Someone came on #gnome-shell sand said they get a crasher when:

<dyskette> rtcm: To reproduce it, I open nautilus then right click on a folder and open Properties window, then trying to close that window crashes the session. But it could also happen with About window. And I think any modal window, because polari crashed everything as well trying to create a new connection on a modal window.

backtrace is here:

	

    (gdb) cont
    Continuing.
    [New Thread 0x7fbc5e0ff700 (LWP 6262)]
     
    Program received signal SIGSEGV, Segmentation fault.
    wl_list_insert (list=0x0, elm=elm@entry=0x12d0fc8) at src/wayland-util.c:46
    46              elm->next = list->next;
    Missing separate debuginfos, use: debuginfo-install ibus-gtk3-1.5.9-10.fc22.x86_64
    (gdb) t a a bt
     
    Thread 9 (Thread 0x7fbc5e0ff700 (LWP 6262)):
    #0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
    #1  0x00007fbc925c7827 in g_cond_wait_until (cond=cond@entry=0x12c08c8, mutex=mutex@entry=0x12c08c0, end_time=end_time@entry=4015562386)
        at gthread-posix.c:1437
    #2  0x00007fbc92556a59 in g_async_queue_pop_intern_unlocked (queue=queue@entry=0x12c08c0, wait=wait@entry=1, end_time=end_time@entry=4015562386)
        at gasyncqueue.c:422
    #3  0x00007fbc9255707b in g_async_queue_timeout_pop (queue=0x12c08c0, timeout=timeout@entry=15000000) at gasyncqueue.c:543
    #4  0x00007fbc925aa0ea in g_thread_pool_wait_for_new_pool () at gthreadpool.c:167
    #5  g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:364
    #6  0x00007fbc925a9695 in g_thread_proxy (data=0x2f8b6d0) at gthread.c:764
    #7  0x00007fbc90d27555 in start_thread (arg=0x7fbc5e0ff700) at pthread_create.c:333
    #8  0x00007fbc90a61ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
     
    Thread 8 (Thread 0x7fbc7e22f700 (LWP 5698)):
    #0  0x00007fbc90a564dd in poll () at ../sysdeps/unix/syscall-template.S:81
    #1  0x00007fbc9258256c in g_main_context_poll (priority=2147483647, n_fds=2, fds=0x7fbc780008c0, timeout=<optimized out>, context=0x1111440)
        at gmain.c:4103
    #2  g_main_context_iterate (context=context@entry=0x1111440, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3803
    #3  0x00007fbc9258267c in g_main_context_iteration (context=0x1111440, may_block=may_block@entry=1) at gmain.c:3869
    #4  0x00007fbc925826b9 in glib_worker_main (data=<optimized out>) at gmain.c:5614
    #5  0x00007fbc925a9695 in g_thread_proxy (data=0x1111800) at gthread.c:764
    #6  0x00007fbc90d27555 in start_thread (arg=0x7fbc7e22f700) at pthread_create.c:333
    #7  0x00007fbc90a61ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
     
    Thread 7 (Thread 0x7fbc77fff700 (LWP 5700)):
    #0  0x00007fbc90a564dd in poll () at ../sysdeps/unix/syscall-template.S:81
    #1  0x00007fbc9258256c in g_main_context_poll (priority=2147483647, n_fds=4, fds=0x7fbc7001d500, timeout=<optimized out>, context=0x112b4c0)
        at gmain.c:4103
    #2  g_main_context_iterate (context=0x112b4c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3803
    #3  0x00007fbc925828f2 in g_main_loop_run (loop=0x112b450) at gmain.c:4002
    #4  0x00007fbc93a4ecd6 in gdbus_shared_thread_func (user_data=0x112b490) at gdbusprivate.c:274
    #5  0x00007fbc925a9695 in g_thread_proxy (data=0x11118a0) at gthread.c:764
    #6  0x00007fbc90d27555 in start_thread (arg=0x7fbc77fff700) at pthread_create.c:333
    #7  0x00007fbc90a61ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
     
    Thread 6 (Thread 0x7fbc75b47700 (LWP 5704)):
    #0  pthread_cond_wait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
    #1  0x00007fbc7d438bba in cnd_wait (mtx=0x11451a8, cond=0x11451d0) at ../../../../../include/c11/threads_posix.h:154
    ---Type <return> to continue, or q <return> to quit---
    #2  pipe_semaphore_wait (sema=0x11451a8) at ../../../../../src/gallium/auxiliary/os/os_thread.h:248
    #3  radeon_drm_cs_emit_ioctl (param=param@entry=0x1144e90) at radeon_drm_winsys.c:594
    #4  0x00007fbc7d438427 in impl_thrd_routine (p=<optimized out>) at ../../../../../include/c11/threads_posix.h:87
    #5  0x00007fbc90d27555 in start_thread (arg=0x7fbc75b47700) at pthread_create.c:333
    #6  0x00007fbc90a61ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
     
    Thread 5 (Thread 0x7fbc6ffff700 (LWP 5731)):
    #0  0x00007fbc90a564dd in poll () at ../sysdeps/unix/syscall-template.S:81
    #1  0x00007fbc9258256c in g_main_context_poll (priority=2147483647, n_fds=1, fds=0x7fbc640010c0, timeout=<optimized out>, context=0x12cfc70)
        at gmain.c:4103
    #2  g_main_context_iterate (context=context@entry=0x12cfc70, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3803
    #3  0x00007fbc9258267c in g_main_context_iteration (context=0x12cfc70, may_block=1) at gmain.c:3869
    #4  0x00007fbc742af24d in dconf_gdbus_worker_thread () from /usr/lib64/gio/modules/libdconfsettings.so
    #5  0x00007fbc925a9695 in g_thread_proxy (data=0x1111940) at gthread.c:764
    #6  0x00007fbc90d27555 in start_thread (arg=0x7fbc6ffff700) at pthread_create.c:333
    #7  0x00007fbc90a61ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
     
    Thread 4 (Thread 0x7fbc6f7fe700 (LWP 5781)):
    #0  0x00007fbc90a564dd in poll () at ../sysdeps/unix/syscall-template.S:81
    #1  0x00007fbc9a4936d1 in poll (__timeout=-1, __nfds=2, __fds=0x7fbc58004a80) at /usr/include/bits/poll2.h:46
    #2  poll_func (ufds=0x7fbc58004a80, nfds=2, timeout=-1, userdata=0x143d9b0) at pulse/thread-mainloop.c:69
    #3  0x00007fbc9a484dd1 in pa_mainloop_poll (m=<optimized out>) at pulse/mainloop.c:844
    #4  0x00007fbc9a48546e in pa_mainloop_iterate (m=<optimized out>, block=<optimized out>, retval=<optimized out>) at pulse/mainloop.c:926
    #5  0x00007fbc9a485520 in pa_mainloop_run (m=<optimized out>, retval=<optimized out>) at pulse/mainloop.c:944
    #6  0x00007fbc9a493666 in thread (userdata=0x1450f70) at pulse/thread-mainloop.c:88
    #7  0x00007fbc90732708 in internal_thread_func (userdata=0x1344270) at pulsecore/thread-posix.c:81
    #8  0x00007fbc90d27555 in start_thread (arg=0x7fbc6f7fe700) at pthread_create.c:333
    #9  0x00007fbc90a61ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
     
    Thread 3 (Thread 0x7fbc6effd700 (LWP 5782)):
    #0  pthread_cond_wait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
    #1  0x00007fbc8e61b440 in PR_WaitCondVar (cvar=0x142e100, timeout=4294967295) at ../../../nspr/pr/src/pthreads/ptsynch.c:385
    #2  0x00007fbc99470636 in js::GCHelperThread::threadLoop (this=0x1504dc8) at /usr/src/debug/mozjs-24.2.0/js/src/jsgc.cpp:2266
    #3  0x00007fbc8e620cab in _pt_root (arg=0x13a2100) at ../../../nspr/pr/src/pthreads/ptthread.c:212
    #4  0x00007fbc90d27555 in start_thread (arg=0x7fbc6effd700) at pthread_create.c:333
    #5  0x00007fbc90a61ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
     
    Thread 2 (Thread 0x7fbc6e7fc700 (LWP 5783)):
    #0  pthread_cond_wait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
    ---Type <return> to continue, or q <return> to quit---
    #1  0x00007fbc8e61b440 in PR_WaitCondVar (cvar=0x14216d0, timeout=4294967295) at ../../../nspr/pr/src/pthreads/ptsynch.c:385
    #2  0x00007fbc994e5bfe in threadLoop (this=0x1504ea8) at /usr/src/debug/mozjs-24.2.0/js/src/jsscript.cpp:1094
    #3  js::SourceCompressorThread::compressorThread (arg=0x1504ea8) at /usr/src/debug/mozjs-24.2.0/js/src/jsscript.cpp:965
    #4  0x00007fbc8e620cab in _pt_root (arg=0x14538c0) at ../../../nspr/pr/src/pthreads/ptthread.c:212
    #5  0x00007fbc90d27555 in start_thread (arg=0x7fbc6e7fc700) at pthread_create.c:333
    #6  0x00007fbc90a61ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
     
    Thread 1 (Thread 0x7fbc9b616a40 (LWP 5692)):
    #0  wl_list_insert (list=0x0, elm=elm@entry=0x12d0fc8) at src/wayland-util.c:46
    #1  0x00007fbc91cceed9 in wl_signal_add (signal=<optimized out>, listener=listener@entry=0x12d0fc8) at src/wayland-server.h:224
    #2  wl_resource_add_destroy_listener (resource=<optimized out>, listener=listener@entry=0x12d0fc8) at src/wayland-server.c:638
    #3  0x00007fbc961d8753 in meta_wayland_pointer_set_focus (pointer=0x12d0f98, surface=0x33e3610) at wayland/meta-wayland-pointer.c:518
    #4  0x00007fbc961d8bc7 in repick_for_event (pointer=0x12d0f98, for_event=<optimized out>) at wayland/meta-wayland-pointer.c:309
    #5  0x00007fbc91cce38c in destroy_resource (element=0x343f650, data=data@entry=0x0) at src/wayland-server.c:532
    #6  0x00007fbc91cced84 in wl_resource_destroy (resource=<optimized out>) at src/wayland-server.c:545
    #7  0x00007fbc8ee55db0 in ffi_call_unix64 () from /lib64/libffi.so.6
    #8  0x00007fbc8ee55818 in ffi_call () from /lib64/libffi.so.6
    #9  0x00007fbc91cd2d62 in wl_closure_invoke (closure=closure@entry=0x3414100, flags=flags@entry=2, target=target@entry=0x343f650,
        opcode=opcode@entry=0, data=data@entry=0x33a2430) at src/connection.c:942
    #10 0x00007fbc91ccf1c6 in wl_client_connection_data (fd=<optimized out>, mask=<optimized out>, data=0x33a2430) at src/wayland-server.c:334
    #11 0x00007fbc91cd0fb2 in wl_event_loop_dispatch (loop=0x1113530, timeout=timeout@entry=0) at src/event-loop.c:419
    #12 0x00007fbc961d50e7 in wayland_event_source_dispatch (base=<optimized out>, callback=<optimized out>, data=<optimized out>)
        at wayland/meta-wayland.c:85
    #13 0x00007fbc9258223a in g_main_dispatch (context=0x1111550) at gmain.c:3122
    #14 g_main_context_dispatch (context=context@entry=0x1111550) at gmain.c:3737
    #15 0x00007fbc925825d0 in g_main_context_iterate (context=0x1111550, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>)
        at gmain.c:3808
    #16 0x00007fbc925828f2 in g_main_loop_run (loop=0x12888b0) at gmain.c:4002
    #17 0x00007fbc961a81c6 in meta_run () at core/main.c:437
    #18 0x00000000004023fd in main (argc=1, argv=0x7fff81476dd8) at main.c:463

    (gdb) p *(MetaWaylandPointer *) 0x12d0f98
    $1 = {display = 0x11134a0, resource_list = {prev = 0x29abd60, next = 0x2f82bf0}, focus_resource_list = {prev = 0x12d0fb0, next = 0x12d0fb0},
      focus_surface = 0x33e3610, focus_surface_listener = {link = {prev = 0x0, next = 0x0},
        notify = 0x7fbc961d8b30 <pointer_handle_focus_surface_destroy>}, focus_serial = 23, click_serial = 0, cursor_tracker = 0x1111a30,
      cursor_surface = 0x12d77d0, cursor_surface_destroy_listener = {link = {prev = 0x2a1da20, next = 0x2a1da20},
        notify = 0x7fbc961d86a0 <pointer_handle_cursor_surface_destroy>}, hotspot_x = 7, hotspot_y = 4, grab = 0x12d1020, default_grab = {
        interface = 0x7fbc964247c0 <default_pointer_grab_interface>, pointer = 0x12d0f98}, grab_button = 1, grab_serial = 24, grab_time = 4005217,
      grab_x = 1074.51855, grab_y = 45.750946, device = 0x1245030, current = 0x33e3610, button_count = 0}
    (gdb)