[Webkit-unassigned] [Bug 74108] [Qt] Incorrect deletion of m_replyWrapper in QtNetworkReplyHandler::finish

Fri Dec 9 11:43:10 PST 2011

https://bugs.webkit.org/show_bug.cgi?id=74108


--- Comment #6 from Dawit A. <adawit at kde.org>  2011-12-09 11:43:10 PST ---
Follow frame #11 back to #6 and you will see the QNetworkReplyWrapper being deleted in QNetworkReplyHander::finish. Unfortunately, the call to QNetworkReplyHandler::finish originated from the very same QNetworkReplyWrapper (QNetworkReplyWrapper::didReceiveFinished) that was deleted!! Nasty. No clue why this does not cause more crashes.

Thread 1 (Thread 0x7f449159f760 (LWP 27531)):
[KCrash Handler]
#6  0x00007f447d7831f8 in WTF::deleteOwnedPtr<WebCore::QNetworkReplyWrapper> (ptr=0x154fcd8) at /usr/local/src/Misc/webkit/Source/JavaScriptCore/wtf/OwnPtrCommon.h:59
#7  0x00007f447d782bfb in WTF::OwnPtr<WebCore::QNetworkReplyWrapper>::operator= (this=0x154fcd0, o=...) at /usr/local/src/Misc/webkit/Source/JavaScriptCore/wtf/OwnPtr.h:136
#8  0x00007f447d77ff95 in WebCore::QNetworkReplyHandler::finish (this=0x154fcc0) at /usr/local/src/Misc/webkit/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:468
#9  0x00007f447d77e4a1 in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x154fcf8) at /usr/local/src/Misc/webkit/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:195
#10 0x00007f447d77e387 in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x154fcf8, method=(void (WebCore::QNetworkReplyHandler::*)(WebCore::QNetworkReplyHandler * const)) 0x7f447d77f980 <WebCore::QNetworkReplyHandler::finish()>) at /usr/local/src/Misc/webkit/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:164
#11 0x00007f447d77f37c in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0x1815710) at /usr/local/src/Misc/webkit/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:349
#12 0x00007f447d782380 in WebCore::QNetworkReplyWrapper::qt_metacall (this=0x1815710, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x7fffc5b007c0) at ./moc_QNetworkReplyHandler.cpp:80
#13 0x00007f448e1fa5ea in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#14 0x00007f449014274c in KDEPrivate::AccessManagerReply::slotResult (this=0x18c8a10, kJob=0x18f30c0) at /usr/local/src/KDE/git/kdelibs/kio/kio/accessmanagerreply_p.cpp:366
#15 0x00007f44901428a3 in KDEPrivate::AccessManagerReply::qt_metacall (this=0x18c8a10, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fffc5b00970) at /usr/local/build/KDE/git/kdelibs/kio/accessmanagerreply_p.moc:84
#16 0x00007f448e1fa5ea in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#17 0x00007f448e662022 in KJob::result (this=<optimized out>, _t1=0x18f30c0) at /usr/local/build/KDE/git/kdelibs/kdecore/kjob.moc:194
#18 0x00007f448e662060 in KJob::emitResult (this=0x18f30c0) at /usr/local/src/KDE/git/kdelibs/kdecore/jobs/kjob.cpp:312
#19 0x00007f449017a894 in KIO::SimpleJob::slotFinished (this=0x18f30c0) at /usr/local/src/KDE/git/kdelibs/kio/kio/job.cpp:494
#20 0x00007f449018233d in KIO::TransferJob::slotFinished (this=0x18f30c0) at /usr/local/src/KDE/git/kdelibs/kio/kio/job.cpp:1081
#21 0x00007f4490180ca1 in KIO::TransferJob::qt_metacall (this=0x18f30c0, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fffc5b00d20) at /usr/local/build/KDE/git/kdelibs/kio/jobclasses.moc:369
#22 0x00007f448e1fa5ea in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#23 0x00007f4490228b81 in KIO::SlaveInterface::dispatch (this=<optimized out>, _cmd=104, rawdata=...) at /usr/local/src/KDE/git/kdelibs/kio/kio/slaveinterface.cpp:172
#24 0x00007f4490225a35 in KIO::SlaveInterface::dispatch (this=<optimized out>) at /usr/local/src/KDE/git/kdelibs/kio/kio/slaveinterface.cpp:88
#25 0x00007f4490218c0e in KIO::Slave::gotInput (this=0x130bbf0) at /usr/local/src/KDE/git/kdelibs/kio/kio/slave.cpp:344
#26 0x00007f449021936c in KIO::Slave::qt_metacall (this=0x130bbf0, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fffc5b01150) at /usr/local/build/KDE/git/kdelibs/kio/slave.moc:82
#27 0x00007f448e1fa5ea in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#28 0x00007f449014b357 in dequeue (this=<optimized out>) at /usr/local/src/KDE/git/kdelibs/kio/kio/connection.cpp:82
#29 KIO::ConnectionPrivate::dequeue (this=0x131da40) at /usr/local/src/KDE/git/kdelibs/kio/kio/connection.cpp:71
#30 0x00007f449014b3fd in KIO::Connection::qt_metacall (this=0x13129a0, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x142f3e0) at /usr/local/build/KDE/git/kdelibs/kio/connection.moc:79
#31 0x00007f448e1fe18e in QObject::event(QEvent*) () from /usr/lib/libQtCore.so.4
#32 0x00007f448d128ae4 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib/libQtGui.so.4
#33 0x00007f448d12d951 in QApplication::notify(QObject*, QEvent*) () from /usr/lib/libQtGui.so.4
#34 0x00007f448eebce86 in KApplication::notify (this=0x7fffc5b01b60, receiver=0x13129a0, event=0x1807340) at /usr/local/src/KDE/git/kdelibs/kdeui/kernel/kapplication.cpp:311
#35 0x00007f448e1e789c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/libQtCore.so.4
#36 0x00007f448e1eac2f in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/lib/libQtCore.so.4
#37 0x00007f448e2121a3 in ?? () from /usr/lib/libQtCore.so.4
#38 0x00007f4487aa984d in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#39 0x00007f4487aaa048 in ?? () from /usr/lib/libglib-2.0.so.0
#40 0x00007f4487aaa219 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#41 0x00007f448e212606 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#42 0x00007f448d1cbeee in ?? () from /usr/lib/libQtGui.so.4
#43 0x00007f448e1e6a92 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#44 0x00007f448e1e6c97 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#45 0x00007f448e1eaeab in QCoreApplication::exec() () from /usr/lib/libQtCore.so.4
#46 0x00007f449119af72 in kdemain (argc=<optimized out>, argv=<optimized out>) at /usr/local/src/KDE/git/kdebase/kde-baseapps/konqueror/src/konqmain.cpp:227
#47 0x00007f448b2c717d in __libc_start_main () from /lib/libc.so.6
#48 0x00000000004007f1 in _start ()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.