Crash in slab_allocator_free_chunk

Similar reports
Problem #597333
Component
gjs
Last affected version
0:1.74.3-2.fc37
Executable
/usr/bin/gjs-console
Error name
SIGSEGV 11
First occurrence
2023-08-28
Last occurrence
2025-11-17
Unique reports
18
Quality
-74

Statistics

Operating system Unique / Total count
Fedora 37 18 / 19
Operating system Count
Fedora 37 19
Architecture Count
x86_64 19
Related packages Count
gjs 6
 0:1.74.3-2.fc37 4
 0:1.74.3-1.fc37 2
gdouros-symbola-fonts 6
 0:10.24-11.fc37 6
google-noto-sans-cjk-ttc-fonts 4
 0:20201206-5.fc37 4
Show more… (14)
google-noto-emoji-color-fonts 3
 0:20220916-2.fc37 3
llvm-libs 2
 0:15.0.7-2.fc37 2
google-droid-sans-fonts 2
 0:20200215-13.fc37 2
librsvg2 2
 0:2.54.6-1.fc37 2
mesa-dri-drivers 2
 0:23.0.3-1.fc37 2
gnu-free-sans-fonts 1
 0:20120503-27.fc37 1
google-noto-sans-math-fonts 1
 0:20201206^1.git0c78c8329-8.fc37 1
dejavu-sans-fonts 1
 0:2.37-19.fc37 1
google-noto-sans-arabic-vf-fonts 1
 0:20201206^1.git0c78c8329-8.fc37 1
urw-base35-nimbus-sans-fonts 1
 0:20200910-15.fc37 1
adobe-source-code-pro-fonts 1
 0:2.030.1.050-13.fc37 1
khmer-os-system-fonts 1
 0:5.0-36.fc37 1
google-noto-serif-vf-fonts 1
 0:20201206^1.git0c78c8329-7.fc37 1
dejavu-sans-mono-fonts 1
 0:2.37-19.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
slab_allocator_free_chunk
/lib64/libglib-2.0.so.0 0x75d4b
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
2
magazine_cache_push_magazine
/lib64/libglib-2.0.so.0 0x7604e
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
3
g_slice_free1
/lib64/libglib-2.0.so.0 0x763ce
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
4
g_datalist_clear
/lib64/libglib-2.0.so.0 0x380c7
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
5
g_object_unref
/lib64/libgobject-2.0.so.0 0x21bf2
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
6
ObjectInstance::release_native_object() [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x5fd3c
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
7
ObjectInstance::disassociate_js_gobject()
/lib64/libgjs.so.0 0x610cf
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
8
ObjectInstance::remove_wrapped_gobjects_if(std::function<bool (ObjectInstance*)> const&, std::function<void (ObjectInstance*)> const&) [clone .constprop.0]
/lib64/libgjs.so.0 0xc8dbb
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
9
ObjectInstance::update_heap_wrapper_weak_pointers(JSTracer*, JS::Compartment*, void*)
/lib64/libgjs.so.0 0x6053a
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
10
js::gc::GCRuntime::beginSweepingSweepGroup(JS::GCContext*, js::SliceBudget&)
/lib64/libmozjs-102.so.0 0x5456d3
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
11
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x538a0c
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
12
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x53e8b9
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
13
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-102.so.0 0x5173b8
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
14
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-102.so.0 0x519060
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
15
JS_GC(JSContext*, JS::GCReason)
/lib64/libmozjs-102.so.0 0x3b7064
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
16
GjsContextPrivate::trigger_gc_if_needed(void*)
/lib64/libgjs.so.0 0x85e16
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
17
g_timeout_dispatch
/lib64/libglib-2.0.so.0 0x57488
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
18
g_main_context_dispatch
/lib64/libglib-2.0.so.0 0x56c7f
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
19
g_main_context_iterate.constprop.0
/lib64/libglib-2.0.so.0 0xad178
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
20
g_main_context_iteration
/lib64/libglib-2.0.so.0 0x53f00
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
21
g_application_run
/lib64/libgio-2.0.so.0 0xdef4d
Build id: 94831de1a174bfbc5b685d58df5ac0eb30474068 		-
22
ffi_call_unix64
/lib64/libffi.so.8 0x7a06
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
23
ffi_call_int.lto_priv.0
/lib64/libffi.so.8 0x449d
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
24
ffi_call
/lib64/libffi.so.8 0x7083
Build id: 56594b436dfdeaf3559f3dd0748c0e476cca46de 		-
25
Gjs::Function::invoke(JSContext*, JS::CallArgs const&, JS::Handle<JSObject*>, _GIArgument*) [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x55954
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
26
Gjs::Function::call(JSContext*, unsigned int, JS::Value*)
/lib64/libgjs.so.0 0x56147
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
27
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/lib64/libmozjs-102.so.0 0x14d8ba
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
28
Interpret(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x141cb4
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
29
js::RunScript(JSContext*, js::RunState&)
/lib64/libmozjs-102.so.0 0x14d23a
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
30
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x14e79f
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
31
JS_ExecuteScript(JSContext*, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/lib64/libmozjs-102.so.0 0x1df48e
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
32
GjsContextPrivate::eval_with_scope(JS::Handle<JSObject*>, char const*, unsigned long, char const*, JS::MutableHandle<JS::Value>) [clone .localalias]
/lib64/libgjs.so.0 0x8776c
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
33
gjs_context_eval
/lib64/libgjs.so.0 0x8d475
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
34
main
/usr/bin/gjs-console 0x30fb
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-
35
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
36
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
37
_start
/usr/bin/gjs-console 0x3535
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-