Crash in bool js::gc::IsAboutToBeFinalizedInternal<js::Shape>(js::Shape**)

Similar reports
Problem #394104
Component
gnome-shell
Last affected version
0:41.3-1.fc35
Executable
/usr/bin/gnome-shell
Error name
SIGSEGV 11
First occurrence
2021-12-16
Last occurrence
2022-01-25
Unique reports
2
Quality
-42

Statistics

Operating system Unique / Total count
Fedora 35 2 / 2
Operating system Count
Fedora 35 2
Architecture Count
x86_64 2
Related packages Count
gnome-shell 2
 0:41.3-1.fc35 1
 0:41.1-2.fc35 1
dejavu-sans-fonts 1
 0:2.37-17.fc35 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
bool js::gc::IsAboutToBeFinalizedInternal<js::Shape>(js::Shape**)
/lib64/libmozjs-78.so.0 0x585743
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
2
js::ObjectGroup::sweep(js::AutoSweepObjectGroup const&) [clone .isra.0]
/lib64/libmozjs-78.so.0 0xaea066
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
3
js::gc::GCRuntime::sweepTypeInformation(JSFreeOp*, js::SliceBudget&)
/lib64/libmozjs-78.so.0 0x56cc50
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
4
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-78.so.0 0x5614ce
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
5
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-78.so.0 0x571fd9
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
6
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-78.so.0 0x5614ce
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
7
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-78.so.0 0x57a32a
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
8
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason, js::gc::AutoGCSession&)
/lib64/libmozjs-78.so.0 0x570a40
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
9
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason)
/lib64/libmozjs-78.so.0 0x580859
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
10
js::gc::GCRuntime::collect(bool, js::SliceBudget, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason)
/lib64/libmozjs-78.so.0 0x582602
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
11
JS_GC(JSContext*, JS::GCReason)
/lib64/libmozjs-78.so.0 0x1ba471
Build id: a57f49ff78f661e1ecd168f047ea06ee9b43878b 		-
12
GjsContextPrivate::trigger_gc_if_needed(void*)
/lib64/libgjs.so.0 0x73df6
Build id: a39182b96d42938c4afe36fe7552ba5d08cb0357 		-
13
g_timeout_dispatch
/lib64/libglib-2.0.so.0 0x55981
Build id: 3720108994016259cac8f61f174ea32513518152 		-
14
g_main_context_dispatch
/lib64/libglib-2.0.so.0 0x55130
Build id: 3720108994016259cac8f61f174ea32513518152 		-
15
g_main_context_iterate.constprop.0
/lib64/libglib-2.0.so.0 0xaa208
Build id: 3720108994016259cac8f61f174ea32513518152 		-
16
g_main_loop_run
/lib64/libglib-2.0.so.0 0x54853
Build id: 3720108994016259cac8f61f174ea32513518152 		-
17
meta_context_run_main_loop
/lib64/libmutter-9.so.0 0xd1ea9
Build id: 8aaa03b35eef0e8b242a0b04e8488ef98fabace2 		-
18
main
/usr/bin/gnome-shell 0x2dd3
Build id: 58ce21ff24d3d5857e68a11a65ba5b116b0670ea 		-
19
__libc_start_call_main
/lib64/libc.so.6 0x2d560
Build id: 644dac2c66a6e0b32674f0ec71e7431bd0c06a63 		-
20
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2d60c
Build id: 644dac2c66a6e0b32674f0ec71e7431bd0c06a63 		-
21
_start
/usr/bin/gnome-shell 0x3045
Build id: 58ce21ff24d3d5857e68a11a65ba5b116b0670ea 		-