Crash in bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)

Similar reports
Problem #654215
Component
gjs
Last affected version
0:1.78.3-1.fc39
Executable
/usr/bin/gjs-console
Error name
SIGSEGV 11
First occurrence
2023-11-08
Last occurrence
2024-01-28
Unique reports
2
Quality
-38

Statistics

Operating system Unique / Total count
Fedora 39 2 / 2
Operating system Count
Fedora 39 2
Architecture Count
x86_64 2
Related packages Count
xorg-x11-drv-nvidia-libs 1
 3:535.129.03-2.fc39 1
gjs 1
 0:1.78.3-1.fc39 1
mesa-dri-drivers 1
 0:23.3.3-1.fc39 1
llvm-libs 1
 0:17.0.6-2.fc39 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/lib64/libmozjs-115.so.0 0x541e9c
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
2
js::gc::GCRuntime::backgroundFinalize(JS::GCContext*, JS::Zone*, js::gc::AllocKind, js::gc::Arena**)
/lib64/libmozjs-115.so.0 0x54b232
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
3
js::gc::BackgroundSweepTask::run(js::AutoLockHelperThreadState&)
/lib64/libmozjs-115.so.0 0x54b423
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
4
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/lib64/libmozjs-115.so.0 0x526118
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
5
js::GCParallelTask::runFromMainThread()
/lib64/libmozjs-115.so.0 0x52687c
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
6
js::gc::GCRuntime::endSweepingSweepGroup(JS::GCContext*, js::SliceBudget&)
/lib64/libmozjs-115.so.0 0x544f2b
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
7
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-115.so.0 0x53fdcc
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
8
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/lib64/libmozjs-115.so.0 0x556a4d
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
9
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/lib64/libmozjs-115.so.0 0x51ce0f
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
10
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-115.so.0 0x520700
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
11
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/lib64/libmozjs-115.so.0 0x520d99
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
12
JSRuntime::destroyRuntime()
/lib64/libmozjs-115.so.0 0x2a5941
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
13
JS_DestroyContext(JSContext*)
/lib64/libmozjs-115.so.0 0x39d38a
Build id: c432e3de95f7d8573788141ed68b3765ac582492 		-
14
gjs_context_dispose(_GObject*)
/lib64/libgjs.so.0 0x8b2bb
Build id: a8fbf64e92045c39890f53275ac400a7500f7ccc 		-
15
g_object_unref
/lib64/libgobject-2.0.so.0 0x229b4
Build id: 21196a21894b8fc1e502823ac5aa55b37f3f0d4a 		-
16
main
/usr/bin/gjs-console 0x324b
Build id: 09ab39a82cd54d6eb251b6202d4475f4c88c6855 		-
17
__libc_start_call_main
/lib64/libc.so.6 0x2814a
Build id: 651b2bed7ecaf18098a63b8f10299821749766e6 		-
18
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2820b
Build id: 651b2bed7ecaf18098a63b8f10299821749766e6 		-
19
_start
/usr/bin/gjs-console 0x3a45
Build id: 09ab39a82cd54d6eb251b6202d4475f4c88c6855 		-