Crash in slab_allocator_free_chunk

Similar reports
Problem #597741
Component
gjs
Last affected version
0:1.74.3-2.fc37
Executable
/usr/bin/gjs-console
Error name
SIGSEGV 11
First occurrence
2023-08-23
Last occurrence
2025-09-26
Unique reports
25
Quality
-128

Statistics

Operating system Unique / Total count
Fedora 37 25 / 32
Operating system Count
Fedora 37 32
Architecture Count
x86_64 32
Related packages Count
abattis-cantarell-fonts 30
 0:0.301-8.fc37 30
gjs 17
 0:1.74.3-2.fc37 17
libseccomp 8
 0:2.5.3-3.fc37 8
Show more… (9)
libxkbcommon 8
 0:1.4.1-2.fc37 8
openssl-libs 7
 1:3.0.9-1.fc37 7
systemd-libs 5
 0:251.14-2.fc37 5
adwaita-icon-theme 5
 0:43-1.fc37 5
librsvg2 4
 0:2.54.6-1.fc37 4
glibc-all-langpacks 2
 0:2.36-18.fc37 2
hicolor-icon-theme 1
 0:0.17-14.fc37 1
shared-mime-info 1
 0:2.2-2.fc37 1
wqy-microhei-fonts 1
 0:0.2.0-0.30.beta.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
slab_allocator_free_chunk
/lib64/libglib-2.0.so.0 0x75d4b
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
2
magazine_cache_push_magazine
/lib64/libglib-2.0.so.0 0x7604e
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
3
g_slice_free1
/lib64/libglib-2.0.so.0 0x763ce
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
4
g_slist_foreach
/lib64/libglib-2.0.so.0 0x72e50
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
5
pango_layout_line_unref
/lib64/libpango-1.0.so.0 0x226a5
Build id: 4305af66bae5c33b76dadf674e1ffc3de6332d6e 		-
6
pango_layout_finalize
/lib64/libpango-1.0.so.0 0x26383
Build id: 4305af66bae5c33b76dadf674e1ffc3de6332d6e 		-
7
g_object_unref
/lib64/libgobject-2.0.so.0 0x21bf2
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
8
gtk_label_screen_changed
/lib64/libgtk-3.so.0 0x1f4d3e
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
9
g_cclosure_marshal_VOID__OBJECTv
/lib64/libgobject-2.0.so.0 0x12b05
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
10
g_signal_emit_valist
/lib64/libgobject-2.0.so.0 0x31614
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
11
g_signal_emit
/lib64/libgobject-2.0.so.0 0x316f3
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
12
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376501
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
13
gtk_box_forall.lto_priv.0
/lib64/libgtk-3.so.0 0xd5c58
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
14
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
15
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
16
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
17
gtk_box_forall.lto_priv.0
/lib64/libgtk-3.so.0 0xd5c58
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
18
gtk_widget_propagate_hierarchy_changed_recurse
/lib64/libgtk-3.so.0 0x376542
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
19
_gtk_widget_propagate_hierarchy_changed
/lib64/libgtk-3.so.0 0x377154
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
20
gtk_widget_unparent
/lib64/libgtk-3.so.0 0x36e509
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
21
gtk_fixed_remove
/lib64/libgtk-3.so.0 0x1a5ed5
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
22
g_cclosure_marshal_VOID__OBJECTv
/lib64/libgobject-2.0.so.0 0x12b05
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
23
g_signal_emit_valist
/lib64/libgobject-2.0.so.0 0x31614
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
24
g_signal_emit
/lib64/libgobject-2.0.so.0 0x316f3
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
25
gtk_container_remove
/lib64/libgtk-3.so.0 0x125fb5
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
26
ffi_call_unix64
/lib64/libffi.so.8 0x7a06
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
27
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x449d
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
28
ffi_call
/lib64/libffi.so.8 0x7083
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
29
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x55954
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
30
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x56147
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
31
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-102.so.0 0x14d8ba
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
32
Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x141cb4
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
33
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x14d293
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
34
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-102.so.0 0x14d6b8
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
35
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-102.so.0 0x14dab4
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
36
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x2d43bc
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
37
AsyncFunctionResume(JSContext*, JS::Handle<js::AsyncFunctionGeneratorObject*>, ResumeKind, JS::Handle<JS::Value>) [clone .lto_priv.0]
/lib64/libmozjs-102.so.0 0x1bf15d
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
38
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/lib64/libmozjs-102.so.0 0x25d92a
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
39
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-102.so.0 0x14d5f0
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
40
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/lib64/libmozjs-102.so.0 0x14dab4
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
41
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x1d0250
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
42
GjsContextPrivate::run_jobs_fallible(_GCancellable*) [clone .localalias]
/lib64/libgjs.so.0 0x87f86
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
43
GjsContextPrivate::runJobs(JSContext*, _GCancellable*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x88293
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
44
Gjs::PromiseJobDispatcher::Source::{lambda(_GSource*, int (*)(void*), void*)#2}::_FUN(_GSource*, int (*)(void*), void*) [clone .lto_priv.0]
/lib64/libgjs.so.0 0x9ff6b
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
45
g_main_context_dispatch
/lib64/libglib-2.0.so.0 0x56c7f
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
46
g_main_context_iterate.constprop.0
/lib64/libglib-2.0.so.0 0xad178
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
47
g_main_context_iteration
/lib64/libglib-2.0.so.0 0x53f00
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
48
g_application_run
/lib64/libgio-2.0.so.0 0xdef4d
Build id: 94831de1a174bfbc5b685d58df5ac0eb30474068 		-
49
ffi_call_unix64
/lib64/libffi.so.8 0x7a06
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
50
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x449d
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
51
ffi_call
/lib64/libffi.so.8 0x7083
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
52
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x55954
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
53
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x56147
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
54
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-102.so.0 0x14d8ba
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
55
Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x141cb4
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
56
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x14d23a
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
57
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x14e79f
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
58
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x1df48e
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
59
GjsContextPrivate::eval_with_scope(JS::Handle<JSObject*>, char const*, unsigned long, char const*, JS::MutableHandle<JS::Value>) [clone .localalias]
/lib64/libgjs.so.0 0x8776c
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
60
gjs_context_eval
/lib64/libgjs.so.0 0x8d475
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
61
main
/usr/bin/gjs-console 0x30fb
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-
62
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
63
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
64
_start
/usr/bin/gjs-console 0x3535
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-