Crash in slab_allocator_free_chunk

Similar reports
Problem #832503
Component
gjs
Last affected version
0:1.74.3-2.fc37
Executable
/usr/bin/gjs-console
Error name
SIGSEGV 11
First occurrence
2024-08-16
Last occurrence
2026-09-20
Unique reports
2
Quality
-70

Statistics

Operating system Unique / Total count
Fedora 37 2 / 2
Operating system Count
Fedora 37 2
Architecture Count
x86_64 2
Related packages Count
google-noto-emoji-color-fonts 2
 0:20220916-2.fc37 2
librsvg2 2
 0:2.54.6-1.fc37 2
gjs 2
 0:1.74.3-2.fc37 2
Show more… (2)
gdouros-symbola-fonts 1
 0:10.24-11.fc37 1
mesa-dri-drivers 1
 0:23.0.3-1.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
slab_allocator_free_chunk
/lib64/libglib-2.0.so.0 0x75d4b
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
2
magazine_cache_push_magazine
/lib64/libglib-2.0.so.0 0x7604e
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
3
g_slice_free1
/lib64/libglib-2.0.so.0 0x763ce
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
4
g_datalist_clear
/lib64/libglib-2.0.so.0 0x380c7
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
5
g_object_unref
/lib64/libgobject-2.0.so.0 0x21bf2
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
6
gtk_center_layout_dispose
/lib64/libgtk-4.so.1 0xfbfea
Build id: 8bb01c282283792a00aed949aafb5f8ec41849a3 		-
7
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
8
gtk_widget_dispose.lto_priv.0
/lib64/libgtk-4.so.1 0x2c0c3d
Build id: 8bb01c282283792a00aed949aafb5f8ec41849a3 		-
9
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
10
gtk_shortcuts_section_dispose
/lib64/libgtk-4.so.1 0x2109d4
Build id: 8bb01c282283792a00aed949aafb5f8ec41849a3 		-
11
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
12
stack_remove
/lib64/libgtk-4.so.1 0x22ba5e
Build id: 8bb01c282283792a00aed949aafb5f8ec41849a3 		-
13
gtk_stack_dispose
/lib64/libgtk-4.so.1 0x22bb05
Build id: 8bb01c282283792a00aed949aafb5f8ec41849a3 		-
14
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
15
gtk_box_dispose
/lib64/libgtk-4.so.1 0xd1145
Build id: 8bb01c282283792a00aed949aafb5f8ec41849a3 		-
16
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
17
gtk_window_dispose
/lib64/libgtk-4.so.1 0x2ce49e
Build id: 8bb01c282283792a00aed949aafb5f8ec41849a3 		-
18
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
19
gtk_application_window_dispose
/lib64/libgtk-4.so.1 0xb6ea7
Build id: 8bb01c282283792a00aed949aafb5f8ec41849a3 		-
20
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
21
ObjectInstance::disassociate_js_gobject()
/lib64/libgjs.so.0 0x610cf
Build id: 2cc65d4eae57fa89cf2a71d6ea5743ec06df30de 		-
22
ObjectInstance::remove_wrapped_gobjects_if(std::function<bool (ObjectInstance*)> const&, std::function<void (ObjectInstance*)> const&) [clone .constprop.0]
/lib64/libgjs.so.0 0xc8dbb
Build id: 2cc65d4eae57fa89cf2a71d6ea5743ec06df30de 		-
23
ObjectInstance::update_heap_wrapper_weak_pointers(JSTracer*, JS::Compartment*, void*)
/lib64/libgjs.so.0 0x6053a
Build id: 2cc65d4eae57fa89cf2a71d6ea5743ec06df30de 		-
24
js::gc::GCRuntime::beginSweepingSweepGroup(JS::GCContext*, js::SliceBudget&)
/lib64/libmozjs-102.so.0 0x545823
Build id: 18a75dd382febb79ca37f2ab25895e5702ac960c 		-
25
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x538b5c
Build id: 18a75dd382febb79ca37f2ab25895e5702ac960c 		-
26
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x53ea09
Build id: 18a75dd382febb79ca37f2ab25895e5702ac960c 		-
27
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-102.so.0 0x517548
Build id: 18a75dd382febb79ca37f2ab25895e5702ac960c 		-
28
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-102.so.0 0x5191f0
Build id: 18a75dd382febb79ca37f2ab25895e5702ac960c 		-
29
JS_GC(JSContext*, JS::GCReason)
/lib64/libmozjs-102.so.0 0x3b72e4
Build id: 18a75dd382febb79ca37f2ab25895e5702ac960c 		-
30
gjs_context_dispose(_GObject*) [clone .lto_priv.0]
/lib64/libgjs.so.0 0x8a8c5
Build id: 2cc65d4eae57fa89cf2a71d6ea5743ec06df30de 		-
31
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
32
main
/usr/bin/gjs-console 0x308b
Build id: 55e37c34ae3b49dc857a93daf982aa5d98366c5f 		-
33
__libc_start_call_main
/lib64/libc.so.6 0x27550
Build id: 0dc6d3e329f8bf5e8c1de63c4c9d560fb9953ade 		-
34
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27609
Build id: 0dc6d3e329f8bf5e8c1de63c4c9d560fb9953ade 		-
35
_start
/usr/bin/gjs-console 0x3535
Build id: 55e37c34ae3b49dc857a93daf982aa5d98366c5f 		-