Description of problem:

gnome-shell killed by segfault.

  [251932.927866] traps: gnome-shell[3985] general protection ip:7f1a83d30bcd sp:7ffd29bf5da8 error:0 in libfreetype.so.6.10.0[7f1a83cd4000+a0000]


The below is backtrace when gnome-shell was terminated.

  # gdb -c coredump
  
  (..snip..)
  
  [Thread debugging using libthread_db enabled]
  Using host libthread_db library "/lib64/libthread_db.so.1".
  Core was generated by `/usr/bin/gnome-shell'.
  Program terminated with signal 11, Segmentation fault.
  #0  gray_find_cell (worker=0x39b36e0)
      at /usr/src/debug/freetype-2.4.11/src/smooth/ftgrays.c:480
  480	      cell = *pcell;
  
  (gdb) bt
  #0  gray_find_cell (worker=0x39b36e0)
      at /usr/src/debug/freetype-2.4.11/src/smooth/ftgrays.c:480
  #1  gray_record_cell (worker=0x39b36e0)
      at /usr/src/debug/freetype-2.4.11/src/smooth/ftgrays.c:511
  #2  0x00007f1a83d30cea in gray_set_cell (worker=worker@entry=0x39b36e0, 
      ex=ex@entry=0, ey=2, ey@entry=931585898161446528)
      at /usr/src/debug/freetype-2.4.11/src/smooth/ftgrays.c:554
  #3  0x00007f1a83d3123b in gray_render_line (worker=0x39b36e0, to_x=216, 
      to_y=2732) at /usr/src/debug/freetype-2.4.11/src/smooth/ftgrays.c:779
  #4  0x00007f1a83d319e2 in gray_line_to (to=<optimized out>, 
      worker=<optimized out>)
      at /usr/src/debug/freetype-2.4.11/src/smooth/ftgrays.c:1147
  #5  0x00007f1a83ce70c9 in FT_Outline_Decompose (
      outline=outline@entry=0x39b3e08, 
      func_interface=func_interface@entry=0x7f1a83f77640 <func_interface>, 
      user=user@entry=0x39b36e0)
      at /usr/src/debug/freetype-2.4.11/src/base/ftoutln.c:160
  #6  0x00007f1a83d31b63 in gray_convert_glyph_inner (
      worker=worker@entry=0x39b36e0)
      at /usr/src/debug/freetype-2.4.11/src/smooth/ftgrays.c:1736
  #7  0x00007f1a83d31ead in gray_convert_glyph (worker=0x39b36e0)
      at /usr/src/debug/freetype-2.4.11/src/smooth/ftgrays.c:1838
  #8  0x00007f1a83d30951 in ft_smooth_render_generic (render=0x39c82b0, 
      slot=0x38624a0, mode=<optimized out>, origin=<optimized out>, 
      required_mode=<optimized out>)
      at /usr/src/debug/freetype-2.4.11/src/smooth/ftsmooth.c:316
  #9  0x00007f1a83ceb693 in FT_Render_Glyph_Internal (library=0x38f7c00, 
      slot=0x38624a0, render_mode=render_mode@entry=FT_RENDER_MODE_NORMAL)
      at /usr/src/debug/freetype-2.4.11/src/base/ftobjs.c:4060
  #10 0x00007f1a83ceb726 in FT_Render_Glyph (slot=<optimized out>, 
      render_mode=render_mode@entry=FT_RENDER_MODE_NORMAL)
      at /usr/src/debug/freetype-2.4.11/src/base/ftobjs.c:4100
  #11 0x00007f1a8b7cb763 in _render_glyph_outline (face=0x3a1b4f0, 
      surface=0x7ffd29bf64f8, font_options=0x3f94b88) at cairo-ft-font.c:1444
  #12 _cairo_ft_scaled_glyph_init (abstract_font=0x3f949a0, 
      scaled_glyph=0x70053f8, info=CAIRO_SCALED_GLYPH_INFO_SURFACE)
      at cairo-ft-font.c:2378
  #13 0x00007f1a8b769d68 in _cairo_scaled_glyph_lookup (scaled_font=0x3f949a0, 
      index=2912, info=CAIRO_SCALED_GLYPH_INFO_SURFACE, 
      scaled_glyph_ret=0x7ffd29bf6798) at cairo-scaled-font.c:3004
  #14 0x00007f1a8b733c57 in composite_glyphs (_dst=<optimized out>, 
      op=<optimized out>, _src=<optimized out>, src_x=<optimized out>, 
      src_y=<optimized out>, dst_x=<optimized out>, dst_y=0, info=0x7ffd29bf70c0)
      at cairo-image-compositor.c:889
  #15 0x00007f1a8b784544 in clip_and_composite (
      compositor=compositor@entry=0x7f1a8ba26920 <compositor.11487>, 
      extents=extents@entry=0x7ffd29bf7160, 
      draw_func=draw_func@entry=0x7f1a8b782680 <composite_glyphs>, 
      mask_func=mask_func@entry=0x0, 
      draw_closure=draw_closure@entry=0x7ffd29bf70c0, need_clip=4)
      at cairo-traps-compositor.c:1049
  #16 0x00007f1a8b784760 in _cairo_traps_compositor_glyphs (
      _compositor=0x7f1a8ba26920 <compositor.11487>, extents=0x7ffd29bf7160, 
      scaled_font=0x3f949a0, glyphs=0x7ffd29bf78d0, num_glyphs=1, overlap=0)
      at cairo-traps-compositor.c:2331
  #17 0x00007f1a8b729acf in _cairo_compositor_glyphs (
      compositor=0x7f1a8ba26920 <compositor.11487>, surface=0x8fa7a90, 
      op=<optimized out>, source=<optimized out>, glyphs=0x7ffd29bf78d0, 
      num_glyphs=1, scaled_font=0x3f949a0, clip=clip@entry=0x0)
      at cairo-compositor.c:250
  #18 0x00007f1a8b73b12f in _cairo_image_surface_glyphs (
      abstract_surface=<optimized out>, op=<optimized out>, 
      source=<optimized out>, glyphs=<optimized out>, 
      num_glyphs=<optimized out>, scaled_font=<optimized out>, clip=0x0)
      at cairo-image-surface.c:1005
  #19 0x00007f1a8b7724bc in _cairo_surface_show_text_glyphs (surface=0x8fa7a90, 
      op=CAIRO_OPERATOR_OVER, source=0x7ffd29bf7580, utf8=0x0, utf8_len=0, 
      glyphs=0x7ffd29bf78d0, num_glyphs=1, clusters=0x0, num_clusters=0, 
      cluster_flags=(unknown: 0), scaled_font=0x3f949a0, clip=0x0)
      at cairo-surface.c:2600
  #20 0x00007f1a8b732909 in _cairo_gstate_show_text_glyphs (
      gstate=0x7f1a680745d0, glyphs=<optimized out>, num_glyphs=1, info=0x0)
      at cairo-gstate.c:2023
  #21 0x00007f1a8b724b92 in cairo_show_glyphs (cr=<optimized out>, 
      glyphs=<optimized out>, num_glyphs=<optimized out>) at cairo.c:3319
  #22 0x00007f1a8e335933 in cogl_pango_renderer_set_dirty_glyph (font=0x3dc7950, 
      font@entry=<error reading variable: value has been optimized out>, 
      glyph=2912, 
      glyph@entry=<error reading variable: value has been optimized out>, 
      value=0x53cdc80, 
      value@entry=<error reading variable: value has been optimized out>)
      at cogl-pango-render.c:619
  #23 0x00007f1a8e33651e in _cogl_pango_glyph_cache_set_dirty_glyphs_cb (
      key_ptr=<optimized out>, value_ptr=0x53cdc80, user_data=<optimized out>)
      at cogl-pango-glyph-cache.c:388
  #24 0x00007f1a8b1b33d0 in g_hash_table_foreach (hash_table=0x272dea0, 
      func=func@entry=0x7f1a8e336500 <_cogl_pango_glyph_cache_set_dirty_glyphs_cb>, 
      user_data=user_data@entry=0x7f1a8e335840 <cogl_pango_renderer_set_dirty_glyph>) at ghash.c:1550
  #25 0x00007f1a8e336a03 in _cogl_pango_glyph_cache_set_dirty_glyphs (
      cache=0x282f060, 
      func=func@entry=0x7f1a8e335840 <cogl_pango_renderer_set_dirty_glyph>)
      at cogl-pango-glyph-cache.c:403
  #26 0x00007f1a8e336276 in _cogl_pango_set_dirty_glyphs (priv=<optimized out>)
      at cogl-pango-render.c:681
  #27 cogl_pango_ensure_glyph_cache_for_layout (layout=layout@entry=0x8f73428)
      at cogl-pango-render.c:729
  #28 0x00007f1a8ea1e7f4 in clutter_text_create_layout (text=<optimized out>, 
      allocation_width=allocation_width@entry=-1, 
      allocation_height=allocation_height@entry=-1) at ./clutter-text.c:886
  #29 0x00007f1a8ea1ec33 in clutter_text_get_preferred_width (
      self=<optimized out>, for_height=<optimized out>, 
      min_width_p=0x7ffd29bf8b10, natural_width_p=0x7ffd29bf8b14)
      at ./clutter-text.c:2559
  #30 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (self=0x8f73830, 
      for_height=-1, min_width_p=min_width_p@entry=0x7ffd29bf8bb0, 
      natural_width_p=natural_width_p@entry=0x7ffd29bf8bb4)
      at ./clutter-actor.c:9382
  #31 0x00007f1a945f044a in st_label_get_preferred_width (actor=<optimized out>, 
      for_height=-1, min_width_p=0x7ffd29bf8bb0, natural_width_p=0x7ffd29bf8bb4)
      at st/st-label.c:143
  #32 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (self=0x8f732d0, 
      for_height=-1, min_width_p=0x7ffd29bf8c20, natural_width_p=0x7ffd29bf8c24)
      at ./clutter-actor.c:9382
  #33 0x00007f1a8e9d7efd in get_child_size (actor=<optimized out>, 
      orientation=<optimized out>, for_size=for_size@entry=-1, 
      min_size_p=min_size_p@entry=0x7ffd29bf8c20, 
      natural_size_p=natural_size_p@entry=0x7ffd29bf8c24)
      at ./clutter-box-layout.c:462
  #34 0x00007f1a8e9d80c3 in get_preferred_size_for_orientation (
      self=<optimized out>, container=<optimized out>, for_size=-1, 
      min_size_p=0x7ffd29bf8cf0, natural_size_p=0x7ffd29bf8cf4)
      at ./clutter-box-layout.c:493
  #35 0x00007f1a9460bdaa in st_widget_get_preferred_width (self=0x8f6f030, 
      for_height=-1, min_width_p=0x7ffd29bf8cf0, natural_width_p=0x7ffd29bf8cf4)
      at st/st-widget.c:378
  #36 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (self=0x8f6f030, 
      for_height=-1, min_width_p=0x7ffd29bf8d50, natural_width_p=0x7ffd29bf8d54)
      at ./clutter-actor.c:9382
  #37 0x00007f1a8e9d7efd in get_child_size (actor=<optimized out>, 
      orientation=orientation@entry=CLUTTER_ORIENTATION_HORIZONTAL, 
      for_size=for_size@entry=-1, min_size_p=min_size_p@entry=0x7ffd29bf8d50, 
      natural_size_p=natural_size_p@entry=0x7ffd29bf8d54)
      at ./clutter-box-layout.c:462
  #38 0x00007f1a8e9d7fa0 in get_base_size_for_opposite_orientation (
      self=<optimized out>, container=<optimized out>, 
      min_size_p=0x7ffd29bf8e20, natural_size_p=0x7ffd29bf8e24)
      at ./clutter-box-layout.c:541
  #39 0x00007f1a9460bdaa in st_widget_get_preferred_width (self=0x5613a00, 
      for_height=-1, min_width_p=0x7ffd29bf8e20, natural_width_p=0x7ffd29bf8e24)
      at st/st-widget.c:378
  #40 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (self=0x5613a00, 
      for_height=for_height@entry=-1, 
      min_width_p=min_width_p@entry=0x7ffd29bf8e80, 
      natural_width_p=natural_width_p@entry=0x7ffd29bf8e84)
      at ./clutter-actor.c:9382
  #41 0x00007f1a945f5880 in st_scroll_view_get_preferred_width (actor=0x5602b10, 
      for_height=-1, min_width_p=0x7ffd29bf8ee0, natural_width_p=0x7ffd29bf8ee4)
      at st/st-scroll-view.c:364
  ---Type <return> to continue, or q <return> to quit---
  #42 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (self=0x5602b10, 
      for_height=-1, min_width_p=0x7ffd29bf8f50, natural_width_p=0x7ffd29bf8f54)
      at ./clutter-actor.c:9382
  #43 0x00007f1a8e9d7efd in get_child_size (actor=<optimized out>, 
      orientation=<optimized out>, for_size=for_size@entry=-1, 
      min_size_p=min_size_p@entry=0x7ffd29bf8f50, 
      natural_size_p=natural_size_p@entry=0x7ffd29bf8f54)
      at ./clutter-box-layout.c:462
  #44 0x00007f1a8e9d80c3 in get_preferred_size_for_orientation (
      self=<optimized out>, container=<optimized out>, for_size=-1, 
      min_size_p=0x7ffd29bf9020, natural_size_p=0x7ffd29bf9024)
      at ./clutter-box-layout.c:493
  #45 0x00007f1a9460bdaa in st_widget_get_preferred_width (self=0x5601a20, 
      for_height=-1, min_width_p=0x7ffd29bf9020, natural_width_p=0x7ffd29bf9024)
      at st/st-widget.c:378
  #46 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (self=0x5601a20, 
      for_height=-1, min_width_p=0x7ffd29bf9080, natural_width_p=0x7ffd29bf9084)
      at ./clutter-actor.c:9382
  #47 0x00007f1a8e9d7efd in get_child_size (actor=<optimized out>, 
      orientation=orientation@entry=CLUTTER_ORIENTATION_HORIZONTAL, 
      for_size=for_size@entry=-1, min_size_p=min_size_p@entry=0x7ffd29bf9080, 
      natural_size_p=natural_size_p@entry=0x7ffd29bf9084)
      at ./clutter-box-layout.c:462
  #48 0x00007f1a8e9d7fa0 in get_base_size_for_opposite_orientation (
      self=<optimized out>, container=<optimized out>, 
      min_size_p=0x7ffd29bf9150, natural_size_p=0x7ffd29bf9154)
      at ./clutter-box-layout.c:541
  #49 0x00007f1a9460bdaa in st_widget_get_preferred_width (self=0x5600830, 
      for_height=-1, min_width_p=0x7ffd29bf9150, natural_width_p=0x7ffd29bf9154)
      at st/st-widget.c:378
  #50 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (self=0x5600830, 
      for_height=-1, min_width_p=0x7ffd29bf91b0, natural_width_p=0x7ffd29bf91b4)
      at ./clutter-actor.c:9382
  #51 0x00007f1a8e9d7efd in get_child_size (actor=<optimized out>, 
      orientation=orientation@entry=CLUTTER_ORIENTATION_HORIZONTAL, 
      for_size=for_size@entry=-1, min_size_p=min_size_p@entry=0x7ffd29bf91b0, 
      natural_size_p=natural_size_p@entry=0x7ffd29bf91b4)
      at ./clutter-box-layout.c:462
  #52 0x00007f1a8e9d7fa0 in get_base_size_for_opposite_orientation (
      self=<optimized out>, container=<optimized out>, 
      min_size_p=0x7ffd29bf9280, natural_size_p=0x7ffd29bf9284)
      at ./clutter-box-layout.c:541
  #53 0x00007f1a9460bdaa in st_widget_get_preferred_width (self=0x55facc0, 
      for_height=-1, min_width_p=0x7ffd29bf9280, natural_width_p=0x7ffd29bf9284)
      at st/st-widget.c:378
  #54 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (
      self=self@entry=0x55facc0, for_height=-1, 
      min_width_p=min_width_p@entry=0x7ffd29bf9360, 
      natural_width_p=natural_width_p@entry=0x7ffd29bf9364)
      at ./clutter-actor.c:9382
  #55 0x00007f1a945f1019 in _st_actor_get_preferred_width (
      actor=<optimized out>, for_height=<optimized out>, y_fill=<optimized out>, 
      min_width_p=<optimized out>, natural_width_p=<optimized out>)
      at st/st-private.c:61
  #56 0x00007f1a945e5a44 in st_bin_get_preferred_width (self=<optimized out>, 
      for_height=-1, min_width_p=0x7ffd29bf9360, natural_width_p=0x7ffd29bf9364)
      at st/st-bin.c:141
  #57 0x00007f1a8e9b9679 in clutter_actor_get_preferred_width (self=0x55fcc70, 
      for_height=-1, min_width_p=0x7ffd29bf9530, natural_width_p=0x7ffd29bf9538)
      at ./clutter-actor.c:9382
  #58 0x00007f1a88f37dac in ffi_call_unix64 () at ../src/x86/unix64.S:76
  #59 0x00007f1a88f376d5 in ffi_call (cif=<optimized out>, fn=<optimized out>, 
      rvalue=0x7ffd29bf9680, avalue=0x7ffd29bf9550) at ../src/x86/ffi64.c:522
  #60 0x00007f1a9301119e in gjs_invoke_c_function (context=context@entry=
      0x275b800, function=function@entry=0x3b3f860, 
      obj=obj@entry=0x7f1a5b824be0, js_argc=js_argc@entry=1, 
      js_argv=js_argv@entry=0x7ffd29bf9d48, 
      js_rval=js_rval@entry=0x7ffd29bf9890, r_value=r_value@entry=0x0)
      at gi/function.cpp:972
  #61 0x00007f1a9301265b in function_call (context=0x275b800, js_argc=1, 
      vp=0x7ffd29bf9d38) at gi/function.cpp:1294
  #62 0x00007f1a92909472 in CallJSNative (args=..., native=<optimized out>, 
      cx=0x275b800) at /usr/src/debug/mozjs-24.2.0/js/src/jscntxtinlines.h:321
  #63 js::Invoke (cx=cx@entry=0x275b800, args=..., 
      construct=construct@entry=js::NO_CONSTRUCT)
      at /usr/src/debug/mozjs-24.2.0/js/src/vm/Interpreter.cpp:474
  #64 0x00007f1a92918c73 in js::Invoke (cx=cx@entry=0x275b800, thisv=..., 
      fval=..., argc=argc@entry=1, argv=<optimized out>, 
      rval=rval@entry=0x7ffd29bf9f38)
      at /usr/src/debug/mozjs-24.2.0/js/src/vm/Interpreter.cpp:531
  #65 0x00007f1a92b76800 in js::jit::DoCallFallback (cx=0x275b800, 
      frame=0x7ffd29bf9fe0, stub=0x6ef4780, argc=1, vp=<optimized out>, res=...)
      at /usr/src/debug/mozjs-24.2.0/js/src/jit/BaselineIC.cpp:7007
  #66 0x00007f1a94afdaa2 in ?? ()
  #67 0x0000000000016dbc in ?? ()
  #68 0x00007ffd29bf9f38 in ?? ()
  #69 0x0000000000000000 in ?? ()


Version-Release number of selected component (if applicable):

  - kernel-3.10.0-327.13.1.el7.x86_64
  - gnome-shell-3.14.4-37.el7.x86_64
  - glib2-2.42.2-5.el7
  - glibc-2.17-106.el7_2.8.x86_64

How reproducible:

  This problem is not reproducible.

Steps to Reproduce:

  No reproducer.

Actual results:

  Segfault occured.

Expected results:

  Segfault does not occur.

Additional info:

It seems to be similar to the following problems.

  - https://bugzilla.redhat.com/show_bug.cgi?id=1054428
  - https://bugzilla.redhat.com/show_bug.cgi?id=1051380
  - https://bugzilla.redhat.com/show_bug.cgi?id=1215095