Bug 1940439 - SIGABRT in std::default_delete<JS::PersistentRooted<JSFunction*> >::operator()(JS::PersistentRooted<JSFunction*>*) at /usr/include/c++/11/bits/unique_ptr.h:85
Summary: SIGABRT in std::default_delete<JS::PersistentRooted<JSFunction*> >::operator(...
Keywords:
Status: CLOSED DUPLICATE of bug 1940171
Alias: None
Product: Fedora
Classification: Fedora
Component: gnome-shell
Version: 34
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Florian Müllner
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-03-18 12:18 UTC by Andrey Motoshkov
Modified: 2021-03-18 23:38 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-03-18 23:38:28 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Andrey Motoshkov 2021-03-18 12:18:54 UTC
Description of problem:
gnome-shell crushes with SIGABRT

Version-Release number of selected component (if applicable):
5.11.6-300.fc34.x86_64
gnome-shell-40.0~rc-1.fc34.x86_64
glib2-2.67.6-1.fc34.x86_64
gjs-1.67.3-1.fc34.x86_64

How reproducible:
100%

Steps to Reproduce:
1. Lock screen
2. Login to unlock
3.

Actual results:
crash

Expected results:
successful unlock

Additional info:
(gdb) info threads
  Id   Target Id                         Frame 
* 1    Thread 0x7f103ab40d80 (LWP 12576) 0x00007f103ebf5292 in raise () from /lib64/libc.so.6
  2    Thread 0x7f1039b3b640 (LWP 12587) 0x00007f103ecad9ff in poll () from /lib64/libc.so.6
  3    Thread 0x7f103ab3d640 (LWP 12585) 0x00007f103ecad9ff in poll () from /lib64/libc.so.6
  4    Thread 0x7f100bfff640 (LWP 12593) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  5    Thread 0x7f103828a640 (LWP 12647) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  6    Thread 0x7f0f888b2640 (LWP 13980) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  7    Thread 0x7f0f85f0e640 (LWP 13986) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  8    Thread 0x7f10021ad640 (LWP 13538) 0x00007f103ecad9ff in poll () from /lib64/libc.so.6
  9    Thread 0x7f10253d2640 (LWP 12596) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  10   Thread 0x7f0f86b11640 (LWP 13983) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  11   Thread 0x7f1009dff640 (LWP 12650) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  12   Thread 0x7f1024bd1640 (LWP 12595) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  13   Thread 0x7f10392ca640 (LWP 12588) 0x00007f103ecad9ff in poll () from /lib64/libc.so.6
  14   Thread 0x7f0f85b0c640 (LWP 13988) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  15   Thread 0x7f0f85d0d640 (LWP 13987) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  16   Thread 0x7f0f87513640 (LWP 15531) 0x00007f103ecb315d in syscall () from /lib64/libc.so.6
  17   Thread 0x7f0f86d12640 (LWP 13982) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  18   Thread 0x7f100910d640 (LWP 15532) 0x00007f103ecb315d in syscall () from /lib64/libc.so.6
  19   Thread 0x7f1009802640 (LWP 12653) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  20   Thread 0x7f1009a01640 (LWP 12652) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  21   Thread 0x7f1009c00640 (LWP 12651) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  22   Thread 0x7f1011ce8640 (LWP 12598) 0x00007f103ecad9ff in poll () from /lib64/libc.so.6
  23   Thread 0x7f1009ffe640 (LWP 12649) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  24   Thread 0x7f0f8610f640 (LWP 13985) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  25   Thread 0x7f10243d0640 (LWP 12648) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  26   Thread 0x7f0f86910640 (LWP 15521) 0x00007f103ecb315d in syscall () from /lib64/libc.so.6
  27   Thread 0x7f1012cea640 (LWP 12594) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  28   Thread 0x7f0f886b1640 (LWP 13981) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
  29   Thread 0x7f1038489640 (LWP 12646) 0x00007f103e266a6a in __futex_abstimed_wait_common64 () from /lib64/libpthread.so.0
(gdb) bt full
#0  0x00007f103ebf5292 in raise () at /lib64/libc.so.6
#1  0x000055d73004c282 in dump_gjs_stack_on_signal_handler (signo=6) at ../src/main.c:349
        sa = 
          {__sigaction_handler = {sa_handler = 0x55d73004c0f0 <dump_gjs_stack_alarm_sigaction>, sa_sigaction = 0x55d73004c0f0 <dump_gjs_stack_alarm_sigaction>}, sa_mask = {__val = {0 <repeats 16 times>}}, sa_flags = 0, sa_restorer = 0x0}
        i = 65
#2  0x00007f103ebf5310 in <signal handler called> () at /lib64/libc.so.6
#3  0x00007f103ebf5292 in raise () at /lib64/libc.so.6
#4  0x00007f103ebde8a4 in abort () at /lib64/libc.so.6
#5  0x00007f103ec37cd7 in __libc_message () at /lib64/libc.so.6
#6  0x00007f103ec3f95c in annobin_top_check.start () at /lib64/libc.so.6
#7  0x00007f103ec40d3c in _int_free () at /lib64/libc.so.6
#8  0x00007f103ec44a58 in free () at /lib64/libc.so.6
#9  0x00007f103f1286b8 in std::default_delete<JS::PersistentRooted<JSFunction*> >::operator()(JS::PersistentRooted<JSFunction*>*) const (this=<optimized out>, __ptr=<optimized out>)
    at /usr/include/c++/11/bits/unique_ptr.h:85
        __old_p = <optimized out>
#10 std::default_delete<JS::PersistentRooted<JSObject*> >::operator()(JS::PersistentRooted<JSObject*>*) const (__ptr=<optimized out>, this=<optimized out>)
    at /usr/include/c++/11/bits/unique_ptr.h:79
        __old_p = <optimized out>
#11 std::__uniq_ptr_impl<JS::PersistentRooted<JSObject*>, std::default_delete<JS::PersistentRooted<JSObject*> > >::reset(JS::PersistentRooted<JSObject*>*) (__p=0x0, this=0x55d732658f08)
    at /usr/include/c++/11/bits/unique_ptr.h:182
        __old_p = <optimized out>
#12 std::unique_ptr<JS::PersistentRooted<JSObject*>, std::default_delete<JS::PersistentRooted<JSObject*> > >::reset(JS::PersistentRooted<JSObject*>*) (__p=0x0, this=0x55d732658f08)
    at /usr/include/c++/11/bits/unique_ptr.h:456
#13 GjsMaybeOwned<JSObject*>::teardown_rooting() (this=0x55d732658f00) at ../gjs/jsapi-util-root.h:161
#14 GjsMaybeOwned<JSObject*>::reset() (this=0x55d732658f00) at ../gjs/jsapi-util-root.h:266
#15 0x00007f103f13023c in GjsMaybeOwned<JSObject*>::switch_to_unrooted(JSContext*) (cx=<optimized out>, this=0x55d732658f00) at ../gjs/jsapi-util-root.h:294
        thing = 
          {<js::RootedBase<JSObject*, JS::Rooted<JSObject*> >> = {<js::MutableWrappedPtrOperations<JSObject*, JS::Rooted<JSObject*> >> = {<js::WrappedPtrOperations<JSObject*, JS::Rooted<JSObject*> >> = {<No data fields>}, <No data fields>}, <No data fields>}, stack = 0x55d731436a18, prev = 0x0, ptr = 0x410974c0854dd689}
        gjs = 0x55d731429090
#16 ObjectInstance::switch_to_unrooted(JSContext*) (cx=<optimized out>, this=0x55d732658ef0) at ../gi/object.h:342
        gjs = 0x55d731429090
#17 ObjectInstance::toggle_down() (this=0x55d732658ef0) at ../gi/object.cpp:1152
        gjs = 0x55d731429090
#18 0x00007f103fc8499f in emit_signal_instance_in_idle_cb (data=data@entry=0x7f101826d3c0) at ../gio/gdbusconnection.c:3800
        signal_instance = 0x7f101826d3c0
        parameters = 0x7f10186d0c30
        has_subscription = 1
#19 0x00007f103fa3f65b in g_idle_dispatch (source=0x7f101840c990, callback=0x7f103fc84920 <emit_signal_instance_in_idle_cb>, user_data=0x7f101826d3c0) at ../glib/gmain.c:5848
        again = <optimized out>
#20 0x00007f103fa433d7 in g_main_dispatch (context=0x55d73107a4a0) at ../glib/gmain.c:3337
        dispatch = 0x7f103fa3f640 <g_idle_dispatch>
        prev_source = 0x0
        begin_time_nsec = 11484050534792
        was_in_call = <optimized out>
        user_data = 0x7f101826d3c0
        callback = 0x7f103fc84920 <emit_signal_instance_in_idle_cb>
        cb_funcs = 0x7f103fb263a0 <g_source_callback_funcs>
        cb_data = 0x7f10181be020
        need_destroy = <optimized out>
        source = 0x7f101840c990
        current = 0x55d7310ad430
        i = 0
#21 g_main_context_dispatch (context=0x55d73107a4a0) at ../glib/gmain.c:4055
#22 0x00007f103fa97518 in g_main_context_iterate.constprop.0 (context=0x55d73107a4a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4131
        max_priority = 0
        timeout = 0
--Type <RET> for more, q to quit, c to continue without paging--
        some_ready = 1
        nfds = 15
        allocated_nfds = 24
        fds = <optimized out>
        begin_time_nsec = 11484050489360
#23 0x00007f103fa429a3 in g_main_loop_run (loop=0x55d731414b70) at ../glib/gmain.c:4329
        __func__ = "g_main_loop_run"
#24 0x00007f103ee55712 in meta_run () at /lib64/libmutter-8.so.0
#25 0x000055d73004bca6 in main (argc=<optimized out>, argv=<optimized out>) at ../src/main.c:504
        ctx = <optimized out>
        error = 0x0
        ecode = <optimized out>

Comment 1 Adam Williamson 2021-03-18 23:38:28 UTC
Looks like the same crash-on-session-unlock as several other bugs.

*** This bug has been marked as a duplicate of bug 1940171 ***


Note You need to log in before you can comment on or make changes to this bug.