Bug#673483: konqueror: segfaults often on armel (inside libkhtml.so.5)

To: Pino Toscano <pino@debian.org>
Cc: 673483@bugs.debian.org
Subject: Bug#673483: konqueror: segfaults often on armel (inside libkhtml.so.5)
From: Timo Juhani Lindfors <timo.lindfors@iki.fi>
Date: Fri, 25 May 2012 15:53:30 +0300
Message-id: <848vggmng5.fsf@sauna.l.org>
Reply-to: Timo Juhani Lindfors <timo.lindfors@iki.fi>, 673483@bugs.debian.org
In-reply-to: <201205251401.45447.pino@debian.org> (Pino Toscano's message of "Fri, 25 May 2012 14:01:37 +0200")
References: <84likpw2iw.fsf@sauna.l.org> <201205251401.45447.pino@debian.org>

Pino Toscano <pino@debian.org> writes:
>> 2) browse different web sites for a while
>
> Hm, a bit generic :/
> What could help to narrow the problem a bit more is:
> - does the problem happen when navigating to a specific site, or a
>   precise sequence of sites visited?

It seemed to crash in a few minutes even on www.google.com. I just did a
search for "debian bts" and tried to click the first result. I think it
crashes before it fully rendered the results page.

Is there some preferred test site I should be using?

> - does the same problem happen also on e.g. i386/amd64?

Nope.

> The backtrace does not seem to be much useful; what could improve it a 
> bit more is installing kdelibs5-dbg. I'm not sure whether it could be a 
> problem having "big" debug symbols on an embedded board like that -- 

No problem at all. I recorded a screencast that shows exactly what I
did:

http://lindi.iki.fi/lindi/screencast/konqueror-armel-crash1.ogv

here's the backtrace:

Application: Konqueror (konqueror), signal: Segmentation fault
Using host libthread_db library "/lib/arm-linux-gnueabi/libthread_db.so.1".
[Current thread is 1 (Thread 0x427fa730 (LWP 2301))]

Thread 2 (Thread 0x4a103420 (LWP 2439)):
#0  __pthread_cond_wait (cond=0x2f3e308, mutex=<optimized out>) at pthread_cond_wait.c:156
#1  0x401e6554 in __pthread_cond_wait (cond=<optimized out>, mutex=0x80) at forward.c:139
#2  0x49e64364 in vlc_cond_wait () from /usr/lib/libvlccore.so.5
#3  0x49df5f28 in ?? () from /usr/lib/libvlccore.so.5
#4  0x49df5f28 in ?? () from /usr/lib/libvlccore.so.5
Backtrace stopped: previous frame identical to this frame (corrupt stack?)

Thread 1 (Thread 0x427fa730 (LWP 2301)):
[KCrash Handler]
#6  calcHash<NoFoldTag> (s=0x0, l=<optimized out>, foldMode=<optimized out>) at ../../khtml/xml/dom_stringimpl.cpp:615
#7  0x45904bb8 in DOM::DOMStringImpl::hash (this=0x3363038) at ../../khtml/xml/dom_stringimpl.cpp:649
#8  0x45a67444 in hash (key=<optimized out>) at ../../khtml/misc/StringHash.h:39
#9  hash (key=<optimized out>) at ../../kjs/wtf/HashTable.h:265
#10 lookupForWriting<DOM::DOMStringImpl*, WTF::IdentityHashTranslator<DOM::DOMStringImpl*, DOM::DOMStringImpl*, khtml::StringHash> > (key=@0x24801c: 0xfff5deb3, this=0x2c27e10) at ../../kjs/wtf/HashTable.h:508
#11 lookupForWriting (key=@0x24801c: 0xfff5deb3, this=0x2c27e10) at ../../kjs/wtf/HashTable.h:344
#12 reinsert (entry=@0x24801c: 0xfff5deb3, this=0x2c27e10) at ../../kjs/wtf/HashTable.h:738
#13 WTF::HashTable<DOM::DOMStringImpl*, DOM::DOMStringImpl*, WTF::IdentityExtractor<DOM::DOMStringImpl*>, khtml::StringHash, WTF::HashTraits<DOM::DOMStringImpl*>, WTF::HashTraits<DOM::DOMStringImpl*> >::rehash (this=0x2c27e10, newTableSize=<optimized out>) at ../../kjs/wtf/HashTable.h:893
#14 0x45a670b4 in shrink (this=0x245690) at ../../kjs/wtf/HashTable.h:358
#15 remove (pos=0xc9a738, this=0x245690) at ../../kjs/wtf/HashTable.h:806
#16 removeAndInvalidateWithoutEntryConsistencyCheck (pos=0xc9a738, this=0x245690) at ../../kjs/wtf/HashTable.h:783
#17 removeWithoutEntryConsistencyCheck (this=0x245690, it=...) at ../../kjs/wtf/HashTable.h:826
#18 remove (it=..., this=0x245690) at ../../kjs/wtf/HashSet.h:225
#19 remove (value=@0xbeb3953c: 0x45a670b4, this=0x245690) at ../../kjs/wtf/HashSet.h:231
#20 khtml::AtomicString::remove (r=0x45a670b4) at ../../khtml/misc/AtomicString.cpp:207
#21 0x45903824 in DOM::DOMStringImpl::~DOMStringImpl (this=0x847358, __in_chrg=<optimized out>) at ../../khtml/xml/dom_stringimpl.cpp:99
#22 0x45b20a38 in deref (this=0x847358) at ../../khtml/misc/shared.h:41
#23 deref (this=0x847358) at ../../khtml/dom/dom_string.cpp:84
#24 DOM::DOMString::~DOMString (this=0xc9a6e0, __in_chrg=<optimized out>) at ../../khtml/dom/dom_string.cpp:86
#25 0x459ffb5c in ~AtomicString (this=0xc9a6e0, __in_chrg=<optimized out>) at ../../khtml/misc/AtomicString.h:32
#26 ~CSSSelector (this=0xc9a6e0, __in_chrg=<optimized out>) at ../../khtml/css/css_base.h:61
#27 qDeleteAll<QList<DOM::CSSSelector*>::const_iterator> (end=..., begin=...) at /usr/include/qt4/QtCore/qalgorithms.h:322
#28 qDeleteAll<QList<DOM::CSSSelector*> > (c=...) at /usr/include/qt4/QtCore/qalgorithms.h:330
#29 DOM::CSSStyleRuleImpl::~CSSStyleRuleImpl (this=0xc9a770, __in_chrg=<optimized out>) at ../../khtml/css/css_ruleimpl.cpp:378
#30 0x459ffcd4 in DOM::CSSStyleRuleImpl::~CSSStyleRuleImpl (this=0xc9a770, __in_chrg=<optimized out>) at ../../khtml/css/css_ruleimpl.cpp:380
#31 0x45a0e21c in DOM::StyleListImpl::~StyleListImpl (this=0x8dcb68, __in_chrg=<optimized out>) at ../../khtml/css/css_base.cpp:123
#32 0x459fab08 in DOM::StyleSheetImpl::~StyleSheetImpl (this=0x8dcb68, __in_chrg=<optimized out>) at ../../khtml/css/css_stylesheetimpl.cpp:83
#33 0x459fdb90 in ~CSSStyleSheetImpl (this=0x8dcb68, __in_chrg=<optimized out>) at ../../khtml/css/css_stylesheetimpl.h:92
#34 DOM::CSSStyleSheetImpl::~CSSStyleSheetImpl (this=0x8dcb68, __in_chrg=<optimized out>) at ../../khtml/css/css_stylesheetimpl.h:92
#35 0x459fd9a4 in khtml::TreeShared<DOM::StyleBaseImpl>::removedLastRef (this=<optimized out>) at ../../khtml/misc/shared.h:59
#36 0x459fd858 in deref (this=<optimized out>) at ../../khtml/misc/shared.h:65
#37 deref (this=<optimized out>) at ../../khtml/css/css_stylesheetimpl.cpp:380
#38 DOM::StyleSheetListImpl::~StyleSheetListImpl (this=0xebe188, __in_chrg=<optimized out>) at ../../khtml/css/css_stylesheetimpl.cpp:383
#39 0x458ea4cc in deref (this=0xebe188) at ../../khtml/misc/shared.h:41
#40 deref (this=<optimized out>) at ../../khtml/xml/dom_docimpl.cpp:501
#41 DOM::DocumentImpl::~DocumentImpl (this=0xcd8438, __in_chrg=<optimized out>) at ../../khtml/xml/dom_docimpl.cpp:527
#42 0x459489a4 in DOM::HTMLDocumentImpl::~HTMLDocumentImpl (this=0xcd8438, __in_chrg=<optimized out>) at ../../khtml/html/html_documentimpl.cpp:80
#43 0x459489e0 in DOM::HTMLDocumentImpl::~HTMLDocumentImpl (this=0xcd8438, __in_chrg=<optimized out>) at ../../khtml/html/html_documentimpl.cpp:80
#44 0x458db080 in selfOnlyDeref (this=0xcd8438) at ../../khtml/xml/dom_docimpl.h:744
#45 ~DocPtr (this=<synthetic pointer>, __in_chrg=<optimized out>) at ../../khtml/misc/shared.h:98
#46 DOM::DocumentImpl::removedLastRef (this=0xcd8438) at ../../khtml/xml/dom_docimpl.cpp:495
#47 0x4588cdac in deref (this=<optimized out>) at ../../khtml/misc/shared.h:65
#48 deref (this=<optimized out>) at ../../khtml/khtml_part.cpp:1470
#49 KHTMLPart::clear (this=0x196a838) at ../../khtml/khtml_part.cpp:1526
#50 0x4588cf78 in KHTMLPart::begin (this=0x196a838, url=..., xOffset=0, yOffset=0) at ../../khtml/khtml_part.cpp:1996
#51 0x458664d4 in KHTMLPart::slotData (this=0x196a838, kio_job=<optimized out>, data=...) at ../../khtml/khtml_part.cpp:1658
#52 0x4588bf94 in KHTMLPart::qt_static_metacall (_o=0x196a838, _c=<optimized out>, _id=<optimized out>, _a=<optimized out>) at ./khtml_part.moc:252
#53 0x40fa5690 in QMetaObject::activate (sender=0x0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x1cb768) at kernel/qobject.cpp:3547
#54 0x405acfd0 in KIO::TransferJob::data (this=<optimized out>, _t1=0x405acfd0, _t2=...) at ./jobclasses.moc:444
#55 0x405ad030 in KIO::TransferJob::slotData (this=0x855060, _data=...) at ../../kio/kio/job.cpp:981
#56 0x405b1fe0 in qt_static_metacall (_a=<optimized out>, _id=<optimized out>, _o=<optimized out>, _c=<optimized out>) at ./jobclasses.moc:386
#57 KIO::TransferJob::qt_static_metacall (_o=<optimized out>, _c=<optimized out>, _id=<optimized out>, _a=<optimized out>) at ./jobclasses.moc:372
#58 0x40fa5690 in QMetaObject::activate (sender=0x0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x9cb750) at kernel/qobject.cpp:3547
#59 0x40665b6c in KIO::SlaveInterface::data (this=<optimized out>, _t1=...) at ./slaveinterface.moc:160
#60 0x40669094 in KIO::SlaveInterface::dispatch (this=0x8ed5d0, _cmd=100, rawdata=...) at ../../kio/kio/slaveinterface.cpp:160
#61 0x40665210 in KIO::SlaveInterface::dispatch (this=<optimized out>) at ../../kio/kio/slaveinterface.cpp:88
#62 0x40655804 in KIO::Slave::gotInput (this=0x8ed5d0) at ../../kio/kio/slave.cpp:344
#63 0x40fa5690 in QMetaObject::activate (sender=0x0, m=<optimized out>, local_signal_index=<optimized out>, argv=0xfd4d0) at kernel/qobject.cpp:3547
#64 0x40579cf8 in KIO::Connection::readyRead (this=<optimized out>) at ./connection.moc:106
#65 0x4057a748 in dequeue (this=<optimized out>) at ../../kio/kio/connection.cpp:82
#66 KIO::ConnectionPrivate::dequeue (this=0x653628) at ../../kio/kio/connection.cpp:71
#67 0x40fa1ec8 in QMetaCallEvent::placeMetaCall (this=<optimized out>, object=<optimized out>) at kernel/qobject.cpp:525
#68 0x40faaedc in QObject::event (this=0x8ed380, e=<optimized out>) at kernel/qobject.cpp:1195
#69 0x4126f760 in notify_helper (e=0x9d1480, receiver=0x8ed380, this=0x33f20) at kernel/qapplication.cpp:4559
#70 QApplicationPrivate::notify_helper (this=0x33f20, receiver=0x8ed380, e=0x9d1480) at kernel/qapplication.cpp:4531
#71 0x41274e64 in QApplication::notify (this=0xbeb3a2e0, receiver=0x8ed380, e=0x9d1480) at kernel/qapplication.cpp:4420
#72 0x40991190 in KApplication::notify (this=0xbeb3a2e0, receiver=0x8ed380, event=0x9d1480) at ../../kdeui/kernel/kapplication.cpp:311
#73 0x40f8f14c in QCoreApplication::notifyInternal (this=0xbeb3a2e0, receiver=0x8ed380, event=0x9d1480) at kernel/qcoreapplication.cpp:876
#74 0x40f93688 in sendEvent (event=0x9d1480, receiver=0x8ed380) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#75 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=1090074248, data=0x12370) at kernel/qcoreapplication.cpp:1500
#76 0x40fc3a84 in sendPostedEvents () at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:236
#77 postEventSourceDispatch (s=<optimized out>) at kernel/qeventdispatcher_glib.cpp:279
#78 0x421d14cc in g_main_context_dispatch () from /lib/arm-linux-gnueabi/libglib-2.0.so.0
#79 0x421d1858 in ?? () from /lib/arm-linux-gnueabi/libglib-2.0.so.0
#80 0x421d1858 in ?? () from /lib/arm-linux-gnueabi/libglib-2.0.so.0
Backtrace stopped: previous frame identical to this frame (corrupt stack?)

Reply to:

References:
- Bug#673483: konqueror: segfaults often on armel (inside libkhtml.so.5)
  - From: Timo Juhani Lindfors <timo.lindfors@iki.fi>
- Bug#673483: konqueror: segfaults often on armel (inside libkhtml.so.5)
  - From: Pino Toscano <pino@debian.org>

Prev by Date: Bug#673483: konqueror: segfaults often on armel (inside libkhtml.so.5)
Next by Date: Bug#613718: marked as done (Remove akonaditray desktop file)
Previous by thread: Bug#673483: konqueror: segfaults often on armel (inside libkhtml.so.5)
Next by thread: kdevelop-php-docs_1.3.1-1_amd64.changes ACCEPTED into experimental
Index(es):
- Date
- Thread