Bug 2405937 - [abrt] chromium: wl_map_insert_at(): chromium-browser killed by SIGSEGV [NEEDINFO]
Summary: [abrt] chromium: wl_map_insert_at(): chromium-browser killed by SIGSEGV
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Fedora
Classification: Fedora
Component: chromium
Version: 42
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Than Ngo
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:7693237b347ea30e86b9883d5a1...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-10-22 21:27 UTC by Mr. Beedell, Roke Julian Lockhart (RJLB)
Modified: 2025-12-08 07:38 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2025-12-08 07:38:13 UTC
Type: ---
Embargoed:
8ru2u4gz: needinfo? (than)


Attachments (Terms of Use)
File: proc_pid_status (1.49 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: maps (3.97 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: limits (1.29 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: open_fds (6.78 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: mountinfo (3.77 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: os_info (739 bytes, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: cpuinfo (3.76 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: core_backtrace (133.88 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: exploitable (81 bytes, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details
File: backtrace (159.48 KB, text/plain)
2025-10-22 21:27 UTC, Mr. Beedell, Roke Julian Lockhart (RJLB)
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 2381730 0 unspecified CLOSED DebugInfo packages aren't being produced. 2025-12-07 22:06:10 UTC

Description Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:26 UTC
Description of problem:
Occurs whenever I close Chromium.

Version-Release number of selected component:
chromium-141.0.7390.107-1.fc42

Additional info:
reporter:       libreport-2.17.15
type:           CCpp
reason:         chromium-browser killed by SIGSEGV
journald_cursor: s=a2d6d580caa24cf3a9483be7f85033e4;i=3cba21;b=f5936b69817a44bd822a6b289754f3d8;m=1dc53d573;t=641c5f1629ff2;x=9e4acd04281e5831
executable:     /usr/lib64/chromium-browser/chromium-browser
cmdline:        $'/usr/lib64/chromium-browser/chromium-browser --enable-chrome-browser-cloud-management --enable-features=AllowQt,WaylandLinuxDrmSyncobj,WaylandPerSurfaceScale,WaylandUiScale,AcceleratedVideoDecodeLinuxGL,AcceleratedVideoDecodeLinuxZeroCopyGL,AcceleratedVideoEncoder --enable-plugins --enable-extensions --enable-user-scripts --enable-printing --enable-sync --auto-ssl-client-auth'
cgroup:         0::/user.slice/user-1000.slice/user/app.slice/app-org.chromium.Chromium-39860.scope
environ:        to-ssl-client-auth
rootdir:        /
uid:            1000
kernel:         6.16.12-200.fc42.x86_64
package:        chromium-141.0.7390.107-1.fc42
runlevel:       N 5
backtrace_rating: 4
crash_function: wl_map_insert_at
comment:        

Truncated backtrace:
Thread no. 1 (47 frames)
 #0 wl_map_insert_at at ../../third_party/wayland/src/src/wayland-util.c:290
 #1 proxy_destroy at ../../third_party/wayland/src/src/wayland-client.c:574
 #2 wl_proxy_destroy_caller_locks at ../../third_party/wayland/src/src/wayland-client.c:598
 #3 wl_proxy_marshal_array_flags at ../../third_party/wayland/src/src/wayland-client.c:939
 #4 wl_proxy_marshal_flags at ../../third_party/wayland/src/src/wayland-client.c:857
 #5 operator()<zwp_idle_inhibitor_v1> at ../../ui/ozone/platform/wayland/common/wayland_object.h:50
 #6 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #7 ~WaylandScreen at ../../ui/ozone/platform/wayland/host/wayland_screen.cc:133
 #8 ui::WaylandScreen::~WaylandScreen() at ../../ui/ozone/platform/wayland/host/wayland_screen.cc:131
 #9 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #10 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #11 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #12 ~ScreenOzone at ../../ui/aura/screen_ozone.cc:38
 #13 ~DesktopScreenOzone at ../../ui/views/widget/desktop_aura/desktop_screen_ozone.cc:18
 #15 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #16 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #17 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #18 ~ChromeBrowserMainExtraPartsViews at ../../chrome/browser/ui/views/chrome_browser_main_extra_parts_views.cc:67
 #19 ~ChromeBrowserMainExtraPartsViewsLinux at ../../chrome/browser/ui/views/chrome_browser_main_extra_parts_views_linux.cc:47
 #21 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #22 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #23 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #24 __destroy_at<std::__Cr::unique_ptr<ChromeBrowserMainExtraParts, std::__Cr::default_delete<ChromeBrowserMainExtraParts> >, 0> at gen/third_party/libc++/src/include/__memory/construct_at.h:61
 #25 destroy<std::__Cr::unique_ptr<ChromeBrowserMainExtraParts, std::__Cr::default_delete<ChromeBrowserMainExtraParts> >, 0> at gen/third_party/libc++/src/include/__memory/allocator_traits.h:313
 #26 __base_destruct_at_end at gen/third_party/libc++/src/include/__vector/vector.h:772
 #27 __destruct_at_end at gen/third_party/libc++/src/include/__vector/vector.h:712
 #28 pop_back at gen/third_party/libc++/src/include/__vector/vector.h:496
 #29 ~ChromeBrowserMainParts at ../../chrome/browser/chrome_browser_main.cc:595
 #30 ~ChromeBrowserMainPartsLinux at ../../chrome/browser/chrome_browser_main_linux.cc:53
 #32 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #33 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #34 ~unique_ptr at gen/third_party/libc++/src/include/__memory/unique_ptr.h:259
 #35 ~BrowserMainLoop at ../../content/browser/browser_main_loop.cc:516
 #36 content::BrowserMainLoop::~BrowserMainLoop() at ../../content/browser/browser_main_loop.cc:512
 #37 operator() at gen/third_party/libc++/src/include/__memory/unique_ptr.h:77
 #38 reset at gen/third_party/libc++/src/include/__memory/unique_ptr.h:290
 #39 Shutdown at ../../content/browser/browser_main_runner_impl.cc:186
 #40 BrowserMain at ../../content/browser/browser_main.cc:41
 #41 RunBrowserProcessMain at ../../content/app/content_main_runner_impl.cc:701
 #42 RunBrowser at ../../content/app/content_main_runner_impl.cc:1278
 #43 Run at ../../content/app/content_main_runner_impl.cc:1127
 #44 RunContentProcess at ../../content/app/content_main.cc:346
 #45 ContentMain at ../../content/app/content_main.cc:359
 #46 ChromeMain at ../../chrome/app/chrome_main.cc:228
 #47 __libc_start_call_main at ../sysdeps/nptl/libc_start_call_main.h:58
 #48 __libc_start_main_impl at ../csu/libc-start.c:360
 #49 _start

Comment 1 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:30 UTC
Created attachment 2110511 [details]
File: proc_pid_status

Comment 2 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:32 UTC
Created attachment 2110512 [details]
File: maps

Comment 3 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:34 UTC
Created attachment 2110513 [details]
File: limits

Comment 4 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:36 UTC
Created attachment 2110514 [details]
File: open_fds

Comment 5 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:38 UTC
Created attachment 2110515 [details]
File: mountinfo

Comment 6 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:40 UTC
Created attachment 2110516 [details]
File: os_info

Comment 7 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:42 UTC
Created attachment 2110517 [details]
File: cpuinfo

Comment 8 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:44 UTC
Created attachment 2110518 [details]
File: core_backtrace

Comment 9 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:46 UTC
Created attachment 2110519 [details]
File: exploitable

Comment 10 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 21:27:48 UTC
Created attachment 2110520 [details]
File: backtrace

Comment 11 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-10-22 22:01:47 UTC
This has been occurring for some time, but required me to remediate https://discussion.fedoraproject.org/t/162959/5 in order to report.

Comment 12 Than Ngo 2025-11-04 13:36:01 UTC
Could you please try new chromium-142.0.7444.59 ? It's submitted as update in https://bodhi.fedoraproject.org/updates/FEDORA-2025-7c0b3fa81f

  sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-7c0b3fa81f

Thank you!

Comment 13 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-11-04 13:43:25 UTC
I'm now struggling to reproduce this even with chromium-141.0.7390.122-1.fc43.x86_64, so do you know of a consistent way to reproduce it? I need to know, to compare it with that update...

Comment 14 Than Ngo 2025-11-04 14:01:00 UTC
To be honest, I cannot reproduce your problem on my test computer. It does not crash when i close chromium.
The crash could be caused by many things and it is not easy to detect.

It's not possible to debug/fix it without a working reproduce

Comment 15 Mr. Beedell, Roke Julian Lockhart (RJLB) 2025-12-07 22:06:11 UTC
I've been unable to, as well, in `chromium-143.0.7499.40-1.fc43.x86_64`. Therefore, `WORKSFORME`, or a resolution that indicates that it's fixed?


Note You need to log in before you can comment on or make changes to this bug.