RESOLVED INVALID76472
[Qt] flash-plugin/glib related crash on close 
https://bugs.webkit.org/show_bug.cgi?id=76472
Summary [Qt] flash-plugin/glib related crash on close
Rex Dieter
Reported 2012-01-17 12:11:41 PST
rpm -q fedora-release qt qtwebkit flash-plugin fedora-release-16-1.noarch qt-4.8.0-7.fc16.x86_64 qt-4.8.0-7.fc16.i686 qtwebkit-2.2.1-2.fc16.x86_64 flash-plugin-11.1.102.55-release.x86_64 crash ensues on any attempt to unload flash (ie, navigate away from a page using it). backtrace is almost always the same. Reproducible pretty much any browser using qtwetbkit, including rekonq, arora, konqueror+webkitpart Here's the interesting part of the full backtrace (appended at the end), of an example using rekonq on youtube: #6 0x0000003f09411449 in g_object_unref (_object=0x43b6000) at gobject.c:2740 #7 0x00007fd1ca4c6418 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #8 0x00007fd1ca4c65dd in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #9 0x00007fd1ca4c2ca0 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #10 0x00007fd1ca4bc182 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #11 0x0000003a2af78994 in WebCore::PluginView::stop (this=0x7fd1d018f680) at ../../../Source/WebCore/plugins/PluginView.cpp:385 Not much to go on there, unfortunately. using export G_SLICE=always-malloc makes it work for a little longer, but will eventually crash too. --------------------------------------- Application: rekonq (rekonq), signal: Segmentation fault Using host libthread_db library "/lib64/libthread_db.so.1". 82 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) [Current thread is 1 (Thread 0x7fd2349da840 (LWP 2707))] Thread 15 (Thread 0x7fd22a686700 (LWP 2708)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x0000003a2b3b86ec in WTF::TCMalloc_PageHeap::scavengerThread (this=0x3a2bd7cc20) at ../../../Source/JavaScriptCore/wtf/FastMalloc.cpp:2495 #2 0x0000003a2b3b8819 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at ../../../Source/JavaScriptCore/wtf/FastMalloc.cpp:1618 #3 0x0000003b02a07d90 in start_thread (arg=0x7fd22a686700) at pthread_create.c:309 #4 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 14 (Thread 0x7fd229d85700 (LWP 2709)): #0 0x0000003b01a120d6 in _dl_update_slotinfo (req_modid=1) at dl-tls.c:562 #1 0x0000003b01a1241d in __tls_get_addr (ti=0x3a204cc500) at dl-tls.c:757 #2 0x0000003a2007ac7a in get_thread_data () at thread/qthread_unix.cpp:174 #3 QThreadData::current () at thread/qthread_unix.cpp:200 #4 0x0000003a201a74a9 in postEventSourcePrepare (s=0x7fd224001330, timeout=0x0) at kernel/qeventdispatcher_glib.cpp:256 #5 0x0000003f08c447a4 in g_main_context_check (context=0x7fd2240009a0, max_priority=2147483647, fds=<optimized out>, n_fds=<optimized out>) at gmain.c:2959 #6 0x0000003f08c44ff2 in g_main_context_iterate (context=0x7fd2240009a0, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3086 #7 0x0000003f08c4549c in g_main_context_iteration (context=0x7fd2240009a0, may_block=1) at gmain.c:3152 #8 0x0000003a201a7dc6 in QEventDispatcherGlib::processEvents (this=0x7fd2240008c0, flags=<optimized out>) at kernel/qeventdispatcher_glib.cpp:426 #9 0x0000003a20178182 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149 #10 0x0000003a201783d7 in QEventLoop::exec (this=0x7fd229d84d40, flags=...) at kernel/qeventloop.cpp:204 #11 0x0000003a20078b27 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501 #12 0x0000003a2007bb6b in QThreadPrivate::start (arg=0x16f1070) at thread/qthread_unix.cpp:298 #13 0x0000003b02a07d90 in start_thread (arg=0x7fd229d85700) at pthread_create.c:309 #14 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 13 (Thread 0x7fd228d02700 (LWP 2710)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x0000003a26984e62 in QTWTF::TCMalloc_PageHeap::scavengerThread (this=0x3a26c7e240) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:2359 #2 0x0000003a26984e99 in QTWTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:1464 #3 0x0000003b02a07d90 in start_thread (arg=0x7fd228d02700) at pthread_create.c:309 #4 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 12 (Thread 0x7fd2235bb700 (LWP 2711)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x0000003a2007c07b in wait (time=18446744073709551615, this=0x15617e0) at thread/qwaitcondition_unix.cpp:86 #2 QWaitCondition::wait (this=<optimized out>, mutex=0x1562d50, time=18446744073709551615) at thread/qwaitcondition_unix.cpp:158 #3 0x0000003a2fa0aa8b in ThreadWeaver::WeaverImpl::blockThreadUntilJobsAreBeingAssigned (this=0x1562b10, th=0x17af390) at /usr/src/debug/kdelibs-4.7.97/threadweaver/Weaver/WeaverImpl.cpp:365 #4 0x0000003a2fa0d37b in ThreadWeaver::WorkingHardState::applyForWork (this=0x1562de0, th=0x17af390) at /usr/src/debug/kdelibs-4.7.97/threadweaver/Weaver/WorkingHardState.cpp:71 #5 0x0000003a2fa0c1ef in ThreadWeaver::ThreadRunHelper::run (this=0x7fd2235bad60, parent=0x1562b10, th=0x17af390) at /usr/src/debug/kdelibs-4.7.97/threadweaver/Weaver/Thread.cpp:87 #6 0x0000003a2fa0c27b in ThreadWeaver::Thread::run (this=0x17af390) at /usr/src/debug/kdelibs-4.7.97/threadweaver/Weaver/Thread.cpp:142 #7 0x0000003a2007bb6b in QThreadPrivate::start (arg=0x17af390) at thread/qthread_unix.cpp:298 #8 0x0000003b02a07d90 in start_thread (arg=0x7fd2235bb700) at pthread_create.c:309 #9 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 11 (Thread 0x7fd1d29e4700 (LWP 2720)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x0000003a2007c07b in wait (time=18446744073709551615, this=0x15617e0) at thread/qwaitcondition_unix.cpp:86 #2 QWaitCondition::wait (this=<optimized out>, mutex=0x1562d50, time=18446744073709551615) at thread/qwaitcondition_unix.cpp:158 #3 0x0000003a2fa0aa8b in ThreadWeaver::WeaverImpl::blockThreadUntilJobsAreBeingAssigned (this=0x1562b10, th=0x1fe42d0) at /usr/src/debug/kdelibs-4.7.97/threadweaver/Weaver/WeaverImpl.cpp:365 #4 0x0000003a2fa0d37b in ThreadWeaver::WorkingHardState::applyForWork (this=0x1562de0, th=0x1fe42d0) at /usr/src/debug/kdelibs-4.7.97/threadweaver/Weaver/WorkingHardState.cpp:71 #5 0x0000003a2fa0c1ef in ThreadWeaver::ThreadRunHelper::run (this=0x7fd1d29e3d60, parent=0x1562b10, th=0x1fe42d0) at /usr/src/debug/kdelibs-4.7.97/threadweaver/Weaver/Thread.cpp:87 #6 0x0000003a2fa0c27b in ThreadWeaver::Thread::run (this=0x1fe42d0) at /usr/src/debug/kdelibs-4.7.97/threadweaver/Weaver/Thread.cpp:142 #7 0x0000003a2007bb6b in QThreadPrivate::start (arg=0x1fe42d0) at thread/qthread_unix.cpp:298 #8 0x0000003b02a07d90 in start_thread (arg=0x7fd1d29e4700) at pthread_create.c:309 #9 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 10 (Thread 0x7fd1cbfff700 (LWP 2721)): #0 0x0000003b01ee6af3 in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87 #1 0x0000003f08c44fd8 in g_main_context_poll (n_fds=1, fds=0x7fd1cc0013e0, priority=<optimized out>, timeout=-1, context=0x7fd1cc010ca0) at gmain.c:3402 #2 g_main_context_iterate (context=0x7fd1cc010ca0, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3084 #3 0x0000003f08c4549c in g_main_context_iteration (context=0x7fd1cc010ca0, may_block=1) at gmain.c:3152 #4 0x0000003a201a7d5f in QEventDispatcherGlib::processEvents (this=0x7fd1cc0134f0, flags=<optimized out>) at kernel/qeventdispatcher_glib.cpp:424 #5 0x0000003a20178182 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149 #6 0x0000003a201783d7 in QEventLoop::exec (this=0x7fd1cbffed10, flags=...) at kernel/qeventloop.cpp:204 #7 0x0000003a20078b27 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501 #8 0x0000003a257b401e in KIO::NameLookUpThread::run (this=0x7fd21c013870) at /usr/src/debug/kdelibs-4.7.97/kio/kio/hostinfo.cpp:226 #9 0x0000003a2007bb6b in QThreadPrivate::start (arg=0x7fd21c013870) at thread/qthread_unix.cpp:298 #10 0x0000003b02a07d90 in start_thread (arg=0x7fd1cbfff700) at pthread_create.c:309 #11 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 9 (Thread 0x7fd1c8ca4700 (LWP 2757)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x00007fd1ca4c8f5c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #2 0x00007fd1ca5e7a50 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #3 0x00007fd1ca4c91bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #4 0x00007fd1ca4c960e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #5 0x0000003b02a07d90 in start_thread (arg=0x7fd1c8ca4700) at pthread_create.c:309 #6 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 8 (Thread 0x7fd1bffff700 (LWP 2758)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x00007fd1ca4c8f5c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #2 0x00007fd1ca5e7a50 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #3 0x00007fd1ca4c91bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #4 0x00007fd1ca4c960e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #5 0x0000003b02a07d90 in start_thread (arg=0x7fd1bffff700) at pthread_create.c:309 #6 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 7 (Thread 0x7fd1bf3b9700 (LWP 2761)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:216 #1 0x00007fd1ca4c8f31 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #2 0x00007fd1ca4ea5dd in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #3 0x00007fd1ca4c91bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #4 0x00007fd1ca4c960e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #5 0x0000003b02a07d90 in start_thread (arg=0x7fd1bf3b9700) at pthread_create.c:309 #6 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 6 (Thread 0x7fd1bd4b4700 (LWP 2762)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x00007fd1ca4c8f5c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #2 0x00007fd1ca91428c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #3 0x00007fd1ca4c91bc in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #4 0x00007fd1ca4c960e in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #5 0x0000003b02a07d90 in start_thread (arg=0x7fd1bd4b4700) at pthread_create.c:309 #6 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 5 (Thread 0x7fd1b797f700 (LWP 2763)): #0 0x0000003b01ee6af3 in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87 #1 0x0000003b1f63111f in poll_func (ufds=0x7fd1b0001460, nfds=1, timeout=-1, userdata=0x4520750) at pulse/thread-mainloop.c:69 #2 0x0000003b1f62253c in pa_mainloop_poll (m=0x4520810) at pulse/mainloop.c:875 #3 0x0000003b1f622ba9 in pa_mainloop_iterate (m=0x4520810, block=<optimized out>, retval=0x0) at pulse/mainloop.c:957 #4 0x0000003b1f622c60 in pa_mainloop_run (m=0x4520810, retval=0x0) at pulse/mainloop.c:975 #5 0x0000003b1f6310cf in thread (userdata=0x45207d0) at pulse/thread-mainloop.c:88 #6 0x0000003b1dc43308 in internal_thread_func (userdata=0x45268b0) at pulsecore/thread-posix.c:83 #7 0x0000003b02a07d90 in start_thread (arg=0x7fd1b797f700) at pthread_create.c:309 #8 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 4 (Thread 0x7fd1b717e700 (LWP 2764)): #0 0x0000003b01ebbced in nanosleep () at ../sysdeps/unix/syscall-template.S:82 #1 0x0000003b01ee9094 in usleep (useconds=<optimized out>) at ../sysdeps/unix/sysv/linux/usleep.c:33 #2 0x00007fd1ca87621a in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #3 0x0000003b02a07d90 in start_thread (arg=0x7fd1b717e700) at pthread_create.c:309 #4 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 3 (Thread 0x7fd1b566a700 (LWP 2765)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x00007fd1cacef10c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #2 0x00007fd1cac7aa64 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #3 0x0000003b02a07d90 in start_thread (arg=0x7fd1b566a700) at pthread_create.c:309 #4 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 2 (Thread 0x7fd1b4e69700 (LWP 2766)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165 #1 0x00007fd1cacef10c in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #2 0x00007fd1cac7aa64 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #3 0x0000003b02a07d90 in start_thread (arg=0x7fd1b4e69700) at pthread_create.c:309 #4 0x0000003b01eef48d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 Thread 1 (Thread 0x7fd2349da840 (LWP 2707)): [KCrash Handler] #6 0x0000003f09411449 in g_object_unref (_object=0x43b6000) at gobject.c:2740 #7 0x00007fd1ca4c6418 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #8 0x00007fd1ca4c65dd in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #9 0x00007fd1ca4c2ca0 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #10 0x00007fd1ca4bc182 in ?? () from /usr/lib64/flash-plugin/libflashplayer.so #11 0x0000003a2af78994 in WebCore::PluginView::stop (this=0x7fd1d018f680) at ../../../Source/WebCore/plugins/PluginView.cpp:385 #12 0x0000003a2af7a551 in (anonymous namespace)::PluginView::~PluginView (this=0x7fd1d018f680, __in_chrg=<optimized out>) at ../../../Source/WebCore/plugins/PluginView.cpp:301 #13 0x0000003a2af7acc9 in (anonymous namespace)::PluginView::~PluginView (this=0x7fd1d018f680, __in_chrg=<optimized out>) at ../../../Source/WebCore/plugins/PluginView.cpp:314 #14 0x0000003a2b061c80 in deref (this=<optimized out>) at ../../../Source/JavaScriptCore/wtf/RefCounted.h:141 #15 derefIfNotNull<WebCore::Widget> (ptr=<optimized out>) at ../../../Source/JavaScriptCore/wtf/PassRefPtr.h:59 #16 derefIfNotNull<WebCore::Widget> (ptr=<optimized out>) at ../../../Source/JavaScriptCore/wtf/HashTable.h:888 #17 ~RefPtr (this=<optimized out>, __in_chrg=<optimized out>) at ../../../Source/JavaScriptCore/wtf/RefPtr.h:58 #18 ~pair (this=<optimized out>, __in_chrg=<optimized out>) at /usr/include/c++/4.6.2/bits/stl_pair.h:87 #19 WTF::HashTable<WTF::RefPtr<WebCore::Widget>, std::pair<WTF::RefPtr<WebCore::Widget>, WebCore::FrameView*>, WTF::PairFirstExtractor<std::pair<WTF::RefPtr<WebCore::Widget>, WebCore::FrameView*> >, WTF::PtrHash<WTF::RefPtr<WebCore::Widget> >, WTF::PairHashTraits<WTF::HashTraits<WTF::RefPtr<WebCore::Widget> >, WTF::HashTraits<WebCore::FrameView*> >, WTF::HashTraits<WTF::RefPtr<WebCore::Widget> > >::deallocateTable (table=0x7fd228081000, size=<optimized out>) at ../../../Source/JavaScriptCore/wtf/HashTable.h:893 #20 0x0000003a2b0629ee in ~HashTable (this=0x7fffb2070800, __in_chrg=<optimized out>) at ../../../Source/JavaScriptCore/wtf/HashTable.h:300 #21 ~HashMap (this=0x7fffb2070800, __in_chrg=<optimized out>) at ../../../Source/JavaScriptCore/wtf/RefPtrHashMap.h:48 #22 WebCore::RenderWidget::resumeWidgetHierarchyUpdates () at ../../../Source/WebCore/rendering/RenderWidget.cpp:68 #23 0x0000003a2ac40d44 in WebCore::ContainerNode::detach (this=0x7fd228038800) at ../../../Source/WebCore/dom/ContainerNode.cpp:761 #24 0x0000003a2ac5d01a in WebCore::Document::detach (this=0x7fd228038800) at ../../../Source/WebCore/dom/Document.cpp:1776 #25 0x0000003a2aed4990 in WebCore::Frame::setView (this=0x7fd229da0400, view=...) at ../../../Source/WebCore/page/Frame.cpp:272 #26 0x0000003a2aed682f in WebCore::Frame::createView (this=0x7fd229da0400, viewportSize=..., backgroundColor=..., transparent=false, fixedLayoutSize=..., useFixedLayout=false, horizontalScrollbarMode=(anonymous namespace)::ScrollbarAuto, horizontalLock=false, verticalScrollbarMode=(anonymous namespace)::ScrollbarAuto, verticalLock=false) at ../../../Source/WebCore/page/Frame.cpp:907 #27 0x0000003a2ab00c35 in WebCore::FrameLoaderClientQt::transitionToCommittedForNewPage (this=0x1648fe0) at ../../../../Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:286 #28 0x0000003a2ae6bf35 in WebCore::FrameLoader::transitionToCommitted (this=0x7fd229da0478, cachedPage=...) at ../../../Source/WebCore/loader/FrameLoader.cpp:2136 #29 0x0000003a2ae6ed2f in WebCore::FrameLoader::commitProvisionalLoad (this=0x7fd229da0478) at ../../../Source/WebCore/loader/FrameLoader.cpp:1979 #30 0x0000003a2ae5a18a in WebCore::DocumentLoader::commitLoad (this=0x7fd1d0436800, data=0x4486b98 "<!DOCTYPE html>\n <html lang=\"en\" dir=\"ltr\" >\n\n<!-- machid: iNzNhOC1UcDVBajF2aEdwZ19fb055ZnlIM1Fnc0E2LUtpUFYzNXB2d3lZVFJsV2Z6c3JfaWlR -->\n<head>\n \n <script>\nvar yt = yt || {};yt.timing = yt.ti"..., length=1909) at ../../../Source/WebCore/loader/DocumentLoader.cpp:299 #31 0x0000003a2ae91af1 in WebCore::ResourceLoader::didReceiveData (this=0x7fd1d02a9000, data=0x4486b98 "<!DOCTYPE html>\n <html lang=\"en\" dir=\"ltr\" >\n\n<!-- machid: iNzNhOC1UcDVBajF2aEdwZ19fb055ZnlIM1Fnc0E2LUtpUFYzNXB2d3lZVFJsV2Z6c3JfaWlR -->\n<head>\n \n <script>\nvar yt = yt || {};yt.timing = yt.ti"..., length=1909, encodedDataLength=-1, allAtOnce=<optimized out>) at ../../../Source/WebCore/loader/ResourceLoader.cpp:279 #32 0x0000003a2ae7ebc5 in WebCore::MainResourceLoader::didReceiveData (this=0x7fd1d02a9000, data=0x4486b98 "<!DOCTYPE html>\n <html lang=\"en\" dir=\"ltr\" >\n\n<!-- machid: iNzNhOC1UcDVBajF2aEdwZ19fb055ZnlIM1Fnc0E2LUtpUFYzNXB2d3lZVFJsV2Z6c3JfaWlR -->\n<head>\n \n <script>\nvar yt = yt || {};yt.timing = yt.ti"..., length=1909, encodedDataLength=-1, allAtOnce=false) at ../../../Source/WebCore/loader/MainResourceLoader.cpp:463 #33 0x0000003a2ae90542 in WebCore::ResourceLoader::didReceiveData (this=0x7fd1d02a9000, data=0x4486b98 "<!DOCTYPE html>\n <html lang=\"en\" dir=\"ltr\" >\n\n<!-- machid: iNzNhOC1UcDVBajF2aEdwZ19fb055ZnlIM1Fnc0E2LUtpUFYzNXB2d3lZVFJsV2Z6c3JfaWlR -->\n<head>\n \n <script>\nvar yt = yt || {};yt.timing = yt.ti"..., length=1909, encodedDataLength=-1) at ../../../Source/WebCore/loader/ResourceLoader.cpp:430 #34 0x0000003a2b091e8d in WebCore::QNetworkReplyHandler::forwardData (this=0x44f5f00) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:598 #35 0x0000003a2b09401a in flush (this=0x44f5f38) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:195 #36 WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x44f5f38) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:187 #37 0x0000003a2b094bea in ~QueueLocker (this=<synthetic pointer>, __in_chrg=<optimized out>) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:203 #38 WebCore::QNetworkReplyWrapper::emitMetaDataChanged (this=0x3e914c0) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:320 #39 0x0000003a2b094cbc in WebCore::QNetworkReplyWrapper::receiveSniffedMIMEType (this=0x3e914c0) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:305 #40 0x0000003a2b094f1b in WebCore::QNetworkReplyWrapper::receiveMetaData (this=0x3e914c0) at ../../../Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:291 #41 0x0000003a2018cce1 in QMetaObject::activate (sender=0x3fa8a00, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3547 #42 0x0000003a2018cce1 in QMetaObject::activate (sender=0x19619f0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb20711b0) at kernel/qobject.cpp:3547 #43 0x0000003a256fdc04 in KIO::TransferJob::data (this=<optimized out>, _t1=0x19619f0, _t2=<optimized out>) at /usr/src/debug/kdelibs-4.7.97/x86_64-redhat-linux-gnu/kio/jobclasses.moc:447 #44 0x0000003a256fdc68 in KIO::TransferJob::slotData (this=0x19619f0, _data=...) at /usr/src/debug/kdelibs-4.7.97/kio/kio/job.cpp:981 #45 0x0000003a2018cce1 in QMetaObject::activate (sender=0x165b700, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb2071380) at kernel/qobject.cpp:3547 #46 0x0000003a257a64e2 in KIO::SlaveInterface::data (this=<optimized out>, _t1=<optimized out>) at /usr/src/debug/kdelibs-4.7.97/x86_64-redhat-linux-gnu/kio/slaveinterface.moc:160 #47 0x0000003a257a9730 in KIO::SlaveInterface::dispatch (this=<optimized out>, _cmd=100, rawdata=...) at /usr/src/debug/kdelibs-4.7.97/kio/kio/slaveinterface.cpp:160 #48 0x0000003a257a5ef5 in KIO::SlaveInterface::dispatch (this=0x165b700) at /usr/src/debug/kdelibs-4.7.97/kio/kio/slaveinterface.cpp:88 #49 0x0000003a25798fde in KIO::Slave::gotInput (this=0x165b700) at /usr/src/debug/kdelibs-4.7.97/kio/kio/slave.cpp:344 #50 0x0000003a2018cce1 in QMetaObject::activate (sender=0x3e646e0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3547 #51 0x0000003a256cd2f7 in dequeue (this=<optimized out>) at /usr/src/debug/kdelibs-4.7.97/kio/kio/connection.cpp:82 #52 KIO::ConnectionPrivate::dequeue (this=0x3e8a760) at /usr/src/debug/kdelibs-4.7.97/kio/kio/connection.cpp:71 #53 0x0000003a20191f16 in QObject::event (this=0x3e646e0, e=<optimized out>) at kernel/qobject.cpp:1195 #54 0x0000003a207c9994 in notify_helper (e=0x403ad60, receiver=0x3e646e0, this=0x13a7970) at kernel/qapplication.cpp:4550 #55 QApplicationPrivate::notify_helper (this=0x13a7970, receiver=0x3e646e0, e=0x403ad60) at kernel/qapplication.cpp:4522 #56 0x0000003a207ce813 in QApplication::notify (this=0x7fffb20721c0, receiver=0x3e646e0, e=0x403ad60) at kernel/qapplication.cpp:4411 #57 0x0000003a23850eb6 in KApplication::notify (this=0x7fffb20721c0, receiver=0x3e646e0, event=0x403ad60) at /usr/src/debug/kdelibs-4.7.97/kdeui/kernel/kapplication.cpp:311 #58 0x0000003a2017904c in QCoreApplication::notifyInternal (this=0x7fffb20721c0, receiver=0x3e646e0, event=0x403ad60) at kernel/qcoreapplication.cpp:876 #59 0x0000003a2017cada in sendEvent (event=0x403ad60, receiver=0x3e646e0) at kernel/qcoreapplication.h:231 #60 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x136d4d0) at kernel/qcoreapplication.cpp:1500 #61 0x0000003a201a7933 in sendPostedEvents () at kernel/qcoreapplication.h:236 #62 postEventSourceDispatch (s=0x13a5000) at kernel/qeventdispatcher_glib.cpp:279 #63 0x0000003f08c44acd in g_main_dispatch (context=0x13a3600) at gmain.c:2441 #64 g_main_context_dispatch (context=0x13a3600) at gmain.c:3011 #65 0x0000003f08c452c8 in g_main_context_iterate (context=0x13a3600, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3089 #66 0x0000003f08c4549c in g_main_context_iteration (context=0x13a3600, may_block=1) at gmain.c:3152 #67 0x0000003a201a7d5f in QEventDispatcherGlib::processEvents (this=0x136e990, flags=<optimized out>) at kernel/qeventdispatcher_glib.cpp:424 #68 0x0000003a2086c66e in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=<optimized out>) at kernel/qguieventdispatcher_glib.cpp:207 #69 0x0000003a20178182 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149 #70 0x0000003a201783d7 in QEventLoop::exec (this=0x7fffb2072150, flags=...) at kernel/qeventloop.cpp:204 #71 0x0000003a2017cdd5 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1148 #72 0x0000003a272e6397 in kdemain (argc=1, argv=<optimized out>) at /usr/src/debug/rekonq-0.7.0/src/main.cpp:215 #73 0x0000003b01e2169d in __libc_start_main (main=0x4007c0 <main(int, char**)>, argc=1, ubp_av=0x7fffb2072b48, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffb2072b38) at libc-start.c:226 #74 0x00000000004007f1 in _start ()
Attachments
Add attachment proposed patch, testcase, etc.
Rex Dieter
Comment 1 2012-01-17 12:13:36 PST
See also downstream report, https://bugzilla.redhat.com/show_bug.cgi?id=761342
Rex Dieter
Comment 2 2012-01-17 12:17:47 PST
more data, since there's implications glib may be involved, $ rpm -q glib2 gtk2 glib2-2.30.2-1.fc16.x86_64 glib2-2.30.2-1.fc16.i686 gtk2-2.24.8-3.fc16.i686 gtk2-2.24.8-3.fc16.x86_64
Rex Dieter
Comment 3 2012-01-31 16:54:24 PST
found reference @ adobe tracker, https://bugbase.adobe.com/index.cfm?event=bug&id=3075423
Rex Dieter
Comment 4 2012-01-31 17:13:44 PST
found flash-plugin-11.2 beta to test, and crashes seem gone.
Note You need to log in before you can comment on or make changes to this bug.