Crash in js::gc::TenuringTracer::onObjectEdge(JSObject**, char const*)

Similar reports
An owning problem doesn't exist yet.
Component
gnome-shell
Last affected version
0:46.10-1.fc40
Executable
/usr/bin/gnome-shell
Error name
SIGSEGV 11
First occurrence
2026-08-29
Last occurrence
2026-08-29
Unique reports
1
Quality
-96

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Operating system Count
Fedora 40 1
Architecture Count
x86_64 1
Related packages Count
openssl-libs 1
 1:3.2.4-1.fc40 1
shared-mime-info 1
 0:2.3-5.fc40 1
gnome-shell 1
 0:46.10-1.fc40 1
Show more… (2)
gdm 1
 1:46.2-1.fc40 1
geoclue2-libs 1
 0:2.7.2-2.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::onObjectEdge(JSObject**, char const*)
/lib64/libmozjs-115.so.0 0x4d29fc
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
2
js::gc::TenuringTracer::traverse(JS::Value*)
/lib64/libmozjs-115.so.0 0x4d2d63
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/lib64/libmozjs-115.so.0 0x4b778f
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/lib64/libmozjs-115.so.0 0x4958e0
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
5
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind) [clone .part.0]
/lib64/libmozjs-115.so.0 0x498e78
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
6
void* js::gc::CellAllocator::AllocNurseryOrTenuredCell<(JS::TraceKind)0, (js::AllowGC)1>(JSContext*, js::gc::AllocKind, js::gc::Heap, js::gc::AllocSite*)
/lib64/libmozjs-115.so.0 0x4851be
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
7
js::NativeObject::create(JSContext*, js::gc::AllocKind, js::gc::Heap, JS::Handle<js::SharedShape*>, js::gc::AllocSite*)
/lib64/libmozjs-115.so.0 0x71adb
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
8
js::NewObjectWithClassProto(JSContext*, JSClass const*, JS::Handle<JSObject*>, js::gc::AllocKind, js::NewObjectKind) [clone .part.0]
/lib64/libmozjs-115.so.0 0x19f2c2
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
9
PromiseDebugInfo::create(JSContext*, JS::Handle<js::PromiseObject*>)
/lib64/libmozjs-115.so.0 0x1c1f69
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
10
CreatePromiseObjectWithoutResolutionFunctions(JSContext*) [clone .lto_priv.0]
/lib64/libmozjs-115.so.0 0x1c412a
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
11
js::CreatePromiseObjectForAsync(JSContext*)
/lib64/libmozjs-115.so.0 0x1c446e
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
12
js::AbstractGeneratorObject::create(JSContext*, JS::Handle<JSFunction*>, JS::Handle<JSScript*>, JS::Handle<JSObject*>, JS::Handle<js::ArgumentsObject*>)
/lib64/libmozjs-115.so.0 0x13cfed
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
13
js::AbstractGeneratorObject::createFromFrame(JSContext*, js::AbstractFramePtr)
/lib64/libmozjs-115.so.0 0x13d56e
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
14
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-115.so.0 0x8adf5
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
15
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-115.so.0 0x7bf6b
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
16
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-115.so.0 0x7c457
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
17
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-115.so.0 0x7c8cd
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
18
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-115.so.0 0xbae41
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
19
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/lib64/libmozjs-115.so.0 0x1c759b
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
20
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-115.so.0 0x7c2de
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
21
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-115.so.0 0x7c8cd
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
22
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-115.so.0 0x1030f0
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
23
GjsContextPrivate::run_jobs_fallible() [clone .localalias]
/lib64/libgjs.so.0 0x8c272
Build id: 35bf931a671ab4d4e9fa5d9b57ddb2790b11d52f 		-
24
GjsContextPrivate::runJobs(JSContext*)
/lib64/libgjs.so.0 0x8c56c
Build id: 35bf931a671ab4d4e9fa5d9b57ddb2790b11d52f 		-
25
js::RunJobs(JSContext*)
/lib64/libmozjs-115.so.0 0x159f65
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
26
Gjs::PromiseJobDispatcher::Source::{lambda(_GSource*, int (*)(void*), void*)#1}::_FUN(_GSource*, int (*)(void*), void*) [clone .lto_priv.0]
/lib64/libgjs.so.0 0xa3ced
Build id: 35bf931a671ab4d4e9fa5d9b57ddb2790b11d52f 		-
27
g_main_context_dispatch_unlocked.lto_priv.0
/lib64/libglib-2.0.so.0 0x5d02c
Build id: c1b2ab1d795f60de663adaf74140f09f2b2fd034 		-
28
g_main_context_iterate_unlocked.isra.0
/lib64/libglib-2.0.so.0 0xbee20
Build id: c1b2ab1d795f60de663adaf74140f09f2b2fd034 		-
29
g_main_loop_run
/lib64/libglib-2.0.so.0 0x630f7
Build id: c1b2ab1d795f60de663adaf74140f09f2b2fd034 		-
30
meta_context_run_main_loop
/lib64/libmutter-14.so.0 0xd522b
Build id: 678b8597d0003664d382693ac4f405deff88f6bb 		-
31
ffi_call_unix64
/lib64/libffi.so.8 0x9056
Build id: a190bf03e644181cadab122962ab83ae96271696 		-
32
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x56a0
Build id: a190bf03e644181cadab122962ab83ae96271696 		-
33
ffi_call
/lib64/libffi.so.8 0x84ee
Build id: a190bf03e644181cadab122962ab83ae96271696 		-
34
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x5508e
Build id: 35bf931a671ab4d4e9fa5d9b57ddb2790b11d52f 		-
35
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x564b3
Build id: 35bf931a671ab4d4e9fa5d9b57ddb2790b11d52f 		-
36
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-115.so.0 0x7c554
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
37
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-115.so.0 0x85e86
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
38
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-115.so.0 0x7bf13
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
39
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-115.so.0 0x7c457
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
40
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-115.so.0 0x7c8cd
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
41
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-115.so.0 0x1030f0
Build id: 65c703abe24c6e50f5b22aa0b05974b4cff28b39 		-
42
GjsContextPrivate::run_main_loop_hook()
/lib64/libgjs.so.0 0x89f92
Build id: 35bf931a671ab4d4e9fa5d9b57ddb2790b11d52f 		-
43
gjs_context_eval_module
/lib64/libgjs.so.0 0x9144f
Build id: 35bf931a671ab4d4e9fa5d9b57ddb2790b11d52f 		-
44
gjs_context_eval_module_file
/lib64/libgjs.so.0 0x91679
Build id: 35bf931a671ab4d4e9fa5d9b57ddb2790b11d52f 		-
45
main
/usr/bin/gnome-shell 0x2fff
Build id: 8bb41e1cda1b6b30d8fcb60821b90a03acfe5d79 		-
46
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
47
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
48
_start
/usr/bin/gnome-shell 0x3445
Build id: 8bb41e1cda1b6b30d8fcb60821b90a03acfe5d79 		-