gnome-shell crashed with SIGSEGV in clutter_stage_get_device_coords() from clutter_stage_repick_device()

[Daniel van Vugt]

.

ProblemType: Crash
DistroRelease: Ubuntu 23.04
Package: gnome-shell 44.0-2ubuntu3
Uname: Linux 6.2.0-20-generic x86_64
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Thu Apr 13 16:07:29 2023
ExecutablePath: /usr/bin/gnome-shell
ExecutableTimestamp: 1680272303
ProcCmdline: /usr/bin/gnome-shell
ProcCwd: /home/dan
ProcEnviron:
 LANG=en_US.UTF-8
 PATH=(custom, no user)
 SHELL=/bin/bash
 XDG_RUNTIME_DIR=<set>
Signal: 11
SourcePackage: gnome-shell
UserGroups: adm cdrom dip lpadmin plugdev sudo users

[Daniel van Vugt (vanvugt)]

I think this was corrupted by bug 2015857 so I'm trying again with a traditional core file, no apport.

[Daniel van Vugt (vanvugt)]

Now getting:

#3 0x00007fa4b223c406 in __GI_raise (sig=sig@entry=11) at ../sysdeps/posix/raise.c:26
#4 0x000055c5a6b63aea in dump_gjs_stack_on_signal_handler (signo=11) at ../src/main.c:495
#5 <signal handler called>
#6 0x00007fa4b29182d8 in clutter_stage_get_device_coords () from /usr/lib/x86_64-linux-gnu/mutter-12/libmutter-clutter-12.so.0
#7 0x00007fa4b29183aa in clutter_stage_repick_device () from /usr/lib/x86_64-linux-gnu/mutter-12/libmutter-clutter-12.so.0
#8 0x00007fa4b282f8b6 in ?? () from /lib/x86_64-linux-gnu/libffi.so.8
#9 0x00007fa4b282c34d in ?? () from /lib/x86_64-linux-gnu/libffi.so.8

[Apport retracing service (apport)]

Stacktrace:
 #0 0x00007fd5c1290ffb in ?? ()
 No symbol table info available.
 Backtrace stopped: Cannot access memory at address 0x7ffefb0bb860
StacktraceSource: #0 0x00007fd5c1290ffb in ?? ()
StacktraceTop: ?? ()

[Daniel van Vugt (vanvugt)]

I don't know why debug symbols aren't working but it looks like the stage pointer is bogus in clutter_stage_get_device_coords:

0x00007fc0139182d8 <+24>: mov 0x28(%rdi),%r14 <-- crash
0x00007fc0139182dc <+28>: call 0x7fc0139179d0 <clutter_stage_get_type>

[Daniel van Vugt (vanvugt)]

I wonder if the "re-pick" mentioned in https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2738 is related.