Crash in js::HeapPtr<js::WasmInstanceObject*>::~HeapPtr()

Similar reports
Problem #520275
Component
gjs
Last affected version
0:1.74.3-2.fc37
Executable
/usr/bin/gjs-console
Error name
SIGSEGV 11
First occurrence
2023-09-29
Last occurrence
2024-05-29
Unique reports
2
Quality
-38

Statistics

Operating system Unique / Total count
Fedora 37 2 / 3
Operating system Count
Fedora 37 3
Architecture Count
x86_64 3
Related packages Count
wqy-microhei-fonts 2
 0:0.2.0-0.30.beta.fc37 2
google-noto-sans-mono-fonts 2
 0:20201206^1.git0c78c8329-8.fc37 2
gnome-icon-theme 2
 0:3.12.0-18.fc37 2
Show more… (5)
gjs 2
 0:1.74.3-2.fc37 2
adwaita-icon-theme 2
 0:43-1.fc37 2
libvorbis 1
 1:1.3.7-6.fc37 1
libogg 1
 2:1.3.5-4.fc37 1
libtool-ltdl 1
 0:2.4.7-2.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::HeapPtr<js::WasmInstanceObject*>::~HeapPtr()
/lib64/libmozjs-102.so.0 0x1503e1
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
2
FinalizeArenas(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/lib64/libmozjs-102.so.0 0x54254c
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
3
js::gc::GCRuntime::backgroundFinalize(JS::GCContext*, JS::Zone*, js::gc::AllocKind, js::gc::Arena**)
/lib64/libmozjs-102.so.0 0x543452
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
4
js::gc::BackgroundSweepTask::run(js::AutoLockHelperThreadState&)
/lib64/libmozjs-102.so.0 0x543626
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
5
js::GCParallelTask::runFromMainThread()
/lib64/libmozjs-102.so.0 0x52617a
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
6
js::gc::GCRuntime::endSweepingSweepGroup(JS::GCContext*, js::SliceBudget&)
/lib64/libmozjs-102.so.0 0x5401de
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
7
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x538a0c
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
8
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-102.so.0 0x53e8b9
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
9
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-102.so.0 0x5173b8
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
10
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-102.so.0 0x519060
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
11
js::gc::GCRuntime::gc(JS::GCOptions, JS::GCReason)
/lib64/libmozjs-102.so.0 0x519776
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
12
JSRuntime::destroyRuntime()
/lib64/libmozjs-102.so.0 0x2befc4
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
13
JS_DestroyContext(JSContext*)
/lib64/libmozjs-102.so.0 0x3aed5a
Build id: 2d8583d7696da79da260860b52748be31f04f891 		-
14
gjs_context_dispose(_GObject*) [clone .lto_priv.0]
/lib64/libgjs.so.0 0x8ac4b
Build id: 8db23d9165eec9fccc28fab89ba6cc9b34e0ff1d 		-
15
g_object_unref
/lib64/libgobject-2.0.so.0 0x21b14
Build id: 4b5daa307a6ee96e34839565dc9091f52d92bb39 		-
16
main
/usr/bin/gjs-console 0x308b
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-
17
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 23589836e284f381fbb26b9e8ca80ba5ed82e4da 		-
18
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 23589836e284f381fbb26b9e8ca80ba5ed82e4da 		-
19
_start
/usr/bin/gjs-console 0x3535
Build id: 49440e444195aecfd2282be16f5a08e900d6b1da 		-