gnome-shell crashed with SIGSEGV in js::Shape::matches() from js::ShapeHasher::match() from js::detail::HashTable<js::Shape* const, js::HashSet<js::Shape*, js::ShapeHasher, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::match()

[chris pollock]

lsb_release -rd
Description: Ubuntu 16.04.4 LTS
Release: 16.04

apt-cache policy gnome-shell
gnome-shell:
  Installed: 3.18.5-0ubuntu0.3
  Candidate: 3.18.5-0ubuntu0.3

While updating via Webmin the below -

Start-Date: 2018-03-30 15:41:38
Commandline: apt-get -y install firefox-mozilla-build
Upgrade: firefox-mozilla-build:amd64 (59.0.1-0ubuntu1, 59.0.2-0ubuntu1)
End-Date: 2018-03-30 15:47:36

Using the below version of Webmin

apt-cache policy webmin
webmin:
  Installed: 1.881
  Candidate: 1.881
  Version table:
 *** 1.881 100

Gnome-Shell crashed for no reason that I can figure out.

ProblemType: Crash
DistroRelease: Ubuntu 16.04
Package: gnome-shell 3.18.5-0ubuntu0.3
ProcVersionSignature: Ubuntu 4.13.0-37.42~16.04.1-generic 4.13.13
Uname: Linux 4.13.0-37-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.15
Architecture: amd64
CrashCounter: 1
CurrentDesktop: GNOME
Date: Fri Mar 30 15:47:39 2018
DisplayManager: gdm3
ExecutablePath: /usr/bin/gnome-shell
InstallationDate: Installed on 2014-10-24 (1253 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Release amd64 (20140417)
ProcCmdline: /usr/bin/gnome-shell
ProcEnviron:
 PATH=(custom, user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7ffa17387b04: cmp %r10,0x8(%r9)
 PC (0x7ffa17387b04) ok
 source "%r10" ok
 destination "0x8(%r9)" (0x00000008) not located in a known VMA region (needed writable region)!
SegvReason: writing NULL VMA
Signal: 11
SourcePackage: gnome-shell
StacktraceTop:
 ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-24.so.0
 ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-24.so.0
 ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-24.so.0
 ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-24.so.0
 ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-24.so.0
Title: gnome-shell crashed with SIGSEGV
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip kvm libvirtd lpadmin netdev plugdev sambashare sudo

[Apport retracing service (apport)]

StacktraceTop:
 js::Shape::matches (other=..., this=0x0) at /build/mozjs24-aUzIx7/mozjs24-24.2.0/js/src/vm/Shape-inl.h:263
 js::ShapeHasher::match (l=..., k=0x0) at /build/mozjs24-aUzIx7/mozjs24-24.2.0/js/src/jspropertytree.cpp:31
 js::detail::HashTable<js::Shape* const, js::HashSet<js::Shape*, js::ShapeHasher, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::match (l=..., e=...) at ./dist/include/js/HashTable.h:1035
 js::detail::HashTable<js::Shape* const, js::HashSet<js::Shape*, js::ShapeHasher, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::lookup (collisionBit=0, keyHash=<optimized out>, l=..., this=0x6d66b50) at ./dist/include/js/HashTable.h:1057
 js::detail::HashTable<js::Shape* const, js::HashSet<js::Shape*, js::ShapeHasher, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::lookup (l=..., this=0x6d66b50) at ./dist/include/js/HashTable.h:1357

[Daniel van Vugt (vanvugt)]

Thank you for reporting this bug to Ubuntu.
Ubuntu GNOME 16.04 (xenial) reached end-of-life on April, 2019

https://ubuntugnome.org/ubuntu-gnome-16-04-lts-is-here/
https://wiki.ubuntu.com/XenialXerus/ReleaseNotes/UbuntuGNOME

We appreciate that this bug may be old and you might not be interested in discussing it any more. But if you are then please upgrade to the latest Ubuntu version and re-test. If you then find the bug is still present in the newer Ubuntu version, please add a comment here telling us which new version it is in.

[chris pollock (cpollock)]

I haven't seen this bug in 18.04 nor now in 20.04.