Bug 2171321

Summary: [abrt] gnome-shell: js::GCMarker::mark<JSString>(JSString*)(): gnome-shell killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Yann Droneaud <yann>
Component: gnome-shellAssignee: Florian Müllner <fmuellner>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 39CC: adscvr, fmuellner, gnome-sig, jadahl, otaylor, philip.wyett
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/88bc7ca9b249394b8940efc40b463f588a71958
Whiteboard: abrt_hash:e715317e245b6ca49df887d6e5e9be46ba19e91e;VARIANT_ID=workstation;
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: proc_pid_status
none
File: maps
none
File: limits
none
File: environ
none
File: open_fds
none
File: mountinfo
none
File: os_info
none
File: cpuinfo
none
File: core_backtrace
none
File: exploitable
none
File: backtrace none

Description Yann Droneaud 2023-02-19 22:17:52 UTC
Description of problem:


Version-Release number of selected component:
gnome-shell-44~beta-1.fc39

Additional info:
reporter:       libreport-2.17.6
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=db8271503d80479088c1c2b463b50e5f;i=5ea52;b=6bc366e1756b4b2993e1495c70d89654;m=2680aa89a;t=5f51336c11a5a;x=31676cb984e613f0
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell
cgroup:         0::/user.slice/user-1000.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            1000
kernel:         6.2.0-0.rc8.20230214gitf6feea56f66d.58.fc39.x86_64
package:        gnome-shell-44~beta-1.fc39
runlevel:       N 5
dso_list:       /usr/bin/gnome-shell gnome-shell-44~beta-1.fc39.x86_64 (Fedora Project) 1676671336
backtrace_rating: 4
crash_function: js::GCMarker::mark<JSString>(JSString*)
comment:        

Truncated backtrace:
Thread no. 1 (24 frames)
 #0 js::GCMarker::mark<JSString>(JSString*) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:1245
 #1 js::GCMarker::eagerlyMarkChildren(JSRope*) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:1369
 #2 js::GCMarker::eagerlyMarkChildren(JSString*) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:1312
 #3 js::GCMarker::scanChildren<JSString>(JSString*) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:1113
 #4 js::GCMarker::traverse<JSString>(JSString*) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:1118
 #5 js::GCMarker::markAndTraverse<JSString>(JSString*) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:1067
 #6 JS::TraceEdge<JS::PropertyKey>(JSTracer*, JS::Heap<JS::PropertyKey>*, char const*) at /usr/include/mozjs-102/js/RootingAPI.h:363
 #7 JS::GCPolicy<JS::Heap<JS::PropertyKey> >::trace(JSTracer*, JS::Heap<JS::PropertyKey>*, char const*) at /usr/include/mozjs-102/js/GCPolicyAPI.h:134
 #8 JS::GCHashSet<JS::Heap<JS::PropertyKey>, IdHasher, js::SystemAllocPolicy>::trace(JSTracer*) at /usr/include/mozjs-102/js/GCHashTable.h:252
 #9 ObjectPrototype::trace_impl(JSTracer*) at ../gi/object.cpp:1900
 #10 GIWrapperBase<ObjectBase, ObjectPrototype, ObjectInstance>::trace(JSTracer*, JSObject*) at ../gi/wrapperutils.h:432
 #11 JSClass::doTrace(JSTracer*, JSObject*) const at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/dist/include/js/Class.h:653
 #12 CallTraceHook at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:1640
 #13 js::GCMarker::processMarkStackTop(js::SliceBudget&) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:2019
 #14 js::GCMarker::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/Marking.cpp:1818
 #15 js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/GC.cpp:2784
 #16 js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/GC.cpp:3204
 #17 js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/GC.cpp:3736
 #18 js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/GC.cpp:3920
 #19 js::gc::GCRuntime::gc(JS::GCOptions, JS::GCReason) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/gc/GC.cpp:3998
 #20 JS_GC(JSContext*, JS::GCReason) at /usr/src/debug/mozjs102-102.7.0-2.fc38.x86_64/jsapi.cpp:1305
 #21 GjsContextPrivate::trigger_gc_if_needed(void*) at ../gjs/context.cpp:835
 #25 annobin_g_main_context_iterate.isra[end] at ../glib/gmain.c:4287
 #26 0x00007f9e38b7f0be in

Comment 1 Yann Droneaud 2023-02-19 22:17:55 UTC
Created attachment 1945143 [details]
File: proc_pid_status

Comment 2 Yann Droneaud 2023-02-19 22:17:56 UTC
Created attachment 1945144 [details]
File: maps

Comment 3 Yann Droneaud 2023-02-19 22:17:58 UTC
Created attachment 1945145 [details]
File: limits

Comment 4 Yann Droneaud 2023-02-19 22:18:00 UTC
Created attachment 1945146 [details]
File: environ

Comment 5 Yann Droneaud 2023-02-19 22:18:01 UTC
Created attachment 1945147 [details]
File: open_fds

Comment 6 Yann Droneaud 2023-02-19 22:18:03 UTC
Created attachment 1945148 [details]
File: mountinfo

Comment 7 Yann Droneaud 2023-02-19 22:18:04 UTC
Created attachment 1945149 [details]
File: os_info

Comment 8 Yann Droneaud 2023-02-19 22:18:06 UTC
Created attachment 1945150 [details]
File: cpuinfo

Comment 9 Yann Droneaud 2023-02-19 22:18:08 UTC
Created attachment 1945151 [details]
File: core_backtrace

Comment 10 Yann Droneaud 2023-02-19 22:18:09 UTC
Created attachment 1945152 [details]
File: exploitable

Comment 11 Yann Droneaud 2023-02-19 22:18:11 UTC
Created attachment 1945153 [details]
File: backtrace

Comment 12 Fedora Release Engineering 2023-08-16 07:07:22 UTC
This bug appears to have been reported against 'rawhide' during the Fedora Linux 39 development cycle.
Changing version to 39.