Public bug reported:
On Ubuntu 24.04 (noble), GNOME 46 Wayland session, gnome-shell crashed with
SIGSEGV and the entire graphical session ended (org.gnome.Shell@wayland has
Restart=no by design under Wayland), taking every client with it.
Versions: gnome-shell 46.0-0ubuntu6~24.04.15, mutter 46.2-1ubuntu0.24.04.16,
at-spi2-core 2.52.0-1build1 (no newer candidate in noble).
Local retrace (gdb 15.1 on the apport core of /usr/bin/gnome-shell):
#6 g_type_check_instance_is_fundamentally_a () libgobject-2.0.so.0
#7 g_object_ref () libgobject-2.0.so.0
#8 g_hash_table_foreach () libglib-2.0.so.0
#9 ?? () libatk-bridge-2.0.so.0 <-- faulting module
#10 ?? () libatk-bridge-2.0.so.0
#11 dbus_connection_dispatch () libdbus-1.so.3
#12 ?? () libatspi.so.0
#16 meta_context_run_main_loop () libmutter-14.so.0
So: a use-after-free / invalid GObject inside the accessibility bridge, hit
while dispatching an incoming AT-SPI D-Bus message, on the shell's main loop.
Reproduction context: the session had been locked ~10.5 hours with an AT-SPI
client (accessibility automation) querying the shell roughly once a minute;
the crash came minutes after unlock, during window activity. Shell memory
peak was 4.9 GB over 13 h (leak-shaped). Journal precursor, in case it helps
correlation: repeated meta_window_set_stack_position_no_sync assertion
failures (149 in the Wayland session vs 2 in an equivalent X11 session).
Upstream anchor: at-spi2-core NEWS 2.55.2 — "Attempt to fix a use after free
in the atk bridge" — the class appears known and fixed upstream after 2.52.0.
Request: please consider an SRU/backport of the upstream atk-bridge lifetime
fix to noble. I can provide the full retrace output or test a proposed package.
** Affects: at-spi2-core (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2169478
Title:
gnome-shell SIGSEGV in atk-bridge (g_object_ref during
g_hash_table_foreach) while dispatching AT-SPI D-Bus message — Wayland
session ends; at-spi2-core 2.52.0
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/at-spi2-core/+bug/2169478/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
