Crash in pas_segregated_size_directory_enable_exclusive_views

Similar reports
Problem #785863
Component
gjs
Last affected version
0:1.84.2-2.fc42
Executable
/usr/bin/gjs-console
Error name
SIGILL 4
First occurrence
2025-09-10
Last occurrence
2025-09-15
Unique reports
2
Quality
-156

Statistics

Operating system Unique / Total count
Fedora 42 2 / 8
Operating system Count
Fedora 42 8
Architecture Count
x86_64 8
Related packages Count
libglvnd-glx 8
 1:1.7.0-7.fc42 8
gjs 8
 0:1.84.2-2.fc42 8

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
pas_segregated_size_directory_enable_exclusive_views
/lib64/libjavascriptcoregtk-4.1.so.0 0x1847960
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
2
pas_segregated_size_directory_finish_creation
/lib64/libjavascriptcoregtk-4.1.so.0 0x1846f52
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
3
pas_segregated_size_directory_create
/lib64/libjavascriptcoregtk-4.1.so.0 0x1846ea3
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
4
pas_segregated_heap_ensure_size_directory_for_size
/lib64/libjavascriptcoregtk-4.1.so.0 0x183f64f
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
5
pas_utility_heap_try_allocate_with_alignment
/lib64/libjavascriptcoregtk-4.1.so.0 0x185b27c
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
6
pas_page_header_table_add
/lib64/libjavascriptcoregtk-4.1.so.0 0x1832c33
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
7
bmalloc_marge_bitfit_create_page_header
/lib64/libjavascriptcoregtk-4.1.so.0 0x1800679
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
8
pas_bitfit_allocator_commit_view
/lib64/libjavascriptcoregtk-4.1.so.0 0x180feb7
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
9
bmalloc_marge_bitfit_page_config_specialized_allocator_try_allocate
/lib64/libjavascriptcoregtk-4.1.so.0 0x18019f8
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
10
bmalloc_heap_config_specialized_local_allocator_try_allocate_slow
/lib64/libjavascriptcoregtk-4.1.so.0 0x1803d1c
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
11
bmalloc_heap_config_specialized_try_allocate_common_impl_slow
/lib64/libjavascriptcoregtk-4.1.so.0 0x180444d
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
12
bmalloc_allocate_impl_impl_slow(__pas_heap_ref*, unsigned long, unsigned long, pas_allocation_mode)
/lib64/libjavascriptcoregtk-4.1.so.0 0x17f54fa
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
13
bmalloc_allocate_impl_casual_case(unsigned long, unsigned long, pas_allocation_mode)
/lib64/libjavascriptcoregtk-4.1.so.0 0x17e8bdd
Build id: b7964404c72bff6290dcf2938202cae52fc557a5 		-
14
WTF::RobinHoodHashTable<WTF::String, WTF::KeyValuePair<WTF::String, std::variant<WTF::String, bool, unsigned int, double> >, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::String, std::variant<WTF::String, bool, unsigned int, double> > >, WTF::DefaultHash<WTF::String>, WTF::HashMap<WTF::String, std::variant<WTF::String, bool, unsigned int, double>, WTF::DefaultHash<WTF::String>, WTF::HashTraits<WTF::String>, WTF::HashTraits<std::variant<WTF::String, bool, unsigned int, double> >, WTF::MemoryCompactRobinHoodHashTableTraits, (WTF::ShouldValidateKey)1>::KeyValuePairTraits, WTF::HashTraits<WTF::String>, WTF::MemoryCompactRobinHoodHashTableSizePolicy, (WTF::ShouldValidateKey)1>::rehash(unsigned int)
/lib64/libwebkit2gtk-4.1.so.0 0xc95a3
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
15
WTF::HashTableAddResult<WTF::HashTableIterator<WTF::RobinHoodHashTable<WTF::String, WTF::KeyValuePair<WTF::String, std::variant<WTF::String, bool, unsigned int, double> >, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::String, std::variant<WTF::String, bool, unsigned int, double> > >, WTF::DefaultHash<WTF::String>, WTF::HashMap<WTF::String, std::variant<WTF::String, bool, unsigned int, double>, WTF::DefaultHash<WTF::String>, WTF::HashTraits<WTF::String>, WTF::HashTraits<std::variant<WTF::String, bool, unsigned int, double> >, WTF::MemoryCompactRobinHoodHashTableTraits, (WTF::ShouldValidateKey)1>::KeyValuePairTraits, WTF::HashTraits<WTF::String>, WTF::MemoryCompactRobinHoodHashTableSizePolicy, (WTF::ShouldValidateKey)1>, WTF::String, WTF::KeyValuePair<WTF::String, std::variant<WTF::String, bool, unsigned int, double> >, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::String, std::variant<WTF::String, bool, unsigned int, double> > >, WTF::DefaultHash<WTF::String>, WTF::HashMap<WTF::String, std::variant<WTF::String, bool, unsigned int, double>, WTF::DefaultHash<WTF::String>, WTF::HashTraits<WTF::String>, WTF::HashTraits<std::variant<WTF::String, bool, unsigned int, double> >, WTF::MemoryCompactRobinHoodHashTableTraits, (WTF::ShouldValidateKey)1>::KeyValuePairTraits, WTF::HashTraits<WTF::String> > > WTF::HashMap<WTF::String, std::variant<WTF::String, bool, unsigned int, double>, WTF::DefaultHash<WTF::String>, WTF::HashTraits<WTF::String>, WTF::HashTraits<std::variant<WTF::String, bool, unsigned int, double> >, WTF::MemoryCompactRobinHoodHashTableTraits, (WTF::ShouldValidateKey)1>::inlineSet<WTF::String const&, std::variant<WTF::String, bool, unsigned int, double> >(WTF::String const&, std::variant<WTF::String, bool, unsigned int, double>&&)
/lib64/libwebkit2gtk-4.1.so.0 0xc90a2
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
16
WebKit::WebPreferencesStore::defaults()
/lib64/libwebkit2gtk-4.1.so.0 0xc0db0
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
17
bool WebKit::valueForKey<bool>(WTF::HashMap<WTF::String, std::variant<WTF::String, bool, unsigned int, double>, WTF::DefaultHash<WTF::String>, WTF::HashTraits<WTF::String>, WTF::HashTraits<std::variant<WTF::String, bool, unsigned int, double> >, WTF::MemoryCompactRobinHoodHashTableTraits, (WTF::ShouldValidateKey)1> const&, WTF::HashMap<WTF::String, std::variant<WTF::String, bool, unsigned int, double>, WTF::DefaultHash<WTF::String>, WTF::HashTraits<WTF::String>, WTF::HashTraits<std::variant<WTF::String, bool, unsigned int, double> >, WTF::MemoryCompactRobinHoodHashTableTraits, (WTF::ShouldValidateKey)1> const&, WTF::String const&) [clone .llvm.15640822336115364295]
/lib64/libwebkit2gtk-4.1.so.0 0x5fde93
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
18
WebKit::WebPreferences::setAcceleratedCompositingEnabled(bool const&)
/lib64/libwebkit2gtk-4.1.so.0 0x7d7e0
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
19
WebKit::WebPreferences::platformInitializeStore()
/lib64/libwebkit2gtk-4.1.so.0 0x8694ca
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
20
WebKit::WebPreferences::createWithLegacyDefaults(WTF::String const&, WTF::String const&, WTF::String const&)
/lib64/libwebkit2gtk-4.1.so.0 0x6ca924
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
21
WebKit::WebPageGroup::WebPageGroup(WTF::String const&)
/lib64/libwebkit2gtk-4.1.so.0 0x672f62
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
22
WebKit::WebProcessPool::WebProcessPool(API::ProcessPoolConfiguration&)
/lib64/libwebkit2gtk-4.1.so.0 0x6f9229
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
23
webkitWebContextConstructed(_GObject*)
/lib64/libwebkit2gtk-4.1.so.0 0x7969a9
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
24
g_object_new_internal.part.0
/lib64/libgobject-2.0.so.0 0x184ba
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
25
g_object_new_with_properties
/lib64/libgobject-2.0.so.0 0x19987
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
26
g_object_new
/lib64/libgobject-2.0.so.0 0x1a961
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
27
createDefaultWebContext(void*) [clone .llvm.5090258688115661949]
/lib64/libwebkit2gtk-4.1.so.0 0x79156c
Build id: 7fc176ef792858e75695fb17a439571c3e000901 		-
28
g_once_impl
/lib64/libglib-2.0.so.0 0x6bc29
Build id: 3adead5a77684e5d72b61c7e0db58031a35baf58 		-
29
ffi_call_unix64
/lib64/libffi.so.8 0x8056
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
30
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x3d08
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
31
ffi_call
/lib64/libffi.so.8 0x670e
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
32
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x534fb
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
33
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x53f2c
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
34
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-128.so.0 0x26fa2
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
35
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x36621
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
36
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2672c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
37
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x27b8f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
38
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x11912c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
39
importer_resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*)
/lib64/libgjs.so.0 0xc8f16
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
40
js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x1ccb43
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
41
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x34f39
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
42
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2672c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
43
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x27b8f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
44
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x11912c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
45
importer_resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*)
/lib64/libgjs.so.0 0xc8f16
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
46
js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x1ccb43
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
47
js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x4385f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
48
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x33257
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
49
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2672c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
50
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x27b8f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
51
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x11912c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
52
importer_resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*)
/lib64/libgjs.so.0 0xc8f16
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
53
js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x1ccb43
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
54
js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x4385f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
55
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x33257
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
56
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2672c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
57
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x27b8f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
58
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x11912c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
59
importer_resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*)
/lib64/libgjs.so.0 0xc8f16
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
60
js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x1ccb43
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
61
js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x4385f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
62
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x33257
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
63
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2672c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
64
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x27b8f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
65
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x11912c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
66
importer_resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*)
/lib64/libgjs.so.0 0xc8f16
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
67
js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x1ccb43
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
68
js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x4385f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
69
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x33257
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
70
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2672c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
71
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x27b8f
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
72
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x11912c
Build id: 5ceb1a2b81c9e7367079603092c3533dd8fde2cd 		-
73
GjsContextPrivate::eval_with_scope(JS::Handle<JSObject*>, char const*, unsigned long, char const*, JS::MutableHandle<JS::Value>) [clone .localalias]
/lib64/libgjs.so.0 0xbc0e9
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
74
gjs_context_eval
/lib64/libgjs.so.0 0xc0e95
Build id: 347d987170cf3d1fdcd044c2574d7335fe388a72 		-
75
main
/usr/bin/gjs-console 0x16f1
Build id: 437bf6f2c4e6bf61e58f1477755701519a271010 		-
76
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
77
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
78
_start
/usr/bin/gjs-console 0x1de5
Build id: 437bf6f2c4e6bf61e58f1477755701519a271010 		-