Crash in js::TraceManuallyBarrieredGCCellPtr(JSTracer*, JS::GCCellPtr*, char const*)

Similar reports
An owning problem doesn't exist yet.
Component
gjs
Last affected version
0:1.84.2-3.fc42
Executable
/usr/bin/gjs-console
Error name
SIGABRT 6
First occurrence
2026-10-06
Last occurrence
2026-10-06
Unique reports
1
Quality
-88

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
libdav1d 1
 0:1.5.3-1.fc42 1
librsvg2 1
 0:2.60.0-5.fc42 1
gjs 1
 0:1.84.2-3.fc42 1
adwaita-sans-fonts 1
 0:48.2-2.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::TraceManuallyBarrieredGCCellPtr(JSTracer*, JS::GCCellPtr*, char const*)
/lib64/libmozjs-128.so.0 0x5ebed5
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
2
bool js::GCMarker::processMarkStackTop<0u>(js::SliceBudget&)
/lib64/libmozjs-128.so.0 0x5f7d1e
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
3
bool js::GCMarker::doMarking<0u>(js::SliceBudget&, js::gc::ShouldReportMarkTime)
/lib64/libmozjs-128.so.0 0x5ee65b
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
4
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/lib64/libmozjs-128.so.0 0x5d2274
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
5
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/lib64/libmozjs-128.so.0 0x5d79ca
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
6
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-128.so.0 0x5dcac5
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
7
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-128.so.0 0x5dd280
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
8
JS::NonIncrementalGC(JSContext*, JS::GCOptions, JS::GCReason)
/lib64/libmozjs-128.so.0 0x5e6d61
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
9
g_closure_invoke
/lib64/libgobject-2.0.so.0 0x6aea
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
10
signal_emit_unlocked_R.isra.0
/lib64/libgobject-2.0.so.0 0x24aba
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
11
signal_emit_valist_unlocked
/lib64/libgobject-2.0.so.0 0x26af6
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
12
g_signal_emit_by_name
/lib64/libgobject-2.0.so.0 0x27036
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
13
proxy_signal_cb
/lib64/libgio-2.0.so.0 0x51782
Build id: 6f5de1b9a6dc09407363b1beb1eab056720a7f54 		-
14
g_closure_invoke
/lib64/libgobject-2.0.so.0 0x6aea
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
15
signal_emit_unlocked_R.isra.0
/lib64/libgobject-2.0.so.0 0x24aba
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
16
signal_emit_valist_unlocked
/lib64/libgobject-2.0.so.0 0x26af6
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
17
g_signal_emit_valist
/lib64/libgobject-2.0.so.0 0x26d68
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
18
g_signal_emit
/lib64/libgobject-2.0.so.0 0x26e23
Build id: 872ed8e8d46fcb7c4c42de3e3a8eaa9bcde9e552 		-
19
on_signal_received
/lib64/libgio-2.0.so.0 0xee7e1
Build id: 6f5de1b9a6dc09407363b1beb1eab056720a7f54 		-
20
emit_signal_instance_in_idle_cb
/lib64/libgio-2.0.so.0 0xd5cd0
Build id: 6f5de1b9a6dc09407363b1beb1eab056720a7f54 		-
21
g_idle_dispatch
/lib64/libglib-2.0.so.0 0x46e0d
Build id: 3adead5a77684e5d72b61c7e0db58031a35baf58 		-
22
g_main_context_dispatch_unlocked.lto_priv.0
/lib64/libglib-2.0.so.0 0x40863
Build id: 3adead5a77684e5d72b61c7e0db58031a35baf58 		-
23
g_main_context_iterate_unlocked.isra.0
/lib64/libglib-2.0.so.0 0x497a8
Build id: 3adead5a77684e5d72b61c7e0db58031a35baf58 		-
24
g_main_context_iteration
/lib64/libglib-2.0.so.0 0x49953
Build id: 3adead5a77684e5d72b61c7e0db58031a35baf58 		-
25
g_application_run
/lib64/libgio-2.0.so.0 0xb38bd
Build id: 6f5de1b9a6dc09407363b1beb1eab056720a7f54 		-
26
ffi_call_unix64
/lib64/libffi.so.8 0x8056
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
27
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x3d08
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
28
ffi_call
/lib64/libffi.so.8 0x670e
Build id: 8a38bf2dc0d2adf0e30ce92292b9162be6c504f8 		-
29
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x535bb
Build id: c4374eada8d3c2cecc2465df40fe2d027ca980b2 		-
30
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x53fdc
Build id: c4374eada8d3c2cecc2465df40fe2d027ca980b2 		-
31
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-128.so.0 0x2b4c2
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
32
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-128.so.0 0x2b9bc
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
33
js::SpreadCallOperation(JSContext*, JS::Handle<JSScript*>, unsigned char*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x458bb
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
34
js::Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x3a8e2
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
35
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-128.so.0 0x2ac4c
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
36
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-128.so.0 0x2b3e0
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
37
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-128.so.0 0x2b9bc
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
38
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-128.so.0 0x105c22
Build id: 32c1360af0ea23bfa5eb07af694ee19027ff37e2 		-
39
GjsContextPrivate::run_main_loop_hook()
/lib64/libgjs.so.0 0xb85c2
Build id: c4374eada8d3c2cecc2465df40fe2d027ca980b2 		-
40
gjs_context_eval_module
/lib64/libgjs.so.0 0xc1aaf
Build id: c4374eada8d3c2cecc2465df40fe2d027ca980b2 		-
41
main
/usr/bin/gjs-console 0x17b3
Build id: 14aec3ab1a5ad724dc903d17a13690557b917c9a 		-
42
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53 		-
43
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53 		-
44
_start
/usr/bin/gjs-console 0x1e45
Build id: 14aec3ab1a5ad724dc903d17a13690557b917c9a 		-