konq crashes when saving a file from a web site

[matt_hargett]

Binary package hint: kdebase

steps:
 go to http://www.glexcess.com/files.htm . click the 1.2V full download link, when the popup appears, click on the link inside, and press 'save' in the save file dialog. the stack trace is below.

1) ubuntu hardy rc
2) latest packages as of 4/21 @ 7:30pm PST
3)expected the file to save correctly and for konq to not crash
4) konq crashes

stack trace:
[KCrash handler]
#5 0x00007f49b8e9df58 in QShared::ref () from /usr/lib/libqt-mt.so.3
#6 0x00007f49b927f28d in QString::operator= () from /usr/lib/libqt-mt.so.3
#7 0x00007f49b9890362 in KURL::operator= () from /usr/lib/libkdecore.so.4
#8 0x00007f49b9e357c2 in QValueListPrivate<KURL>::insert ()
   from /usr/lib/libkio.so.4
#9 0x00007f49b9e0a73f in KIO::copy () from /usr/lib/libkio.so.4
#10 0x00007f49bad59237 in KParts::BrowserRun::simpleSave ()
   from /usr/lib/libkparts.so.2
#11 0x00007f49bad5c217 in KParts::BrowserRun::handleNonEmbeddable ()
   from /usr/lib/libkparts.so.2
#12 0x00007f49b2b9a878 in KonqRun::foundMimeType ()
   from /usr/lib/libkdeinit_konqueror.so
#13 0x00007f49bad5c6df in KParts::BrowserRun::slotBrowserMimetype ()
   from /usr/lib/libkparts.so.2
#14 0x00007f49bad5c870 in KParts::BrowserRun::qt_invoke ()
   from /usr/lib/libkparts.so.2
#15 0x00007f49b2b690bd in KonqRun::qt_invoke ()
   from /usr/lib/libkdeinit_konqueror.so
#16 0x00007f49b8f75fd0 in QObject::activate_signal ()
   from /usr/lib/libqt-mt.so.3
#17 0x00007f49b9dcdc7e in KIO::TransferJob::mimetype ()
   from /usr/lib/libkio.so.4
#18 0x00007f49b9e06863 in KIO::TransferJob::qt_invoke ()
   from /usr/lib/libkio.so.4
#19 0x00007f49b8f75fd0 in QObject::activate_signal ()
   from /usr/lib/libqt-mt.so.3
#20 0x00007f49b8f7656b in QObject::activate_signal ()
   from /usr/lib/libqt-mt.so.3
#21 0x00007f49b9dd97b8 in KIO::SlaveInterface::mimeType ()
   from /usr/lib/libkio.so.4
#22 0x00007f49b9e1b4d6 in KIO::SlaveInterface::dispatch ()
   from /usr/lib/libkio.so.4
#23 0x00007f49b9e3398e in KIO::SlaveInterface::dispatch ()
   from /usr/lib/libkio.so.4
#24 0x00007f49b9ddac86 in KIO::Slave::gotInput () from /usr/lib/libkio.so.4
#25 0x00007f49b9e14198 in KIO::Slave::qt_invoke () from /usr/lib/libkio.so.4
#26 0x00007f49b8f75fd0 in QObject::activate_signal ()
   from /usr/lib/libqt-mt.so.3
#27 0x00007f49b8f769a5 in QObject::activate_signal ()
   from /usr/lib/libqt-mt.so.3
#28 0x00007f49b92ef02c in QSocketNotifier::activated ()
   from /usr/lib/libqt-mt.so.3
#29 0x00007f49b8f96db0 in QSocketNotifier::event ()
   from /usr/lib/libqt-mt.so.3
#30 0x00007f49b8f0e33a in QApplication::internalNotify ()
   from /usr/lib/libqt-mt.so.3
#31 0x00007f49b8f10093 in QApplication::notify () from /usr/lib/libqt-mt.so.3
#32 0x00007f49b997b40d in KApplication::notify ()
   from /usr/lib/libkdecore.so.4
#33 0x00007f49b8e9f20e in QApplication::sendEvent ()
   from /usr/lib/libqt-mt.so.3
#34 0x00007f49b8f00a6b in QEventLoop::activateSocketNotifiers ()
   from /usr/lib/libqt-mt.so.3
#35 0x00007f49b8eb40e8 in QEventLoop::processEvents ()
   from /usr/lib/libqt-mt.so.3
#36 0x00007f49b8f285bf in QEventLoop::enterLoop () from /usr/lib/libqt-mt.so.3
#37 0x00007f49b8f282ab in QEventLoop::exec () from /usr/lib/libqt-mt.so.3
#38 0x00007f49b8f0fe00 in QApplication::exec () from /usr/lib/libqt-mt.so.3
#39 0x00007f49b2ba4ad1 in kdemain () from /usr/lib/libkdeinit_konqueror.so
#40 0x0000000000408018 in ?? ()
#41 0x00000000004087b1 in ?? ()
#42 0x0000000000408ce9 in ?? ()
#43 0x0000000000409652 in ?? ()
#44 0x00007f49ba2441c4 in __libc_start_main () from /lib/libc.so.6
#45 0x0000000000404e39 in ?? ()
#46 0x00007fffc3199cd8 in ?? ()
#47 0x0000000000000000 in ?? ()

valgrind info before crash:
==29399== Invalid read of size 8
==29399== at 0x617E204: KParts::BrowserRun::handleNonEmbeddable(QString const&) (in /usr/lib/libkparts.so.2.1.0)
==29399== by 0x4EDF877: KonqRun::foundMimeType(QString const&) (in /usr/lib/libkdeinit_konqueror.so)
==29399== by 0x617E6DE: KParts::BrowserRun::slotBrowserMimetype(KIO::Job*, QString const&) (in /usr/lib/libkparts.so.2.1.0)
==29399== by 0x617E86F: KParts::BrowserRun::qt_invoke(int, QUObject*) (in /usr/lib/libkparts.so.2.1.0)
==29399== by 0x4EAE0BC: KonqRun::qt_invoke(int, QUObject*) (in /usr/lib/libkdeinit_konqueror.so)
==29399== by 0x9343FCF: QObject::activate_signal(QConnectionList*, QUObject*) (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x6524C7D: KIO::TransferJob::mimetype(KIO::Job*, QString const&) (in /usr/lib/libkio.so.4.2.0)
==29399== by 0x655D862: KIO::TransferJob::qt_invoke(int, QUObject*) (in /usr/lib/libkio.so.4.2.0)
==29399== by 0x9343FCF: QObject::activate_signal(QConnectionList*, QUObject*) (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x934456A: QObject::activate_signal(int, QString) (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x65307B7: KIO::SlaveInterface::mimeType(QString const&) (in /usr/lib/libkio.so.4.2.0)
==29399== by 0x65724D5: KIO::SlaveInterface::dispatch(int, QMemArray<char> const&) (in /usr/lib/libkio.so.4.2.0)
==29399== Address 0x141f1bb0 is 0 bytes inside a block of size 624 free'd
==29399== at 0x4C22B3D: operator delete(void*) (vg_replace_malloc.c:342)
==29399== by 0x65B7145: KRun::slotTimeout() (in /usr/lib/libkio.so.4.2.0)
==29399== by 0x660311B: KRun::qt_invoke(int, QUObject*) (in /usr/lib/libkio.so.4.2.0)
==29399== by 0x617E813: KParts::BrowserRun::qt_invoke(int, QUObject*) (in /usr/lib/libkparts.so.2.1.0)
==29399== by 0x4EAE0BC: KonqRun::qt_invoke(int, QUObject*) (in /usr/lib/libkdeinit_konqueror.so)
==29399== by 0x9343FCF: QObject::activate_signal(QConnectionList*, QUObject*) (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x9344B4D: QObject::activate_signal(int) (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x96BE495: QTimer::timeout() (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x9369D82: QTimer::event(QEvent*) (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x92DC339: QApplication::internalNotify(QObject*, QEvent*) (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x92DE092: QApplication::notify(QObject*, QEvent*) (in /usr/lib/libqt-mt.so.3.3.8)
==29399== by 0x7B5940C: KApplication::notify(QObject*, QEvent*) (in /usr/lib/libkdecore.so.4.2.0)

[Marcus Asshauer (mcas)]

Thank you for reporting this bug. I can save your file with Konqueror 3 and 4 with all updates of 22. April.

[Jonathan Thomas (echidnaman)]

Not an issue in Kubuntu Intrepid (8.10)
Thanks for the bug report.