Crash in bool js::gc::IsAboutToBeFinalizedInternal<js::ObjectGroup>(js::ObjectGroup**)

Similar reports
Problem #9797
Component
gnome-shell
Last affected version
0:41.2-1.fc35
Executable
/usr/bin/gnome-shell
Error name
SIGSEGV 11
First occurrence
2021-07-01
Last occurrence
2022-07-15
Unique reports
5
Quality
-38

Graphs

Statistics

Operating system Unique / Total count
Fedora 34 3 / 3
Fedora 35 5 / 5
Operating system Count
Fedora 35 5
Fedora 34 3
Architecture Count
x86_64 8
Related packages Count
gnome-shell 2
 0:41.2-1.fc35 2
google-noto-sans-cjk-ttc-fonts 1
 0:20201206-2.fc34 1
dejavu-sans-fonts 1
 0:2.37-17.fc35 1
google-noto-emoji-color-fonts 1
 0:20200916-3.fc35 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
bool js::gc::IsAboutToBeFinalizedInternal<js::ObjectGroup>(js::ObjectGroup**)
/lib64/libmozjs-78.so.0 0x5807df
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
2
js::ConstraintTypeSet::sweep(js::AutoSweepBase const&, JS::Zone*) [clone .constprop.0]
/lib64/libmozjs-78.so.0 0xabd173
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
3
js::ObjectGroup::sweep(js::AutoSweepObjectGroup const&) [clone .isra.0]
/lib64/libmozjs-78.so.0 0xae4df3
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
4
js::gc::GCRuntime::sweepTypeInformation(JSFreeOp*, js::SliceBudget&)
/lib64/libmozjs-78.so.0 0x567b90
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
5
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-78.so.0 0x55c42e
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
6
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-78.so.0 0x56cf09
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
7
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-78.so.0 0x55c42e
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
8
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-78.so.0 0x57525a
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
9
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason, js::gc::AutoGCSession&)
/lib64/libmozjs-78.so.0 0x56b99b
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
10
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason)
/lib64/libmozjs-78.so.0 0x57b799
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
11
js::gc::GCRuntime::collect(bool, js::SliceBudget, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason)
/lib64/libmozjs-78.so.0 0x57d542
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
12
JS_GC(JSContext*, JS::GCReason)
/lib64/libmozjs-78.so.0 0x1b52a1
Build id: 9a9d56a08be4ef90df93b4175bc60fb624d316af 		-
13
GjsContextPrivate::trigger_gc_if_needed(void*)
/lib64/libgjs.so.0 0x6c073
Build id: b8101ffb9e67e2bd07560c4584973ace9d64e309 		-
14
g_timeout_dispatch
/lib64/libglib-2.0.so.0 0x55d21
Build id: 37475e3b392fb3971c8ad0d9ac0a4d7e1b93c521 		-
15
g_main_context_dispatch
/lib64/libglib-2.0.so.0 0x554cf
Build id: 37475e3b392fb3971c8ad0d9ac0a4d7e1b93c521 		-
16
g_main_context_iterate.constprop.0
/lib64/libglib-2.0.so.0 0xa94e8
Build id: 37475e3b392fb3971c8ad0d9ac0a4d7e1b93c521 		-
17
g_main_loop_run
/lib64/libglib-2.0.so.0 0x54a93
Build id: 37475e3b392fb3971c8ad0d9ac0a4d7e1b93c521 		-
18
meta_run
/lib64/libmutter-8.so.0 0xcbeb2
Build id: 0f888b8ab155f6260835f94f45ac384b891f62da 		-
19
main
/usr/bin/gnome-shell 0x2ca6
Build id: 90209de62aef18e37229c879bf5a965bdce8721d 		-