Crash in slab_allocator_free_chunk

Similar reports
Problem #603617
Component
gjs
Last affected version
0:1.74.3-2.fc37
Executable
/usr/bin/gjs-console
Error name
SIGSEGV 11
First occurrence
2023-08-21
Last occurrence
2026-01-12
Unique reports
21
Quality
-164

Statistics

Operating system Unique / Total count
Fedora 37 21 / 37
Operating system Count
Fedora 37 37
Architecture Count
x86_64 37
Related packages Count
gjs 20
 0:1.74.3-2.fc37 13
 0:1.74.3-1.fc37 7
abattis-cantarell-fonts 17
 0:0.301-8.fc37 17
libvorbis 15
 1:1.3.7-6.fc37 15
Show more… (12)
libogg 15
 2:1.3.5-4.fc37 15
openssl-libs 10
 1:3.0.9-1.fc37 10
librsvg2 9
 0:2.54.6-1.fc37 9
adwaita-icon-theme 8
 0:43-1.fc37 8
glibc-all-langpacks 6
 0:2.36-18.fc37 6
libseccomp 4
 0:2.5.3-3.fc37 4
shared-mime-info 3
 0:2.2-2.fc37 3
gvfs-client 2
 0:1.50.4-1.fc37 2
gnome-icon-theme 1
 0:3.12.0-18.fc37 1
hicolor-icon-theme 1
 0:0.17-14.fc37 1
libxkbcommon 1
 0:1.4.1-2.fc37 1
wqy-microhei-fonts 1
 0:0.2.0-0.30.beta.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
slab_allocator_free_chunk
/lib64/libglib-2.0.so.0 0x75d17
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
2
magazine_cache_push_magazine
/lib64/libglib-2.0.so.0 0x7604e
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
3
g_slice_free1
/lib64/libglib-2.0.so.0 0x763ce
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
4
free_run.lto_priv.0
/lib64/libpango-1.0.so.0 0x2228e
Build id: 4305af66bae5c33b76dadf674e1ffc3de6332d6e 		-
5
g_slist_foreach
/lib64/libglib-2.0.so.0 0x72e50
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
6
pango_layout_line_unref
/lib64/libpango-1.0.so.0 0x226a5
Build id: 4305af66bae5c33b76dadf674e1ffc3de6332d6e 		-
7
pango_layout_finalize
/lib64/libpango-1.0.so.0 0x26383
Build id: 4305af66bae5c33b76dadf674e1ffc3de6332d6e 		-
8
g_object_unref
/lib64/libgobject-2.0.so.0 0x21bf2
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
9
gtk_label_screen_changed
/lib64/libgtk-3.so.0 0x1f4d3e
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
10
g_cclosure_marshal_VOID__OBJECTv
/lib64/libgobject-2.0.so.0 0x12b05
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
11
g_signal_emit_valist
/lib64/libgobject-2.0.so.0 0x31614
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
12
g_signal_emit
/lib64/libgobject-2.0.so.0 0x316f3
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
13
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376501
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
14
gtk_box_forall.lto_priv.0
/lib64/libgtk-3.so.0 0xd5c58
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
15
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
16
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
17
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
18
gtk_box_forall.lto_priv.0
/lib64/libgtk-3.so.0 0xd5c58
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
19
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
20
gtk_fixed_forall
/lib64/libgtk-3.so.0 0x19f720
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
21
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
22
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
23
_gtk_widget_propagate_hierarchy_changed
/lib64/libgtk-3.so.0 0x377154
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
24
gtk_widget_unparent
/lib64/libgtk-3.so.0 0x36e509
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
25
gtk_bin_remove
/lib64/libgtk-3.so.0 0xc88bb
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
26
g_cclosure_marshal_VOID__OBJECTv
/lib64/libgobject-2.0.so.0 0x12b05
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
27
g_signal_emit_valist
/lib64/libgobject-2.0.so.0 0x31614
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
28
g_signal_emit
/lib64/libgobject-2.0.so.0 0x316f3
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
29
gtk_container_remove
/lib64/libgtk-3.so.0 0x125fb5
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
30
gtk_widget_dispose.lto_priv.0
/lib64/libgtk-3.so.0 0x377f23
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
31
g_object_run_dispose
/lib64/libgobject-2.0.so.0 0x21c74
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
32
gtk_window_forall.lto_priv.0
/lib64/libgtk-3.so.0 0x38f449
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
33
gtk_container_destroy.lto_priv.0
/lib64/libgtk-3.so.0 0x121d6b
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
34
g_closure_invoke
/lib64/libgobject-2.0.so.0 0x14060
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
35
signal_emit_unlocked_R.isra.0
/lib64/libgobject-2.0.so.0 0x41014
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
36
g_signal_emit_valist
/lib64/libgobject-2.0.so.0 0x314da
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
37
g_signal_emit
/lib64/libgobject-2.0.so.0 0x316f3
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
38
gtk_widget_dispose.lto_priv.0
/lib64/libgtk-3.so.0 0x377f51
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
39
gtk_window_dispose.lto_priv.0
/lib64/libgtk-3.so.0 0x388bfa
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
40
gtk_application_window_dispose
/lib64/libgtk-3.so.0 0xc1a66
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
41
g_object_run_dispose
/lib64/libgobject-2.0.so.0 0x21c74
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
42
ffi_call_unix64
/lib64/libffi.so.8 0x7a06
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
43
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x449d
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
44
ffi_call
/lib64/libffi.so.8 0x7083
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
45
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x55954
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
46
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x56147
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
47
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-102.so.0 0x14d8ba
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
48
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x5c40ef
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
49
anonymous function
/lib64/libmozjs-102.so.0 0x26c5a5341e28 -
50
anonymous function
/lib64/libmozjs-102.so.0 0x55dc6a6b1a20 -
51
anonymous function
/lib64/libmozjs-102.so.0 0x26c5a533f56f -
52
js::jit::EnterBaselineInterpreterAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*) [clone .constprop.0]
/lib64/libmozjs-102.so.0 0x931ae7
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
53
Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x14c878
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
54
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x14d293
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
55
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-102.so.0 0x14d6b8
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
56
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-102.so.0 0x14dab4
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
57
JS_CallFunction(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSFunction*>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x1cffbc
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
58
Gjs::Closure::invoke(JS::Handle<JSObject*>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/lib64/libgjs.so.0 0x48ca2
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
59
GjsCallbackTrampoline::callback_closure(_GIArgument**, void*)
/lib64/libgjs.so.0 0x5390f
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
60
GjsCallbackTrampoline::create_closure()::{lambda(ffi_cif*, void*, void**, void*)#1}::_FUN(ffi_cif*, void*, void**, void*)
/lib64/libgjs.so.0 0x54bef
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
61
ffi_closure_unix64_inner
/lib64/libffi.so.8 0x75e2
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
62
ffi_closure_unix64
/lib64/libffi.so.8 0x7c28
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
63
g_main_context_dispatch
/lib64/libglib-2.0.so.0 0x56c7f
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
64
g_main_context_iterate.constprop.0
/lib64/libglib-2.0.so.0 0xad178
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
65
g_main_context_iteration
/lib64/libglib-2.0.so.0 0x53f00
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
66
g_application_run
/lib64/libgio-2.0.so.0 0xdef4d
Build id: 94831de1a174bfbc5b685d58df5ac0eb30474068 		-
67
ffi_call_unix64
/lib64/libffi.so.8 0x7a06
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
68
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x449d
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
69
ffi_call
/lib64/libffi.so.8 0x7083
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
70
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x55954
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
71
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x56147
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
72
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-102.so.0 0x14d8ba
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
73
Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x141cb4
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
74
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x14d23a
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
75
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x14e79f
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
76
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x1df48e
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
77
GjsContextPrivate::eval_with_scope(JS::Handle<JSObject*>, char const*, unsigned long, char const*, JS::MutableHandle<JS::Value>) [clone .localalias]
/lib64/libgjs.so.0 0x8776c
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
78
gjs_context_eval
/lib64/libgjs.so.0 0x8d475
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
79
main
/usr/bin/gjs-console 0x30fb
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-
80
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
81
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
82
_start
/usr/bin/gjs-console 0x3535
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-