Crash in js::GenericTracerImpl<js::gc::MarkingTracerT<0u> >::onObjectEdge(JSObject**, char const*)

Similar reports
Problem #715417
Component
gnome-shell
Last affected version
0:48.7-1.fc42
Executable
/usr/bin/gnome-shell
Error name
SIGSEGV 11
First occurrence
2025-07-11
Last occurrence
2026-01-10
Unique reports
3
Quality
-68

Statistics

Operating system Unique / Total count
Fedora 42 3 / 3
Operating system Count
Fedora 42 3
Architecture Count
x86_64 3
Related packages Count
gnome-shell 3
 0:48.7-1.fc42 1
 0:48.2-1.fc42 1
 0:48.3-1.fc42 1
google-noto-sans-mono-vf-fonts 1
 0:20250301-1.fc42 1
google-noto-sans-vf-fonts 1
 0:20250301-1.fc42 1
Show more… (4)
google-noto-color-emoji-fonts 1
 0:20241008-2.fc42 1
opensc-libs 1
 0:0.26.1-2.fc42 1
adwaita-sans-fonts 1
 0:48.2-2.fc42 1
gdouros-symbola-fonts 1
 0:10.24-17.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::GenericTracerImpl<js::gc::MarkingTracerT<0u> >::onObjectEdge(JSObject**, char const*)
/lib64/libmozjs-128.so.0 0x5f6110
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
2
auto js::MapGCThingTyped<TraceTaggedPtrEdge<JS::Value>(JSTracer*, JS::Value*, char const*)::{lambda(auto:1)#1}>(JS::Value const&, TraceTaggedPtrEdge<JS::Value>(JSTracer*, JS::Value*, char const*)::{lambda(auto:1)#1}&&)
/lib64/libmozjs-128.so.0 0x5f0fc9
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
3
js::MapObject::trace(JSTracer*, JSObject*)
/lib64/libmozjs-128.so.0 0x8f504
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
4
bool js::GCMarker::processMarkStackTop<0u>(js::SliceBudget&)
/lib64/libmozjs-128.so.0 0x5f3662
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
5
bool js::GCMarker::doMarking<0u>(js::SliceBudget&, js::gc::ShouldReportMarkTime)
/lib64/libmozjs-128.so.0 0x5ea13b
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
6
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/lib64/libmozjs-128.so.0 0x5cdd54
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
7
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/lib64/libmozjs-128.so.0 0x5d34aa
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
8
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-128.so.0 0x5d85a5
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
9
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-128.so.0 0x5d8d60
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
10
JS_GC(JSContext*, JS::GCReason)
/lib64/libmozjs-128.so.0 0x3ab5ea
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
11
GjsContextPrivate::trigger_gc_if_needed(void*)
/lib64/libgjs.so.0 0x7e88e
Build id: f02af828f74f17c2418f5bb721d42a51144e62bc 		-
12
g_timeout_dispatch
/lib64/libglib-2.0.so.0 0x4687b
Build id: 55ffe9216c2472a3347125d2ab2145a7c63d1ed5 		-
13
g_main_context_dispatch_unlocked.lto_priv.0
/lib64/libglib-2.0.so.0 0x40880
Build id: 55ffe9216c2472a3347125d2ab2145a7c63d1ed5 		-
14
g_main_context_iterate_unlocked.isra.0
/lib64/libglib-2.0.so.0 0x497c8
Build id: 55ffe9216c2472a3347125d2ab2145a7c63d1ed5 		-
15
g_main_loop_run
/lib64/libglib-2.0.so.0 0x49a6f
Build id: 55ffe9216c2472a3347125d2ab2145a7c63d1ed5 		-
16
meta_context_run_main_loop
/lib64/libmutter-16.so.0 0xa419a
Build id: 9d31c10ababc5562e77c8e816d434e2c6e84efdf 		-
17
ffi_call_unix64
/lib64/libffi.so.8 0x8056
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
18
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x3d08
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
19
ffi_call
/lib64/libffi.so.8 0x670e
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
20
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x3cb14
Build id: f02af828f74f17c2418f5bb721d42a51144e62bc 		-
21
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x3d44f
Build id: f02af828f74f17c2418f5bb721d42a51144e62bc 		-
22
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-128.so.0 0x26fa2
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
23
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x36621
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
24
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2672c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
25
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-128.so.0 0x26ec0
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
26
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-128.so.0 0x2749c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
27
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x101702
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
28
GjsContextPrivate::run_main_loop_hook()
/lib64/libgjs.so.0 0x7f552
Build id: f02af828f74f17c2418f5bb721d42a51144e62bc 		-
29
gjs_context_eval_module
/lib64/libgjs.so.0 0x87baf
Build id: f02af828f74f17c2418f5bb721d42a51144e62bc 		-
30
gjs_context_eval_module_file
/lib64/libgjs.so.0 0x87de1
Build id: f02af828f74f17c2418f5bb721d42a51144e62bc 		-
31
main
/usr/bin/gnome-shell 0x1303
Build id: d9f21dc9be7209207f7825af24a75800820ec20f 		-
32
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: c4b06a608071b2c9852fae62ca3b69cdc22cd022 		-
33
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: c4b06a608071b2c9852fae62ca3b69cdc22cd022 		-
34
_start
/usr/bin/gnome-shell 0x1745
Build id: d9f21dc9be7209207f7825af24a75800820ec20f 		-