Crash in slab_allocator_free_chunk

Similar reports
Problem #604456
Component
gjs
Last affected version
0:1.74.3-2.fc37
Executable
/usr/bin/gjs-console
Error name
SIGSEGV 11
First occurrence
2023-09-21
Last occurrence
2025-02-08
Unique reports
20
Quality
-58

Statistics

Operating system Unique / Total count
Fedora 37 20 / 22
Operating system Count
Fedora 37 22
Architecture Count
x86_64 22
Related packages Count
abattis-cantarell-fonts 14
 0:0.301-8.fc37 14
gjs 11
 0:1.74.3-2.fc37 9
 0:1.74.3-1.fc37 2
libvorbis 4
 1:1.3.7-6.fc37 4
Show more… (7)
libogg 4
 2:1.3.5-4.fc37 4
openssl-libs 4
 1:3.0.9-1.fc37 4
glibc-all-langpacks 3
 0:2.36-18.fc37 3
libtool-ltdl 1
 0:2.4.7-2.fc37 1
adwaita-icon-theme 1
 0:43-1.fc37 1
hicolor-icon-theme 1
 0:0.17-14.fc37 1
libtdb 1
 0:1.4.7-3.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
slab_allocator_free_chunk
/lib64/libglib-2.0.so.0 0x75d4b
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
2
magazine_cache_push_magazine
/lib64/libglib-2.0.so.0 0x7604e
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
3
g_slice_free1
/lib64/libglib-2.0.so.0 0x763ce
Build id: 3f164d599522e5fd8c45f0e9a5198d004cb5d80e 		-
4
gtk_css_static_style_dispose
/lib64/libgtk-3.so.0 0x15181a
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
5
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
6
gtk_css_node_finalize
/lib64/libgtk-3.so.0 0x13983e
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
7
g_object_unref
/lib64/libgobject-2.0.so.0 0x21bf2
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
8
gtk_style_context_finalize
/lib64/libgtk-3.so.0 0x2c30fd
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
9
g_object_unref
/lib64/libgobject-2.0.so.0 0x21bf2
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
10
gtk_widget_finalize.lto_priv.0
/lib64/libgtk-3.so.0 0x37814a
Build id: c82050107c3f1901554747ee1816aceb85f73c6f 		-
11
g_object_unref
/lib64/libgobject-2.0.so.0 0x21bf2
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
12
ObjectInstance::release_native_object() [clone .localalias] [clone .lto_priv.0]
/lib64/libgjs.so.0 0x5fd3c
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
13
GIWrapperBase<ObjectBase, ObjectPrototype, ObjectInstance>::finalize(JS::GCContext*, JSObject*)
/lib64/libgjs.so.0 0x6e760
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
14
bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/lib64/libmozjs-102.so.0 0x53d379
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
15
js::gc::GCRuntime::finalizeAllocKind(JS::GCContext*, js::SliceBudget&)
/lib64/libmozjs-102.so.0 0x543c2d
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
16
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x538b65
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
17
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x538a0c
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
18
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x538c8e
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
19
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x538a0c
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
20
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x53e8b9
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
21
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-102.so.0 0x5173b8
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
22
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-102.so.0 0x519060
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
23
JS_GC(JSContext*, JS::GCReason)
/lib64/libmozjs-102.so.0 0x3b7064
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
24
gjs_context_dispose(_GObject*) [clone .lto_priv.0]
/lib64/libgjs.so.0 0x8a8c5
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
25
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
26
main
/usr/bin/gjs-console 0x308b
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-
27
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 23589836e284f381fbb26b9e8ca80ba5ed82e4da 		-
28
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 23589836e284f381fbb26b9e8ca80ba5ed82e4da 		-
29
_start
/usr/bin/gjs-console 0x3535
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-