b9fb8, ix=0) at gslice.c:726 #7 thread_memory_magazine1_reload (ix=0, tmem=<optimized out>) at gslice.c:794 #8 g_slice_alloc (mem_size=mem_size@entry=16) at gslice.c:992 #9 0x000000384986245e in g_slist_prepend (list=list@entry=0x7f6980001f90 = {...}, data=0x384b4140d0) at gslist.c:265 #10 0x000000384b42d7ee in type_class_init_Wm (pclass=0x2c419b0, node=0x3585310) at gtype.c:2147
Created attachment 73718 [details] New crash information added by DrKonqi konqueror (4.8.5 (4.8.5)) on KDE Platform 4.8.5 (4.8.5) using Qt 4.8.2 - What I was doing when the application crashed: ... and again with IcedTea to be blamed this time (DrKonqi has found the duplicate now) -- Backtrace (Reduced): #6 0x0000003846835925 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #7 0x00000038468370d8 in __GI_abort () at abort.c:91 [...] #9 0x000000384687bfee in malloc_printerr (ptr=0xbbba90, str=0x38469789c8 "double free or corruption (!prev)", action=3) at malloc.c:5027 #10 _int_free (av=0x3846bb0720, p=0xbbba80, have_lock=0) at malloc.c:3948 #11 0x000000384984d37f in g_free (mem=0xbbba90) at gmem.c:252
please re-evaluate this bug (sorry for the noise if I am mistaken ... but at least then I will know that I need to file new bugs both for GStreamer and for IcedTea) also note that I've tried to run konqueror under Valgrind, and it crashed even before displaying the login page; the last error reported by valgrind is: ==24978== Invalid read of size 4 ==24978== at 0x34759D0778: WebCore::findAtomicString(JSC::Identifier const&) (JSDOMBinding.cpp:133) ==24978== by 0x34759FC34B: WebCore::JSHTMLDocument::canGetItemsForName(JSC::ExecState*, WebCore::HTMLDocument*, JSC::Identifier const&) (JSHTMLDocumentCustom.cpp:55) ==24978== by 0x34756459D4: WebCore::JSHTMLDocument::getOwnPropertySlot(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&) (JSHTMLDocument.cpp:175) ==24978== by 0x34762544C5: JSC::JSValue::get(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&) const (JSObject.h:512) ==24978== by 0x34762492A1: cti_op_get_by_id_method_check (JITStubs.cpp:1520) ==24978== by 0x39447CB3: ??? ==24978== by 0x3476240E60: JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::ScopeChainNode*, JSC::JSObject*) (JITCode.h:77) ==24978== by 0x347625CAD0: JSC::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue) (Completion.cpp:64) ==24978== by 0x3475A2D3D5: WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld*) (JSMainThreadExecState.h:54) ==24978== by 0x3475A2DE71: WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&) (ScriptController.cpp:166) ==24978== by 0x34759BB709: WebCore::ScriptController::executeScript(WebCore::ScriptSourceCode const&) (ScriptControllerBase.cpp:64) ==24978== by 0x34759652B1: QWebFrame::evaluateJavaScript(QString const&) (qwebframe.cpp:1539) ==24978== Address 0x1d00000120 is not stack'd, malloc'd or (recently) free'd
(In reply to comment #6) > please re-evaluate this bug (sorry for the noise if I am mistaken ... but at > least then I will know that I need to file new bugs both for GStreamer and > for IcedTea) You are mistaken. How can Konqueror cause crash in upstream packages ? Even if you fell like this is not a bug in the plugins, the issue would still be upstream in QtWebKit. But that is not even the case at least as far as the icedtea java applet plugin is concerned. But do not take my words for it, go read the last few comments in bug# 242415. > also note that I've tried to run konqueror under Valgrind, and it crashed > even before displaying the login page; the last error reported by valgrind Does not matter. I cannot run Konqueror + webkit engine through valgrind either. It never worked for me and I doubt it ever will, but that simply means QtWebKit (or webkit in general) does something that breaks how valgrind attempts to emulate a machine. I won't be going out on a limb to say that it is probably the JIT based javascript engine that gives it fits. Regardless, this has no impact on this bug report. This issue is an upstream problem.