RESOLVED INVALID 73008
[Qt] Webkit crashes on dict.sztaki.hu 
https://bugs.webkit.org/show_bug.cgi?id=73008
Summary [Qt] Webkit crashes on dict.sztaki.hu
Andras Mantia
Reported 2011-11-23 00:23:39 PST
Konqueror with webkit part crashes on http://szotar.sztaki.hu/index.jhtml . Console output: (konqueror:28393): GLib-GObject-WARNING **: instance with invalid (NULL) class pointer (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): GLib-GObject-WARNING **: instance with invalid (NULL) class pointer (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): Gdk-CRITICAL **: IA__gdk_window_set_back_pixmap: assertion `GDK_IS_WINDOW (window)' failed (konqueror:28393): Gdk-CRITICAL **: IA__gdk_window_get_origin: assertion `GDK_IS_WINDOW (window)' failed (konqueror:28393): GLib-GObject-WARNING **: instance of invalid non-instantiatable type `<invalid>' (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): GLib-GObject-WARNING **: instance of invalid non-instantiatable type `<invalid>' (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): Gdk-CRITICAL **: IA__gdk_window_set_back_pixmap: assertion `GDK_IS_WINDOW (window)' failed (konqueror:28393): Gdk-CRITICAL **: IA__gdk_window_get_origin: assertion `GDK_IS_WINDOW (window)' failed (konqueror:28393): GLib-GObject-WARNING **: instance of invalid non-instantiatable type `(null)' (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): GLib-GObject-WARNING **: instance of invalid non-instantiatable type `(null)' (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): Gdk-CRITICAL **: IA__gdk_window_set_back_pixmap: assertion `GDK_IS_WINDOW (window)' failed (konqueror:28393): Gdk-CRITICAL **: IA__gdk_window_get_origin: assertion `GDK_IS_WINDOW (window)' failed (konqueror:28393): GLib-GObject-WARNING **: instance of invalid non-instantiatable type `(null)' (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): GLib-GObject-WARNING **: instance of invalid non-instantiatable type `(null)' (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): Gdk-CRITICAL **: IA__gdk_window_set_back_pixmap: assertion `GDK_IS_WINDOW (window)' failed (konqueror:28393): Gdk-CRITICAL **: IA__gdk_window_get_origin: assertion `GDK_IS_WINDOW (window)' failed (konqueror:28393): GLib-GObject-WARNING **: instance of invalid non-instantiatable type `(null)' (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (konqueror:28393): GLib-GObject-WARNING **: instance of invalid non-instantiatable type `(null)' (konqueror:28393): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed KCrash: crashing... crashRecursionCounter = 2 KCrash: Application Name = konqueror path = /opt/kde4/bin pid = 28393 KCrash: Arguments: /opt/kde4/bin/konqueror --nocrashhandler KCrash: Attempting to start /opt/kde4/lib64/kde4/libexec/drkonqi from kdeinit sock_file=/encrypted/home/andris/.kde4/socket-stein/kdeinit4__0 Backtrace: Application: Konqueror (konqueror), signal: Segmentation fault [Current thread is 1 (Thread 0x7feb43b79760 (LWP 28393))] Thread 9 (Thread 0x7feb2a9a8700 (LWP 28400)): #0 0x00007feb4000b11f in __pthread_mutex_unlock_usercnt () from /lib64/libpthread.so.0 #1 0x00007feb39a85b14 in g_main_context_prepare () from /usr/lib64/libglib-2.0.so.0 #2 0x00007feb39a8692d in ?? () from /usr/lib64/libglib-2.0.so.0 #3 0x00007feb39a86f59 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0 #4 0x00007feb40435da8 in QEventDispatcherGlib::processEvents (this=0x3606660, flags=...) at kernel/qeventdispatcher_glib.cpp:426 #5 0x00007feb403f6a2a in QEventLoop::processEvents (this=0x7feb2a9a7d90, flags=...) at kernel/qeventloop.cpp:149 #6 0x00007feb403f6bb4 in QEventLoop::exec (this=0x7feb2a9a7d90, flags=...) at kernel/qeventloop.cpp:204 #7 0x00007feb402c3731 in QThread::exec (this=0x35bd160) at thread/qthread.cpp:501 #8 0x00007feb42755e49 in KIO::NameLookUpThread::run (this=0x35bd160) at /encrypted/home/andris/development/sources/kde-trunk/kdelibs/kio/kio/hostinfo.cpp:226 #9 0x00007feb402c60b6 in QThreadPrivate::start (arg=0x35bd160) at thread/qthread_unix.cpp:298 #10 0x00007feb40007f05 in start_thread () from /lib64/libpthread.so.0 #11 0x00007feb3d13953d in clone () from /lib64/libc.so.6 Thread 8 (Thread 0x7feb259a9700 (LWP 28407)): #0 0x00007feb4000be6c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00007feb28284df1 in WTF::TCMalloc_PageHeap::scavengerThread() () from //opt/qt4/lib/libQtWebKit.so.4 #2 0x00007feb282843ac in WTF::TCMalloc_PageHeap::runScavengerThread(void*) () from //opt/qt4/lib/libQtWebKit.so.4 #3 0x00007feb40007f05 in start_thread () from /lib64/libpthread.so.0 #4 0x00007feb3d13953d in clone () from /lib64/libc.so.6 Thread 7 (Thread 0x7feb250a8700 (LWP 28408)): #0 0x00007feb39a85120 in g_main_context_acquire () from /usr/lib64/libglib-2.0.so.0 #1 0x00007feb39a868b1 in ?? () from /usr/lib64/libglib-2.0.so.0 #2 0x00007feb39a86f59 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0 #3 0x00007feb40435da8 in QEventDispatcherGlib::processEvents (this=0x368ae20, flags=...) at kernel/qeventdispatcher_glib.cpp:426 #4 0x00007feb403f6a2a in QEventLoop::processEvents (this=0x7feb250a7db0, flags=...) at kernel/qeventloop.cpp:149 #5 0x00007feb403f6bb4 in QEventLoop::exec (this=0x7feb250a7db0, flags=...) at kernel/qeventloop.cpp:204 #6 0x00007feb402c3731 in QThread::exec (this=0x369d170) at thread/qthread.cpp:501 #7 0x00007feb402c38d0 in QThread::run (this=0x369d170) at thread/qthread.cpp:568 #8 0x00007feb402c60b6 in QThreadPrivate::start (arg=0x369d170) at thread/qthread_unix.cpp:298 #9 0x00007feb40007f05 in start_thread () from /lib64/libpthread.so.0 #10 0x00007feb3d13953d in clone () from /lib64/libc.so.6 Thread 6 (Thread 0x7fead9446700 (LWP 28587)): #0 0x00007feb3d130423 in poll () from /lib64/libc.so.6 #1 0x00007feb39a86a98 in ?? () from /usr/lib64/libglib-2.0.so.0 #2 0x00007feb39a86f59 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0 #3 0x00007feb40435da8 in QEventDispatcherGlib::processEvents (this=0x27dcea0, flags=...) at kernel/qeventdispatcher_glib.cpp:426 #4 0x00007feb403f6a2a in QEventLoop::processEvents (this=0x7fead9445d80, flags=...) at kernel/qeventloop.cpp:149 #5 0x00007feb403f6bb4 in QEventLoop::exec (this=0x7fead9445d80, flags=...) at kernel/qeventloop.cpp:204 #6 0x00007feb402c3731 in QThread::exec (this=0x290ff60) at thread/qthread.cpp:501 #7 0x00007feb403d1610 in QInotifyFileSystemWatcherEngine::run (this=0x290ff60) at io/qfilesystemwatcher_inotify.cpp:248 #8 0x00007feb402c60b6 in QThreadPrivate::start (arg=0x290ff60) at thread/qthread_unix.cpp:298 #9 0x00007feb40007f05 in start_thread () from /lib64/libpthread.so.0 #10 0x00007feb3d13953d in clone () from /lib64/libc.so.6 Thread 5 (Thread 0x7feaddfed700 (LWP 28663)): #0 0x00007feb4000be6c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00007feb2bd78f5c in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #2 0x00007feb2be97a50 in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #3 0x00007feb2bd791bc in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #4 0x00007feb2bd7960e in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #5 0x00007feb40007f05 in start_thread () from /lib64/libpthread.so.0 #6 0x00007feb3d13953d in clone () from /lib64/libc.so.6 Thread 4 (Thread 0x7feade7ee700 (LWP 28665)): #0 0x00007feb4000be6c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00007feb2bd78f5c in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #2 0x00007feb2be97a50 in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #3 0x00007feb2bd791bc in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #4 0x00007feb2bd7960e in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #5 0x00007feb40007f05 in start_thread () from /lib64/libpthread.so.0 #6 0x00007feb3d13953d in clone () from /lib64/libc.so.6 Thread 3 (Thread 0x7feadefef700 (LWP 28666)): #0 0x00007feb4000be6c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00007feb2bd78f5c in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #2 0x00007feb2be97a50 in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #3 0x00007feb2bd791bc in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #4 0x00007feb2bd7960e in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #5 0x00007feb40007f05 in start_thread () from /lib64/libpthread.so.0 #6 0x00007feb3d13953d in clone () from /lib64/libc.so.6 Thread 2 (Thread 0x7feadf7f0700 (LWP 28667)): #0 0x00007feb4000be6c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00007feb2bd78f5c in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #2 0x00007feb2be97a50 in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #3 0x00007feb2bd791bc in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #4 0x00007feb2bd7960e in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #5 0x00007feb40007f05 in start_thread () from /lib64/libpthread.so.0 #6 0x00007feb3d13953d in clone () from /lib64/libc.so.6 Thread 1 (Thread 0x7feb43b79760 (LWP 28393)): [KCrash Handler] #6 0x00007feb39aa1bb5 in g_slice_alloc () from /usr/lib64/libglib-2.0.so.0 #7 0x00007feb39aa21e6 in g_slice_alloc0 () from /usr/lib64/libglib-2.0.so.0 #8 0x00007feb3936b849 in g_type_create_instance () from /usr/lib64/libgobject-2.0.so.0 #9 0x00007feb3934bf1c in ?? () from /usr/lib64/libgobject-2.0.so.0 #10 0x00007feb3934e804 in g_object_newv () from /usr/lib64/libgobject-2.0.so.0 #11 0x00007feb3934f9fc in g_object_new () from /usr/lib64/libgobject-2.0.so.0 #12 0x00007feb2b48f29a in gtk_plug_new_for_display () from /usr/lib64/libgtk-x11-2.0.so.0 #13 0x00007feb2bd746fa in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #14 0x00007feb2bd6c0af in ?? () from /usr/lib64/browser-plugins/libflashplayer.so #15 0x00007feb27eb2346 in WebCore::PluginView::setNPWindowIfNeeded() () from //opt/qt4/lib/libQtWebKit.so.4 #16 0x00007feb27eb02ac in WebCore::PluginView::updatePluginWidget() () from //opt/qt4/lib/libQtWebKit.so.4 #17 0x00007feb27eb34d1 in WebCore::PluginView::platformStart() () from //opt/qt4/lib/libQtWebKit.so.4 #18 0x00007feb27d170c6 in WebCore::PluginView::start() () from //opt/qt4/lib/libQtWebKit.so.4 #19 0x00007feb27d16d6e in WebCore::PluginView::startOrAddToUnstartedList() () from //opt/qt4/lib/libQtWebKit.so.4 #20 0x00007feb27d16c6d in WebCore::PluginView::init() () from //opt/qt4/lib/libQtWebKit.so.4 #21 0x00007feb27eb1ae8 in WebCore::PluginView::setParent(WebCore::ScrollView*) () from //opt/qt4/lib/libQtWebKit.so.4 #22 0x00007feb27cf1d8d in WebCore::ScrollView::addChild(WTF::PassRefPtr<WebCore::Widget>) () from //opt/qt4/lib/libQtWebKit.so.4 #23 0x00007feb27e4d627 in WebCore::moveWidgetToParentSoon(WebCore::Widget*, WebCore::FrameView*) () from //opt/qt4/lib/libQtWebKit.so.4 #24 0x00007feb27e4e329 in WebCore::RenderWidget::setWidget(WTF::PassRefPtr<WebCore::Widget>) () from //opt/qt4/lib/libQtWebKit.so.4 #25 0x00007feb27e0188f in WebCore::RenderPart::setWidget(WTF::PassRefPtr<WebCore::Widget>) () from //opt/qt4/lib/libQtWebKit.so.4 #26 0x00007feb27c03beb in WebCore::SubframeLoader::loadPlugin(WebCore::HTMLPlugInImageElement*, WebCore::KURL const&, WTF::String const&, WTF::Vector<WTF::String, 0ul> const&, WTF::Vector<WTF::String, 0ul> const&, bool) () from //opt/qt4/lib/libQtWebKit.so.4 #27 0x00007feb27c026ba in WebCore::SubframeLoader::requestPlugin(WebCore::HTMLPlugInImageElement*, WebCore::KURL const&, WTF::String const&, WTF::Vector<WTF::String, 0ul> const&, WTF::Vector<WTF::String, 0ul> const&, bool) () from //opt/qt4/lib/libQtWebKit.so.4 #28 0x00007feb27c02851 in WebCore::SubframeLoader::requestObject(WebCore::HTMLPlugInImageElement*, WTF::String const&, WTF::AtomicString const&, WTF::String const&, WTF::Vector<WTF::String, 0ul> const&, WTF::Vector<WTF::String, 0ul> const&) () from //opt/qt4/lib/libQtWebKit.so.4 #29 0x00007feb27acb110 in WebCore::HTMLObjectElement::updateWidget(WebCore::PluginCreationOption) () from //opt/qt4/lib/libQtWebKit.so.4 #30 0x00007feb27c62d89 in WebCore::FrameView::updateWidget(WebCore::RenderEmbeddedObject*) () from //opt/qt4/lib/libQtWebKit.so.4 #31 0x00007feb27c62f7b in WebCore::FrameView::updateWidgets() () from //opt/qt4/lib/libQtWebKit.so.4 #32 0x00007feb27c631ff in WebCore::FrameView::performPostLayoutTasks() () from //opt/qt4/lib/libQtWebKit.so.4 #33 0x00007feb27c5f7c4 in WebCore::FrameView::layout(bool) () from //opt/qt4/lib/libQtWebKit.so.4 #34 0x00007feb2796ac3f in WebCore::Document::updateLayout() () from //opt/qt4/lib/libQtWebKit.so.4 #35 0x00007feb2796ad20 in WebCore::Document::updateLayoutIgnorePendingStylesheets() () from //opt/qt4/lib/libQtWebKit.so.4 #36 0x00007feb27ac921c in WebCore::HTMLObjectElement::renderWidgetForJSBindings() const () from //opt/qt4/lib/libQtWebKit.so.4 #37 0x00007feb27ad04eb in WebCore::HTMLPlugInElement::pluginWidget() const () from //opt/qt4/lib/libQtWebKit.so.4 #38 0x00007feb2784aeb7 in WebCore::pluginScriptObjectFromPluginViewBase(WebCore::HTMLPlugInElement*, JSC::JSGlobalObject*) () from //opt/qt4/lib/libQtWebKit.so.4 #39 0x00007feb2784afd9 in WebCore::pluginScriptObject(JSC::ExecState*, WebCore::JSHTMLElement*) () from //opt/qt4/lib/libQtWebKit.so.4 #40 0x00007feb2784b0ea in WebCore::runtimeObjectCustomGetOwnPropertySlot(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&, WebCore::JSHTMLElement*) () from //opt/qt4/lib/libQtWebKit.so.4 #41 0x00007feb2783b0c8 in WebCore::JSHTMLObjectElement::getOwnPropertySlotDelegate(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&) () from //opt/qt4/lib/libQtWebKit.so.4 #42 0x00007feb27543ef0 in WebCore::JSHTMLObjectElement::getOwnPropertySlot(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&) () from //opt/qt4/lib/libQtWebKit.so.4 #43 0x00007feb2806d2df in JSC::JSValue::get(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&) const () from //opt/qt4/lib/libQtWebKit.so.4 #44 0x00007feb282bd1d3 in cti_op_get_by_id_generic () from //opt/qt4/lib/libQtWebKit.so.4 #45 0x00007feae4273662 in ?? () #46 0x0000000000000000 in ?? () Tested with Qt 4.8, flash plugin 11.1.102.55, 64 bit. You should not use any ad blocker or filter proxy (like privoxy). export QT_NO_GLIB=1 doesn't help.
Attachments
Add attachment proposed patch, testcase, etc.
Andras Mantia
Comment 1 2011-11-23 00:29:14 PST
Same happens with fabcybrowser example if I enable the plugins.
Viatcheslav Ostapenko
Comment 2 2011-12-01 04:24:08 PST
Probably duplicate of this: https://bugs.webkit.org/show_bug.cgi?id=71803
Jocelyn Turcotte
Comment 3 2014-02-03 03:19:18 PST
=== Bulk closing of Qt bugs === If you believe that this bug report is still relevant for a non-Qt port of webkit.org, please re-open it and remove [Qt] from the summary. If you believe that this is still an important QtWebKit bug, please fill a new report at https://bugreports.qt-project.org and add a link to this issue. See http://qt-project.org/wiki/ReportingBugsInQt for additional guidelines.
Note You need to log in before you can comment on or make changes to this bug.