[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
** Description changed: + [Impact] + gnome-shell crashes on shutdown and on `gnome-shell --replace`. A proper fix for `gnome-shell --replace` requires mutter 3.30.2-1 too. + + [Test Case] + Covered by https://wiki.ubuntu.com/StableReleaseUpdates/GNOME + + [Regression Potential] + The new stable version of gjs includes changes to fix random crashes when a gjs application is closed. Possible regressions are leaks and other crashes but none has been observed until now. + + [Original Bug] https://errors.ubuntu.com/problem/f64145b51a9d0fd20bfff57836b8f743e56c50ba https://gitlab.gnome.org/GNOME/gjs/issues/212 --- mozjs60 crashes on gnome-shell exit (didn't happen with mozjs52 which was still the latest yesterday) Steps to reproduce: 1. Start gnome-shell (master) 2. Super+A to show applications 3. Alt+F2 and type "debugexit" to exit cleanly. Backtrace: Program terminated with signal SIGSEGV, Segmentation fault. #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 161 ./js/src/vm/JSContext.h: No such file or directory. [Current thread is 1 (Thread 0x7f3bebd2e340 (LWP 4269))] (gdb) bt #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 #1 0x7f3bf4033a4e in Interpret(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:2834 #2 0x7f3bf403eb06 in js::RunScript(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:418 #3 0x7f3bf403f0d1 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x55d07921beb0, args=..., construct=) at ./js/src/vm/Interpreter.cpp:490 #4 0x7f3bf403f339 in js::Call(JSContext*, JS::Handle, JS::Handle, js::AnyInvokeArgs const&, JS::MutableHandle) (cx=cx@entry=0x55d07921beb0, fval=..., fval@entry=..., thisv=..., thisv@entry=..., args=..., rval=...) at ./js/src/vm/Interpreter.cpp:536 #5 0x7f3bf4372b81 in JS_CallFunctionValue(JSContext*, JS::Handle, JS::Handle, JS::HandleValueArray const&, JS::MutableHandle) (cx=0x55d07921beb0, obj=..., fval=..., args=..., rval=...) at ./debian/build/dist/include/js/RootingAPI.h:1128 #6 0x7f3bf7631310 in gjs_call_function_value () at /usr/lib/libgjs.so.0 #7 0x7f3bf76045d5 in gjs_closure_invoke () at /usr/lib/libgjs.so.0 #8 0x7f3bf7625573 in () at /usr/lib/libgjs.so.0 #9 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #10 0x7f3bf7f788f3 in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #11 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #12 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #13 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795aa5c0) at clutter-actor.c:5932 #14 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-widget.c:354 #15 0x7f3bf7025d48 in st_bin_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-bin.c:188 #16 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #17 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795aa5c0) at clutter-actor.c:8615 #18 0x7f3bf74a4404 in clutter_actor_iter_destroy (iter=0x7fff3285e4e0) at clutter-actor.c:19002 #19 0x7f3bf74a44b8 in clutter_actor_real_destroy (actor=0x55d0795a9ba0) at clutter-actor.c:6264 #20 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #21 0x7f3bf7f78c4a in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #22 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #23 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #24 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795a9ba0) at clutter-actor.c:5932 #25 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795a9ba0) at ../src/st/st-widget.c:354 #26 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #27 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795a9ba0) at clutter-actor.c:8615 #28 0x7f3bf7025cf5 in st_bin_dispose (gobject=0x55d0795a8260) at ../src/st/st-bin.c:185 #29 0x7f3bf7f6ac13 in g_object_unref () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #30 0x7f3bf7610f5e in ObjectInstance::release_native_object() () at /usr/lib/libgjs.so.0 #31 0x7f3bf7618496 in ObjectInstance::disassociate_js_gobject() () at /usr/lib/libgjs.so.0 #32 0x7f3bf76140cc in
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
Fix released in disco with gjs (1.54.3-1) ** Changed in: gjs (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
Please also include this change when backporting https://gitlab.gnome.org/GNOME/gjs/merge_requests/240 -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
MR Upstream: https://gitlab.gnome.org/GNOME/gjs/merge_requests/247 ** Changed in: gjs (Ubuntu Cosmic) Status: Confirmed => In Progress -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
** Changed in: mozjs60 (Ubuntu Cosmic) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
** Tags removed: rls-cc-incoming -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
** Changed in: gjs (Ubuntu) Assignee: (unassigned) => Andrea Azzarone (azzar1) ** Also affects: gjs (Ubuntu Cosmic) Importance: Medium Assignee: Andrea Azzarone (azzar1) Status: Confirmed ** Also affects: mozjs60 (Ubuntu Cosmic) Importance: Medium Status: Confirmed -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
** Description changed: - https://errors.ubuntu.com/problem/f64145b51a9d0fd20bfff57836b8f743e56c50bahttps://gitlab.gnome.org/GNOME/gjs/issues/212 + https://errors.ubuntu.com/problem/f64145b51a9d0fd20bfff57836b8f743e56c50ba + https://gitlab.gnome.org/GNOME/gjs/issues/212 --- mozjs60 crashes on gnome-shell exit (didn't happen with mozjs52 which was still the latest yesterday) Steps to reproduce: 1. Start gnome-shell (master) 2. Super+A to show applications 3. Alt+F2 and type "debugexit" to exit cleanly. Backtrace: Program terminated with signal SIGSEGV, Segmentation fault. #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 161 ./js/src/vm/JSContext.h: No such file or directory. [Current thread is 1 (Thread 0x7f3bebd2e340 (LWP 4269))] (gdb) bt #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 #1 0x7f3bf4033a4e in Interpret(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:2834 #2 0x7f3bf403eb06 in js::RunScript(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:418 #3 0x7f3bf403f0d1 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x55d07921beb0, args=..., construct=) at ./js/src/vm/Interpreter.cpp:490 #4 0x7f3bf403f339 in js::Call(JSContext*, JS::Handle, JS::Handle, js::AnyInvokeArgs const&, JS::MutableHandle) (cx=cx@entry=0x55d07921beb0, fval=..., fval@entry=..., thisv=..., thisv@entry=..., args=..., rval=...) at ./js/src/vm/Interpreter.cpp:536 #5 0x7f3bf4372b81 in JS_CallFunctionValue(JSContext*, JS::Handle, JS::Handle, JS::HandleValueArray const&, JS::MutableHandle) (cx=0x55d07921beb0, obj=..., fval=..., args=..., rval=...) at ./debian/build/dist/include/js/RootingAPI.h:1128 #6 0x7f3bf7631310 in gjs_call_function_value () at /usr/lib/libgjs.so.0 #7 0x7f3bf76045d5 in gjs_closure_invoke () at /usr/lib/libgjs.so.0 #8 0x7f3bf7625573 in () at /usr/lib/libgjs.so.0 #9 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #10 0x7f3bf7f788f3 in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #11 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #12 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #13 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795aa5c0) at clutter-actor.c:5932 #14 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-widget.c:354 #15 0x7f3bf7025d48 in st_bin_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-bin.c:188 #16 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #17 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795aa5c0) at clutter-actor.c:8615 #18 0x7f3bf74a4404 in clutter_actor_iter_destroy (iter=0x7fff3285e4e0) at clutter-actor.c:19002 #19 0x7f3bf74a44b8 in clutter_actor_real_destroy (actor=0x55d0795a9ba0) at clutter-actor.c:6264 #20 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #21 0x7f3bf7f78c4a in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #22 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #23 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #24 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795a9ba0) at clutter-actor.c:5932 #25 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795a9ba0) at ../src/st/st-widget.c:354 #26 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #27 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795a9ba0) at clutter-actor.c:8615 #28 0x7f3bf7025cf5 in st_bin_dispose (gobject=0x55d0795a8260) at ../src/st/st-bin.c:185 #29 0x7f3bf7f6ac13 in g_object_unref () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #30 0x7f3bf7610f5e in ObjectInstance::release_native_object() () at /usr/lib/libgjs.so.0 #31 0x7f3bf7618496 in ObjectInstance::disassociate_js_gobject() () at /usr/lib/libgjs.so.0 #32 0x7f3bf76140cc in ObjectInstance::remove_wrapped_gobjects_if(std::function, std::function) () at /usr/lib/libgjs.so.0 #33 0x7f3bf76141a4 in () at /usr/lib/libgjs.so.0 ** Changed in: gjs (Ubuntu) Importance: Undecided => Medium ** Changed in: mozjs60 (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
Also tracking in: https://errors.ubuntu.com/problem/f64145b51a9d0fd20bfff57836b8f743e56c50ba ** This bug is no longer a duplicate of bug 1796605 gnome-shell crashed with SIGSEGV in GetPropertyOperation() from Interpret() from js::RunScript() from js::InternalCallOrConstruct() from js::Call() ** Description changed: - https://gitlab.gnome.org/GNOME/gjs/issues/212 + https://errors.ubuntu.com/problem/f64145b51a9d0fd20bfff57836b8f743e56c50bahttps://gitlab.gnome.org/GNOME/gjs/issues/212 --- mozjs60 crashes on gnome-shell exit (didn't happen with mozjs52 which was still the latest yesterday) Steps to reproduce: 1. Start gnome-shell (master) 2. Super+A to show applications 3. Alt+F2 and type "debugexit" to exit cleanly. Backtrace: Program terminated with signal SIGSEGV, Segmentation fault. #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 161 ./js/src/vm/JSContext.h: No such file or directory. [Current thread is 1 (Thread 0x7f3bebd2e340 (LWP 4269))] (gdb) bt #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 #1 0x7f3bf4033a4e in Interpret(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:2834 #2 0x7f3bf403eb06 in js::RunScript(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:418 #3 0x7f3bf403f0d1 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x55d07921beb0, args=..., construct=) at ./js/src/vm/Interpreter.cpp:490 #4 0x7f3bf403f339 in js::Call(JSContext*, JS::Handle, JS::Handle, js::AnyInvokeArgs const&, JS::MutableHandle) (cx=cx@entry=0x55d07921beb0, fval=..., fval@entry=..., thisv=..., thisv@entry=..., args=..., rval=...) at ./js/src/vm/Interpreter.cpp:536 #5 0x7f3bf4372b81 in JS_CallFunctionValue(JSContext*, JS::Handle, JS::Handle, JS::HandleValueArray const&, JS::MutableHandle) (cx=0x55d07921beb0, obj=..., fval=..., args=..., rval=...) at ./debian/build/dist/include/js/RootingAPI.h:1128 #6 0x7f3bf7631310 in gjs_call_function_value () at /usr/lib/libgjs.so.0 #7 0x7f3bf76045d5 in gjs_closure_invoke () at /usr/lib/libgjs.so.0 #8 0x7f3bf7625573 in () at /usr/lib/libgjs.so.0 #9 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #10 0x7f3bf7f788f3 in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #11 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #12 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #13 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795aa5c0) at clutter-actor.c:5932 #14 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-widget.c:354 #15 0x7f3bf7025d48 in st_bin_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-bin.c:188 #16 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #17 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795aa5c0) at clutter-actor.c:8615 #18 0x7f3bf74a4404 in clutter_actor_iter_destroy (iter=0x7fff3285e4e0) at clutter-actor.c:19002 #19 0x7f3bf74a44b8 in clutter_actor_real_destroy (actor=0x55d0795a9ba0) at clutter-actor.c:6264 #20 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #21 0x7f3bf7f78c4a in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #22 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #23 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #24 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795a9ba0) at clutter-actor.c:5932 #25 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795a9ba0) at ../src/st/st-widget.c:354 #26 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #27 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795a9ba0) at clutter-actor.c:8615 #28 0x7f3bf7025cf5 in st_bin_dispose (gobject=0x55d0795a8260) at ../src/st/st-bin.c:185 #29 0x7f3bf7f6ac13 in g_object_unref () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #30 0x7f3bf7610f5e in ObjectInstance::release_native_object() () at /usr/lib/libgjs.so.0 #31 0x7f3bf7618496 in ObjectInstance::disassociate_js_gobject() () at /usr/lib/libgjs.so.0 #32 0x7f3bf76140cc in ObjectInstance::remove_wrapped_gobjects_if(std::function, std::function) () at /usr/lib/libgjs.so.0 #33 0x7f3bf76141a4 in () at /usr/lib/libgjs.so.0 ** Changed in:
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
*** This bug is a duplicate of bug 1796605 *** https://bugs.launchpad.net/bugs/1796605 Moving to the more formal bug 1796605. ** Description changed: + https://gitlab.gnome.org/GNOME/gjs/issues/212 + + --- + mozjs60 crashes on gnome-shell exit (didn't happen with mozjs52 which was still the latest yesterday) Steps to reproduce: 1. Start gnome-shell (master) 2. Super+A to show applications 3. Alt+F2 and type "debugexit" to exit cleanly. Backtrace: Program terminated with signal SIGSEGV, Segmentation fault. #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 161 ./js/src/vm/JSContext.h: No such file or directory. [Current thread is 1 (Thread 0x7f3bebd2e340 (LWP 4269))] (gdb) bt #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 #1 0x7f3bf4033a4e in Interpret(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:2834 #2 0x7f3bf403eb06 in js::RunScript(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:418 #3 0x7f3bf403f0d1 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x55d07921beb0, args=..., construct=) at ./js/src/vm/Interpreter.cpp:490 #4 0x7f3bf403f339 in js::Call(JSContext*, JS::Handle, JS::Handle, js::AnyInvokeArgs const&, JS::MutableHandle) (cx=cx@entry=0x55d07921beb0, fval=..., fval@entry=..., thisv=..., thisv@entry=..., args=..., rval=...) at ./js/src/vm/Interpreter.cpp:536 #5 0x7f3bf4372b81 in JS_CallFunctionValue(JSContext*, JS::Handle, JS::Handle, JS::HandleValueArray const&, JS::MutableHandle) (cx=0x55d07921beb0, obj=..., fval=..., args=..., rval=...) at ./debian/build/dist/include/js/RootingAPI.h:1128 #6 0x7f3bf7631310 in gjs_call_function_value () at /usr/lib/libgjs.so.0 #7 0x7f3bf76045d5 in gjs_closure_invoke () at /usr/lib/libgjs.so.0 #8 0x7f3bf7625573 in () at /usr/lib/libgjs.so.0 #9 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #10 0x7f3bf7f788f3 in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #11 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #12 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #13 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795aa5c0) at clutter-actor.c:5932 #14 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-widget.c:354 #15 0x7f3bf7025d48 in st_bin_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-bin.c:188 #16 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #17 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795aa5c0) at clutter-actor.c:8615 #18 0x7f3bf74a4404 in clutter_actor_iter_destroy (iter=0x7fff3285e4e0) at clutter-actor.c:19002 #19 0x7f3bf74a44b8 in clutter_actor_real_destroy (actor=0x55d0795a9ba0) at clutter-actor.c:6264 #20 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #21 0x7f3bf7f78c4a in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #22 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #23 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #24 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795a9ba0) at clutter-actor.c:5932 #25 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795a9ba0) at ../src/st/st-widget.c:354 #26 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #27 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795a9ba0) at clutter-actor.c:8615 #28 0x7f3bf7025cf5 in st_bin_dispose (gobject=0x55d0795a8260) at ../src/st/st-bin.c:185 #29 0x7f3bf7f6ac13 in g_object_unref () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #30 0x7f3bf7610f5e in ObjectInstance::release_native_object() () at /usr/lib/libgjs.so.0 #31 0x7f3bf7618496 in ObjectInstance::disassociate_js_gobject() () at /usr/lib/libgjs.so.0 #32 0x7f3bf76140cc in ObjectInstance::remove_wrapped_gobjects_if(std::function, std::function) () at /usr/lib/libgjs.so.0 #33 0x7f3bf76141a4 in () at /usr/lib/libgjs.so.0 ** This bug has been marked a duplicate of bug 1796605 gnome-shell crashed with SIGSEGV in GetPropertyOperation() from Interpret() from js() from () from RunScript() from js() from () from InternalCallOrConstruct() from js() from () from Call() -- You received this bug notification because you are a
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
I did that: https://gitlab.gnome.org/GNOME/gjs/issues/212 -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
I did make this happen with 1.54.0 and 1.54.1 (about to be uploaded). But only when using "debugexit" - normal logout, reboot and fast user switching all worked without crashing. Can you confirm that? I would like to see this forwarded to (gjs initially) upstream, please. -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
** Tags added: rls-cc-incoming -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
** Description changed: - mozjs60 crashes on gnome-shell exit (didn't happen with mozjs52) + mozjs60 crashes on gnome-shell exit (didn't happen with mozjs52 which + was still the latest yesterday) Steps to reproduce: 1. Start gnome-shell (master) 2. Super+A to show applications 3. Alt+F2 and type "debugexit" to exit cleanly. Backtrace: Program terminated with signal SIGSEGV, Segmentation fault. #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 161 ./js/src/vm/JSContext.h: No such file or directory. [Current thread is 1 (Thread 0x7f3bebd2e340 (LWP 4269))] (gdb) bt #0 0x7f3bf4033a4e in GetPropertyOperation (vp=..., lval=..., pc=, script=..., fp=, cx=) at ./js/src/vm/JSContext.h:161 #1 0x7f3bf4033a4e in Interpret(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:2834 #2 0x7f3bf403eb06 in js::RunScript(JSContext*, js::RunState&) (cx=0x55d07921beb0, state=...) at ./js/src/vm/Interpreter.cpp:418 #3 0x7f3bf403f0d1 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x55d07921beb0, args=..., construct=) at ./js/src/vm/Interpreter.cpp:490 #4 0x7f3bf403f339 in js::Call(JSContext*, JS::Handle, JS::Handle, js::AnyInvokeArgs const&, JS::MutableHandle) (cx=cx@entry=0x55d07921beb0, fval=..., fval@entry=..., thisv=..., thisv@entry=..., args=..., rval=...) at ./js/src/vm/Interpreter.cpp:536 #5 0x7f3bf4372b81 in JS_CallFunctionValue(JSContext*, JS::Handle, JS::Handle, JS::HandleValueArray const&, JS::MutableHandle) (cx=0x55d07921beb0, obj=..., fval=..., args=..., rval=...) at ./debian/build/dist/include/js/RootingAPI.h:1128 #6 0x7f3bf7631310 in gjs_call_function_value () at /usr/lib/libgjs.so.0 #7 0x7f3bf76045d5 in gjs_closure_invoke () at /usr/lib/libgjs.so.0 #8 0x7f3bf7625573 in () at /usr/lib/libgjs.so.0 #9 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #10 0x7f3bf7f788f3 in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #11 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #12 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #13 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795aa5c0) at clutter-actor.c:5932 #14 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-widget.c:354 #15 0x7f3bf7025d48 in st_bin_dispose (gobject=0x55d0795aa5c0) at ../src/st/st-bin.c:188 #16 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #17 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795aa5c0) at clutter-actor.c:8615 #18 0x7f3bf74a4404 in clutter_actor_iter_destroy (iter=0x7fff3285e4e0) at clutter-actor.c:19002 #19 0x7f3bf74a44b8 in clutter_actor_real_destroy (actor=0x55d0795a9ba0) at clutter-actor.c:6264 #20 0x7f3bf7f65b6d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #21 0x7f3bf7f78c4a in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #22 0x7f3bf7f81882 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #23 0x7f3bf7f81ecf in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #24 0x7f3bf74a9c33 in clutter_actor_dispose (object=0x55d0795a9ba0) at clutter-actor.c:5932 #25 0x7f3bf70529b4 in st_widget_dispose (gobject=0x55d0795a9ba0) at ../src/st/st-widget.c:354 #26 0x7f3bf7f6c448 in g_object_run_dispose () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #27 0x7f3bf749d023 in clutter_actor_destroy (self=0x55d0795a9ba0) at clutter-actor.c:8615 #28 0x7f3bf7025cf5 in st_bin_dispose (gobject=0x55d0795a8260) at ../src/st/st-bin.c:185 #29 0x7f3bf7f6ac13 in g_object_unref () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0 #30 0x7f3bf7610f5e in ObjectInstance::release_native_object() () at /usr/lib/libgjs.so.0 #31 0x7f3bf7618496 in ObjectInstance::disassociate_js_gobject() () at /usr/lib/libgjs.so.0 #32 0x7f3bf76140cc in ObjectInstance::remove_wrapped_gobjects_if(std::function, std::function) () at /usr/lib/libgjs.so.0 #33 0x7f3bf76141a4 in () at /usr/lib/libgjs.so.0 -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions --
[Bug 1796238] Re: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
Too hard right now. If this affects regular users then the crash should start showing up soon on errors.ubuntu.com. So I will wait and see. ** Changed in: mozjs60 (Ubuntu) Status: New => Incomplete ** Changed in: gjs (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1796238 Title: [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1796238/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
