Crash in js::gc::TenuringTracer::onObjectEdge(JSObject**, char const*)

Similar reports
Problem #766079
Component
gnome-shell
Last affected version
0:48.4-1.fc42
Executable
/usr/bin/gnome-shell
Error name
SIGSEGV 11
First occurrence
2025-08-20
Last occurrence
2025-09-24
Unique reports
3
Quality
-64

Statistics

Operating system Unique / Total count
Fedora 42 3 / 3
Operating system Count
Fedora 42 3
Architecture Count
x86_64 3
Related packages Count
google-noto-color-emoji-fonts 3
 0:20241008-2.fc42 3
gnome-shell 3
 0:48.4-1.fc42 3
gdouros-symbola-fonts 2
 0:10.24-17.fc42 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::onObjectEdge(JSObject**, char const*)
/lib64/libmozjs-128.so.0 0x625fb1
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
2
js::gc::GCRuntime::traceRuntimeCommon(JSTracer*, js::gc::GCRuntime::TraceOrMarkRuntime)
/lib64/libmozjs-128.so.0 0x60a4e0
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/lib64/libmozjs-128.so.0 0x5fed81
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/lib64/libmozjs-128.so.0 0x5d78a3
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
5
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/lib64/libmozjs-128.so.0 0x5d1d53
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
6
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-128.so.0 0x5d85a5
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
7
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-128.so.0 0x5d8d60
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
8
JS_GC(JSContext*, JS::GCReason)
/lib64/libmozjs-128.so.0 0x3ab5ea
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
9
GjsContextPrivate::trigger_gc_if_needed(void*)
/lib64/libgjs.so.0 0xb777e
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
10
g_timeout_dispatch
/lib64/libglib-2.0.so.0 0x4687b
Build id: 55ffe9216c2472a3347125d2ab2145a7c63d1ed5 		-
11
g_main_context_dispatch_unlocked.lto_priv.0
/lib64/libglib-2.0.so.0 0x40880
Build id: 55ffe9216c2472a3347125d2ab2145a7c63d1ed5 		-
12
g_main_context_iterate_unlocked.isra.0
/lib64/libglib-2.0.so.0 0x497c8
Build id: 55ffe9216c2472a3347125d2ab2145a7c63d1ed5 		-
13
g_main_loop_run
/lib64/libglib-2.0.so.0 0x49a6f
Build id: 55ffe9216c2472a3347125d2ab2145a7c63d1ed5 		-
14
meta_context_run_main_loop
/lib64/libmutter-16.so.0 0xa409a
Build id: 821db6c54b07af1f08c72eb88f7e79daf5ac91b9 		-
15
ffi_call_unix64
/lib64/libffi.so.8 0x8056
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
16
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x3d08
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
17
ffi_call
/lib64/libffi.so.8 0x670e
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
18
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x534fb
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
19
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x53f2c
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
20
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-128.so.0 0x26fa2
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
21
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x36621
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
22
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2672c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
23
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-128.so.0 0x26ec0
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
24
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-128.so.0 0x2749c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
25
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x101702
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
26
GjsContextPrivate::run_main_loop_hook()
/lib64/libgjs.so.0 0xb8442
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
27
gjs_context_eval_module
/lib64/libgjs.so.0 0xc191f
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
28
gjs_context_eval_module_file
/lib64/libgjs.so.0 0xc1a82
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
29
main
/usr/bin/gnome-shell 0x1303
Build id: 470f6a2278da110e3f8a9f1dbd1434fc512e58b7 		-
30
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 126a08bf502f4950b215dc773e52df8dcf50c393 		-
31
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 126a08bf502f4950b215dc773e52df8dcf50c393 		-
32
_start
/usr/bin/gnome-shell 0x1745
Build id: 470f6a2278da110e3f8a9f1dbd1434fc512e58b7 		-