Bug 2405937

Summary: [abrt] chromium: wl_map_insert_at(): chromium-browser killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Mr. Beedell, Roke Julian Lockhart (RJLB) <8ru2u4gz>
Component: chromiumAssignee: Than Ngo <than>
Status: CLOSED WORKSFORME QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 42CC: 8ru2u4gz, pigpigman8686, spotrh, suraj.ghimire7, than, yaneti
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/6223aaeeb54d9a2aeac4a0ff0af1afde40cb2818
Whiteboard: abrt_hash:7693237b347ea30e86b9883d5a1be36fc0d9445c;VARIANT_ID=kde;
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-12-08 07:38:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: proc_pid_status
none
File: maps
none
File: limits
none
File: open_fds
none
File: mountinfo
none
File: os_info
none
File: cpuinfo
none
File: core_backtrace
none
File: exploitable
none
File: backtrace none

Description Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:26 UTC 
Description of problem:
Occurs whenever I close Chromium.

Version-Release number of selected component:
chromium-141.0.7390.107-1.fc42

Additional info:
reporter:       libreport-2.17.15
type:           CCpp
reason:         chromium-browser killed by SIGSEGV
journald_cursor: s=a2d6d580caa24cf3a9483be7f85033e4;i=3cba21;b=f5936b69817a44bd822a6b289754f3d8;m=1dc53d573;t=641c5f1629ff2;x=9e4acd04281e5831
executable:     /usr/lib64/chromium-browser/chromium-browser
cmdline:        $'/usr/lib64/chromium-browser/chromium-browser --enable-chrome-browser-cloud-management --enable-features=AllowQt,WaylandLinuxDrmSyncobj,WaylandPerSurfaceScale,WaylandUiScale,AcceleratedVideoDecodeLinuxGL,AcceleratedVideoDecodeLinuxZeroCopyGL,AcceleratedVideoEncoder --enable-plugins --enable-extensions --enable-user-scripts --enable-printing --enable-sync --auto-ssl-client-auth'
cgroup:         0::/user.slice/user-1000.slice/user/app.slice/app-org.chromium.Chromium-39860.scope
environ:        to-ssl-client-auth
rootdir:        /
uid:            1000
kernel:         6.16.12-200.fc42.x86_64
package:        chromium-141.0.7390.107-1.fc42
runlevel:       N 5
backtrace_rating: 4
crash_function: wl_map_insert_at
comment:        

Truncated backtrace:
Thread no. 1 (47 frames)
 #0 wl_map_insert_at at ../../third_party/wayland/src/src/wayland-util.c:290
 #1 proxy_destroy at ../../third_party/wayland/src/src/wayland-client.c:574
 #2 wl_proxy_destroy_caller_locks at ../../third_party/wayland/src/src/wayland-client.c:598
 #3 wl_proxy_marshal_array_flags at ../../third_party/wayland/src/src/wayland-client.c:939
 #4 wl_proxy_marshal_flags at ../../third_party/wayland/src/src/wayland-client.c:857
 #5 operator()<zwp_idle_inhibitor_v1> at ../../ui/ozone/platform/wayland/common/wayland_object.h:50
 #6 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #7 ~WaylandScreen at ../../ui/ozone/platform/wayland/host/wayland_screen.cc:133
 #8 ui::WaylandScreen::~WaylandScreen() at ../../ui/ozone/platform/wayland/host/wayland_screen.cc:131
 #9 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #10 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #11 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #12 ~ScreenOzone at ../../ui/aura/screen_ozone.cc:38
 #13 ~DesktopScreenOzone at ../../ui/views/widget/desktop_aura/desktop_screen_ozone.cc:18
 #15 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #16 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #17 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #18 ~ChromeBrowserMainExtraPartsViews at ../../chrome/browser/ui/views/chrome_browser_main_extra_parts_views.cc:67
 #19 ~ChromeBrowserMainExtraPartsViewsLinux at ../../chrome/browser/ui/views/chrome_browser_main_extra_parts_views_linux.cc:47
 #21 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #22 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #23 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #24 __destroy_at<std::__Cr::unique_ptr<ChromeBrowserMainExtraParts, std::__Cr::default_delete<ChromeBrowserMainExtraParts> >, 0> at gen/third_party/libc++/src/include/__memory/construct_at.h:61
 #25 destroy<std::__Cr::unique_ptr<ChromeBrowserMainExtraParts, std::__Cr::default_delete<ChromeBrowserMainExtraParts> >, 0> at gen/third_party/libc++/src/include/__memory/allocator_traits.h:313
 #26 __base_destruct_at_end at gen/third_party/libc++/src/include/__vector/vector.h:772
 #27 __destruct_at_end at gen/third_party/libc++/src/include/__vector/vector.h:712
 #28 pop_back at gen/third_party/libc++/src/include/__vector/vector.h:496
 #29 ~ChromeBrowserMainParts at ../../chrome/browser/chrome_browser_main.cc:595
 #30 ~ChromeBrowserMainPartsLinux at ../../chrome/browser/chrome_browser_main_linux.cc:53
 #32 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #33 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #34 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #35 ~BrowserMainLoop at ../../content/browser/browser_main_loop.cc:516
 #36 content::BrowserMainLoop::~BrowserMainLoop() at ../../content/browser/browser_main_loop.cc:512
 #37 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #38 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #39 Shutdown at ../../content/browser/browser_main_runner_impl.cc:186
 #40 BrowserMain at ../../content/browser/browser_main.cc:41
 #41 RunBrowserProcessMain at ../../content/app/content_main_runner_impl.cc:701
 #42 RunBrowser at ../../content/app/content_main_runner_impl.cc:1278
 #43 Run at ../../content/app/content_main_runner_impl.cc:1127
 #44 RunContentProcess at ../../content/app/content_main.cc:346
 #45 ContentMain at ../../content/app/content_main.cc:359
 #46 ChromeMain at ../../chrome/app/chrome_main.cc:228
 #47 __libc_start_call_main at ../sysdeps/nptl/libc_start_call_main.h:58
 #48 __libc_start_main_impl at ../csu/libc-start.c:360
 #49 _start
Comment 1 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:30 UTC 
Created attachment 2110511 [details]
File: proc_pid_status
Comment 2 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:32 UTC 
Created attachment 2110512 [details]
File: maps
Comment 3 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:34 UTC 
Created attachment 2110513 [details]
File: limits
Comment 4 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:36 UTC 
Created attachment 2110514 [details]
File: open_fds
Comment 5 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:38 UTC 
Created attachment 2110515 [details]
File: mountinfo
Comment 6 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:40 UTC 
Created attachment 2110516 [details]
File: os_info
Comment 7 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:42 UTC 
Created attachment 2110517 [details]
File: cpuinfo
Comment 8 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:44 UTC 
Created attachment 2110518 [details]
File: core_backtrace
Comment 9 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:46 UTC 
Created attachment 2110519 [details]
File: exploitable
Comment 10 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:48 UTC 
Created attachment 2110520 [details]
File: backtrace
Comment 11 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 22:01:47 UTC 
This has been occurring for some time, but required me to remediate https://discussion.fedoraproject.org/t/162959/5 in order to report.
Comment 12 Than Ngo 2025-11-04 13:36:01 UTC 
Could you please try new chromium-142.0.7444.59 ? It's submitted as update in https://bodhi.fedoraproject.org/updates/FEDORA-2025-7c0b3fa81f

  sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-7c0b3fa81f

Thank you!
Comment 13 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-11-04 13:43:25 UTC 
I'm now struggling to reproduce this even with chromium-141.0.7390.122-1.fc43.x86_64, so do you know of a consistent way to reproduce it? I need to know, to compare it with that update...
Comment 14 Than Ngo 2025-11-04 14:01:00 UTC 
To be honest, I cannot reproduce your problem on my test computer. It does not crash when i close chromium.
The crash could be caused by many things and it is not easy to detect.

It's not possible to debug/fix it without a working reproduce
Comment 15 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-12-07 22:06:11 UTC 
I've been unable to, as well, in `chromium-143.0.7499.40-1.fc43.x86_64`. Therefore, `WORKSFORME`, or a resolution that indicates that it's fixed?
Comment 16 Red Hat Bugzilla 2026-04-08 04:25:03 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days or the product is inactive and locked