Bug 2405937 - [abrt] chromium: wl_map_insert_at(): chromium-browser killed by SIGSEGV
Summary: [abrt] chromium: wl_map_insert_at(): chromium-browser killed by SIGSEGV
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Fedora
Classification: Fedora
Component: chromium
Version: 42
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Than Ngo
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:7693237b347ea30e86b9883d5a1...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-10-22 21:27 UTC by Mr. Beedell, Roke Julian Lockhart (RJLB)
Modified: 2026-04-08 04:25 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2025-12-08 07:38:13 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: proc_pid_status (1.49 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: maps (3.97 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: limits (1.29 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: open_fds (6.78 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: mountinfo (3.77 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: os_info (739 bytes, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: cpuinfo (3.76 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: core_backtrace (133.88 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: exploitable (81 bytes, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: backtrace (159.48 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 2381730 0 unspecified CLOSED DebugInfo packages aren't being produced. 2025-12-07 22:06:10 UTC

Description Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:26 UTC
Description of problem:
Occurs whenever I close Chromium.

Version-Release number of selected component:
chromium-141.0.7390.107-1.fc42

Additional info:
reporter:       libreport-2.17.15
type:           CCpp
reason:         chromium-browser killed by SIGSEGV
journald_cursor: s=a2d6d580caa24cf3a9483be7f85033e4;i=3cba21;b=f5936b69817a44bd822a6b289754f3d8;m=1dc53d573;t=641c5f1629ff2;x=9e4acd04281e5831
executable:     /usr/lib64/chromium-browser/chromium-browser
cmdline:        $'/usr/lib64/chromium-browser/chromium-browser --enable-chrome-browser-cloud-management --enable-features=AllowQt,WaylandLinuxDrmSyncobj,WaylandPerSurfaceScale,WaylandUiScale,AcceleratedVideoDecodeLinuxGL,AcceleratedVideoDecodeLinuxZeroCopyGL,AcceleratedVideoEncoder --enable-plugins --enable-extensions --enable-user-scripts --enable-printing --enable-sync --auto-ssl-client-auth'
cgroup:         0::/user.slice/user-1000.slice/user/app.slice/app-org.chromium.Chromium-39860.scope
environ:        to-ssl-client-auth
rootdir:        /
uid:            1000
kernel:         6.16.12-200.fc42.x86_64
package:        chromium-141.0.7390.107-1.fc42
runlevel:       N 5
backtrace_rating: 4
crash_function: wl_map_insert_at
comment:        

Truncated backtrace:
Thread no. 1 (47 frames)
 #0 wl_map_insert_at at ../../third_party/wayland/src/src/wayland-util.c:290
 #1 proxy_destroy at ../../third_party/wayland/src/src/wayland-client.c:574
 #2 wl_proxy_destroy_caller_locks at ../../third_party/wayland/src/src/wayland-client.c:598
 #3 wl_proxy_marshal_array_flags at ../../third_party/wayland/src/src/wayland-client.c:939
 #4 wl_proxy_marshal_flags at ../../third_party/wayland/src/src/wayland-client.c:857
 #5 operator()<zwp_idle_inhibitor_v1> at ../../ui/ozone/platform/wayland/common/wayland_object.h:50
 #6 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #7 ~WaylandScreen at ../../ui/ozone/platform/wayland/host/wayland_screen.cc:133
 #8 ui::WaylandScreen::~WaylandScreen() at ../../ui/ozone/platform/wayland/host/wayland_screen.cc:131
 #9 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #10 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #11 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #12 ~ScreenOzone at ../../ui/aura/screen_ozone.cc:38
 #13 ~DesktopScreenOzone at ../../ui/views/widget/desktop_aura/desktop_screen_ozone.cc:18
 #15 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #16 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #17 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #18 ~ChromeBrowserMainExtraPartsViews at ../../chrome/browser/ui/views/chrome_browser_main_extra_parts_views.cc:67
 #19 ~ChromeBrowserMainExtraPartsViewsLinux at ../../chrome/browser/ui/views/chrome_browser_main_extra_parts_views_linux.cc:47
 #21 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #22 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #23 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #24 __destroy_at<std::__Cr::unique_ptr<ChromeBrowserMainExtraParts, std::__Cr::default_delete<ChromeBrowserMainExtraParts> >, 0> at gen/third_party/libc++/src/include/__memory/construct_at.h:61
 #25 destroy<std::__Cr::unique_ptr<ChromeBrowserMainExtraParts, std::__Cr::default_delete<ChromeBrowserMainExtraParts> >, 0> at gen/third_party/libc++/src/include/__memory/allocator_traits.h:313
 #26 __base_destruct_at_end at gen/third_party/libc++/src/include/__vector/vector.h:772
 #27 __destruct_at_end at gen/third_party/libc++/src/include/__vector/vector.h:712
 #28 pop_back at gen/third_party/libc++/src/include/__vector/vector.h:496
 #29 ~ChromeBrowserMainParts at ../../chrome/browser/chrome_browser_main.cc:595
 #30 ~ChromeBrowserMainPartsLinux at ../../chrome/browser/chrome_browser_main_linux.cc:53
 #32 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #33 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #34 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #35 ~BrowserMainLoop at ../../content/browser/browser_main_loop.cc:516
 #36 content::BrowserMainLoop::~BrowserMainLoop() at ../../content/browser/browser_main_loop.cc:512
 #37 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #38 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #39 Shutdown at ../../content/browser/browser_main_runner_impl.cc:186
 #40 BrowserMain at ../../content/browser/browser_main.cc:41
 #41 RunBrowserProcessMain at ../../content/app/content_main_runner_impl.cc:701
 #42 RunBrowser at ../../content/app/content_main_runner_impl.cc:1278
 #43 Run at ../../content/app/content_main_runner_impl.cc:1127
 #44 RunContentProcess at ../../content/app/content_main.cc:346
 #45 ContentMain at ../../content/app/content_main.cc:359
 #46 ChromeMain at ../../chrome/app/chrome_main.cc:228
 #47 __libc_start_call_main at ../sysdeps/nptl/libc_start_call_main.h:58
 #48 __libc_start_main_impl at ../csu/libc-start.c:360
 #49 _start

Comment 1 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:30 UTC
Created attachment 2110511 [details]
File: proc_pid_status

Comment 2 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:32 UTC
Created attachment 2110512 [details]
File: maps

Comment 3 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:34 UTC
Created attachment 2110513 [details]
File: limits

Comment 4 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:36 UTC
Created attachment 2110514 [details]
File: open_fds

Comment 5 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:38 UTC
Created attachment 2110515 [details]
File: mountinfo

Comment 6 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:40 UTC
Created attachment 2110516 [details]
File: os_info

Comment 7 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:42 UTC
Created attachment 2110517 [details]
File: cpuinfo

Comment 8 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:44 UTC
Created attachment 2110518 [details]
File: core_backtrace

Comment 9 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:46 UTC
Created attachment 2110519 [details]
File: exploitable

Comment 10 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:48 UTC
Created attachment 2110520 [details]
File: backtrace

Comment 11 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 22:01:47 UTC
This has been occurring for some time, but required me to remediate https://discussion.fedoraproject.org/t/162959/5 in order to report.

Comment 12 Than Ngo 2025-11-04 13:36:01 UTC
Could you please try new chromium-142.0.7444.59 ? It's submitted as update in https://bodhi.fedoraproject.org/updates/FEDORA-2025-7c0b3fa81f

  sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-7c0b3fa81f

Thank you!

Comment 13 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-11-04 13:43:25 UTC
I'm now struggling to reproduce this even with chromium-141.0.7390.122-1.fc43.x86_64, so do you know of a consistent way to reproduce it? I need to know, to compare it with that update...

Comment 14 Than Ngo 2025-11-04 14:01:00 UTC
To be honest, I cannot reproduce your problem on my test computer. It does not crash when i close chromium.
The crash could be caused by many things and it is not easy to detect.

It's not possible to debug/fix it without a working reproduce

Comment 15 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-12-07 22:06:11 UTC
I've been unable to, as well, in `chromium-143.0.7499.40-1.fc43.x86_64`. Therefore, `WORKSFORME`, or a resolution that indicates that it's fixed?

Comment 16 Red Hat Bugzilla 2026-04-08 04:25:03 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days or the product is inactive and locked


Note You need to log in before you can comment on or make changes to this bug.