Sporadic konqi crash

[George Staikos]

I seem to get a random crash in konq_main.cc:142.  The code is as follows:

     if ( w->testWFlags( Qt::WDestructiveClose ) )
          delete w;

Of course it happens on exit from konqueror.  Most often it seems to trigger 
when I run konqi from the command line to open a local .html file.  
Unfortunately I haven't found a way to trigger it consistently.  Nonetheless, 
it happens regularily enough to be a problem.

I have not managed to trigger the crash while running inside valgrind.  
However, valgrind errors that I have seen in a recent run follow.  Anyone 
have an idea?

=11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x45DFFBB2 is 70 bytes inside a block of size 156 free'd
==11276==    at 0x40063FBF: __builtin_delete (vg_clientmalloc.c:681)
==11276==    by 0x40DFFDE8: QObject::~QObject(void) (kernel/qobject.cpp:444)
==11276==    by 0x40E37DFC: QWidget::~QWidget(void) (kernel/qwidget.cpp:884)
==11276==    by 0x41247FAB: ??? (.moc/debug-shared-mt/moc_qframe.cpp:29)
==11276==
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x4724E286 is 70 bytes inside a block of size 180 free'd
==11276==    at 0x40063FBF: __builtin_delete (vg_clientmalloc.c:681)
==11276==    by 0x40DFFDE8: QObject::~QObject(void) (kernel/qobject.cpp:444)
==11276==    by 0x40E37DFC: QWidget::~QWidget(void) (kernel/qwidget.cpp:884)
==11276==    by 0x41247FAB: ??? (.moc/debug-shared-mt/moc_qframe.cpp:29)
==11276==
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x45D981AA is 70 bytes inside a block of size 204 free'd
==11276==    at 0x40063FBF: __builtin_delete (vg_clientmalloc.c:681)
==11276==    by 0x40DFFDE8: QObject::~QObject(void) (kernel/qobject.cpp:444)
==11276==    by 0x40E37DFC: QWidget::~QWidget(void) (kernel/qwidget.cpp:884)
==11276==    by 0x41247FAB: ??? (.moc/debug-shared-mt/moc_qframe.cpp:29)
==11276==
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x4195714E is 70 bytes inside a block of size 208 free'd
==11276==    at 0x40063FBF: __builtin_delete (vg_clientmalloc.c:681)
==11276==    by 0x40DFFDE8: QObject::~QObject(void) (kernel/qobject.cpp:444)
==11276==    by 0x40E37DFC: QWidget::~QWidget(void) (kernel/qwidget.cpp:884)
==11276==    by 0x41247FAB: ??? (.moc/debug-shared-mt/moc_qframe.cpp:29)
==11276==
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x472FF2F2 is 70 bytes inside a block of size 128 free'd
==11276==    at 0x4006402F: __builtin_vec_delete (vg_clientmalloc.c:698)
==11276==    by 0x41235163: ??? (tools/qstring.h:342)
==11276==    by 0x410C6056: QStringData::deleteSelf(void) 
(tools/qstring.cpp:13345)
==11276==    by 0x40756CF5: KAction::slotDestroyed(void) 
(/opt/qt-copy/include/qstring.h:746)
==11276==
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x48670BA6 is not stack'd, malloc'd or free'd

=11276== ERROR SUMMARY: 49 errors from 9 contexts (suppressed: 167 from 5)
==11276==
==11276== 1 errors in context 1 of 9:
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x472FF2F2 is 70 bytes inside a block of size 128 free'd
==11276==    at 0x4006402F: __builtin_vec_delete (vg_clientmalloc.c:698)
==11276==    by 0x41235163: ??? (tools/qstring.h:342)
==11276==    by 0x410C6056: QStringData::deleteSelf(void) 
(tools/qstring.cpp:13345)
==11276==    by 0x40756CF5: KAction::slotDestroyed(void) 
(/opt/qt-copy/include/qstring.h:746)
==11276==
==11276== 1 errors in context 2 of 9:
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x4724E286 is 70 bytes inside a block of size 180 free'd
==11276==    at 0x40063FBF: __builtin_delete (vg_clientmalloc.c:681)
==11276==    by 0x40DFFDE8: QObject::~QObject(void) (kernel/qobject.cpp:444)
==11276==    by 0x40E37DFC: QWidget::~QWidget(void) (kernel/qwidget.cpp:884)
==11276==    by 0x41247FAB: ??? (.moc/debug-shared-mt/moc_qframe.cpp:29)
==11276==
==11276== 1 errors in context 3 of 9:
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x45DFFBB2 is 70 bytes inside a block of size 156 free'd
==11276==    at 0x40063FBF: __builtin_delete (vg_clientmalloc.c:681)
==11276==    by 0x40DFFDE8: QObject::~QObject(void) (kernel/qobject.cpp:444)
==11276==    by 0x40E37DFC: QWidget::~QWidget(void) (kernel/qwidget.cpp:884)
==11276==    by 0x41247FAB: ??? (.moc/debug-shared-mt/moc_qframe.cpp:29)
==11276==
==11276== 1 errors in context 4 of 9:
==11276== Use of uninitialised CPU condition code
==11276==    at 0x41815F6C: __strchrnul (in /lib/libc.so.6)
==11276==    by 0x4187E4B0: __nss_database_lookup (in /lib/libc.so.6)
==11276==    by 0x41880258: __nss_passwd_lookup (in /lib/libc.so.6)
==11276==    by 0x41841B16: getpwuid_r@@GLIBC_2.1.2 (in /lib/libc.so.6)
==11276==
==11276== 1 errors in context 5 of 9:
==11276== Use of uninitialised CPU condition code
==11276==    at 0x41815F5C: __strchrnul (in /lib/libc.so.6)
==11276==    by 0x4187E4B0: __nss_database_lookup (in /lib/libc.so.6)
==11276==    by 0x41880258: __nss_passwd_lookup (in /lib/libc.so.6)
==11276==    by 0x41841B16: getpwuid_r@@GLIBC_2.1.2 (in /lib/libc.so.6)
==11276==
==11276== 6 errors in context 6 of 9:
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x45D981AA is 70 bytes inside a block of size 204 free'd
==11276==    at 0x40063FBF: __builtin_delete (vg_clientmalloc.c:681)
==11276==    by 0x40DFFDE8: QObject::~QObject(void) (kernel/qobject.cpp:444)
==11276==    by 0x40E37DFC: QWidget::~QWidget(void) (kernel/qwidget.cpp:884)
==11276==    by 0x41247FAB: ??? (.moc/debug-shared-mt/moc_qframe.cpp:29)
==11276==
==11276== 9 errors in context 7 of 9:
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x48670BA6 is not stack'd, malloc'd or free'd
==11276==
==11276== 10 errors in context 8 of 9:
==11276== Syscall param write(buf) contains uninitialised or unaddressable 
byte(s)
==11276==    at 0x41865D12: __libc_write (in /lib/libc.so.6)
==11276==    by 0x416B8241: _IceTransSocketWrite (in 
/usr/X11R6/lib/libICE.so.6.3)
==11276==    by 0x416B90ED: _IceTransWrite (in /usr/X11R6/lib/libICE.so.6.3)
==11276==    by 0x416AFA8C: _IceWrite (in /usr/X11R6/lib/libICE.so.6.3)
==11276==    Address 0x46E256E7 is 3 bytes inside a block of size 1024 alloc'd
==11276==    at 0x40063D5B: malloc (vg_clientmalloc.c:590)
==11276==    by 0x416AC5E0: IceOpenConnection (in 
/usr/X11R6/lib/libICE.so.6.3)
==11276==    by 0x416A031A: SmcOpenConnection (in /usr/X11R6/lib/libSM.so.6.0)
==11276==    by 0x40D441A3: QSessionManager::QSessionManager(QApplication *, 
QString &, QString &) (kernel/qapplication_x11.cpp:5942)
==11276==
==11276== 19 errors in context 9 of 9:
==11276== Invalid read of size 1
==11276==    at 0x402E2B6F: main (konq_main.cc:147)
==11276==    by 0x417B77EE: __libc_start_main (in /lib/libc.so.6)
==11276==    by 0x8048601: __libc_start_main@@GLIBC_2.0 (in 
/opt/kde-devel/bin/konqueror)
==11276==    by <bogus frame pointer> ???
==11276==    Address 0x4195714E is 70 bytes inside a block of size 208 free'd
==11276==    at 0x40063FBF: __builtin_delete (vg_clientmalloc.c:681)
==11276==    by 0x40DFFDE8: QObject::~QObject(void) (kernel/qobject.cpp:444)
==11276==    by 0x40E37DFC: QWidget::~QWidget(void) (kernel/qwidget.cpp:884)
==11276==    by 0x41247FAB: ??? (.moc/debug-shared-mt/moc_qframe.cpp:29)



-- 

George Staikos