[SRU][regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript()
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gjs (Ubuntu) |
Fix Released
|
Medium
|
Andrea Azzarone | ||
Cosmic |
Fix Released
|
Medium
|
Andrea Azzarone | ||
mozjs60 (Ubuntu) |
Invalid
|
Medium
|
Unassigned | ||
Cosmic |
Invalid
|
Medium
|
Unassigned |
Bug Description
[Impact]
gnome-shell crashes on shutdown and on `gnome-shell --replace`. A proper fix for `gnome-shell --replace` requires mutter 3.30.2-1 too.
[Test Case]
Given https:/
[Regression Potential]
The new stable version of gjs includes changes to fix random crashes when a gjs application is closed. Possible regressions are leaks and other crashes but none has been observed until now.
[Original Bug]
https:/
https:/
---
mozjs60 crashes on gnome-shell exit (didn't happen with mozjs52 which was still the latest yesterday)
Steps to reproduce:
1. Start gnome-shell (master)
2. Super+A to show applications
3. Alt+F2 and type "debugexit" to exit cleanly.
Backtrace:
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x00007f3bf4033a4e in GetPropertyOper
pc=<optimised out>, script=..., fp=<optimised out>, cx=<optimised out>)
at ./js/src/
161 ./js/src/
[Current thread is 1 (Thread 0x7f3bebd2e340 (LWP 4269))]
(gdb) bt
#0 0x00007f3bf4033a4e in GetPropertyOper
(vp=..., lval=..., pc=<optimised out>, script=..., fp=<optimised out>, cx=<optimised out>) at ./js/src/
#1 0x00007f3bf4033a4e in Interpret(
(cx=
#2 0x00007f3bf403eb06 in js::RunScript(
(cx=
#3 0x00007f3bf403f0d1 in js::InternalCal
(cx=
at ./js/src/
#4 0x00007f3bf403f339 in js::Call(
(cx=
thisv@
#5 0x00007f3bf4372b81 in JS_CallFunction
at ./debian/
#6 0x00007f3bf7631310 in gjs_call_
#7 0x00007f3bf76045d5 in gjs_closure_invoke () at /usr/lib/
#8 0x00007f3bf7625573 in () at /usr/lib/
#9 0x00007f3bf7f65b6d in g_closure_invoke ()
at /usr/lib/
#10 0x00007f3bf7f788f3 in () at /usr/lib/
#11 0x00007f3bf7f81882 in g_signal_
at /usr/lib/
#12 0x00007f3bf7f81ecf in g_signal_emit ()
at /usr/lib/
#13 0x00007f3bf74a9c33 in clutter_
at clutter-
#14 0x00007f3bf70529b4 in st_widget_dispose (gobject=
at ../src/
#15 0x00007f3bf7025d48 in st_bin_dispose (gobject=
at ../src/
#16 0x00007f3bf7f6c448 in g_object_
at /usr/lib/
#17 0x00007f3bf749d023 in clutter_
at clutter-
#18 0x00007f3bf74a4404 in clutter_
at clutter-
#19 0x00007f3bf74a44b8 in clutter_
at clutter-
#20 0x00007f3bf7f65b6d in g_closure_invoke ()
at /usr/lib/
#21 0x00007f3bf7f78c4a in () at /usr/lib/
#22 0x00007f3bf7f81882 in g_signal_
at /usr/lib/
#23 0x00007f3bf7f81ecf in g_signal_emit ()
at /usr/lib/
#24 0x00007f3bf74a9c33 in clutter_
at clutter-
#25 0x00007f3bf70529b4 in st_widget_dispose (gobject=
at ../src/
#26 0x00007f3bf7f6c448 in g_object_
at /usr/lib/
#27 0x00007f3bf749d023 in clutter_
at clutter-
#28 0x00007f3bf7025cf5 in st_bin_dispose (gobject=
at ../src/
#29 0x00007f3bf7f6ac13 in g_object_unref ()
at /usr/lib/
#30 0x00007f3bf7610f5e in ObjectInstance:
at /usr/lib/
#31 0x00007f3bf7618496 in ObjectInstance:
at /usr/lib/
#32 0x00007f3bf76140cc in ObjectInstance:
at /usr/lib/
#33 0x00007f3bf76141a4 in () at /usr/lib/
summary: |
- mozjs60 crashes on gnome-shell exit (didn't happen with mozjs52) + [regression] mozjs60 crashes on gnome-shell exit (didn't happen with + mozjs52) |
description: | updated |
description: | updated |
description: | updated |
summary: |
- [regression] mozjs60 crashes on gnome-shell exit (didn't happen with - mozjs52) + [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in + GetPropertyOperation() from Interpret() from js::RunScript() |
description: | updated |
tags: | added: rls-cc-incoming |
description: | updated |
description: | updated |
Changed in gjs (Ubuntu): | |
importance: | Undecided → Medium |
Changed in mozjs60 (Ubuntu): | |
importance: | Undecided → Medium |
Changed in gjs (Ubuntu): | |
assignee: | nobody → Andrea Azzarone (azzar1) |
tags: | removed: rls-cc-incoming |
Changed in mozjs60 (Ubuntu Cosmic): | |
status: | Confirmed → Invalid |
description: | updated |
summary: |
- [regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in + [SRU][regression] mozjs60 crashes with SIGSEGV on gnome-shell exit, in GetPropertyOperation() from Interpret() from js::RunScript() |
description: | updated |
Too hard right now. If this affects regular users then the crash should start showing up soon on errors.ubuntu.com. So I will wait and see.