After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 789398 - Gnome Shell crashes in JS engine
Gnome Shell crashes in JS engine
Status: RESOLVED DUPLICATE of bug 788931
Product: gnome-shell
Classification: Core
Component: general
3.26.x
Other Linux
: Normal critical
: ---
Assigned To: gnome-shell-maint
gnome-shell-maint
Depends on:
Blocks:
 
 
Reported: 2017-10-24 11:16 UTC by Ralf
Modified: 2017-10-24 20:15 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
Core Dump info with all thread states (27.15 KB, text/plain)
2017-10-24 13:28 UTC, Michael
Details

Description Ralf 2017-10-24 11:16:55 UTC
Gnome shell crashes once or twice a day for me.  I now managed to catch a backtrace:

Okt 24 13:08:28 r-thinktop gnome-shell[1794]: invalid unclassed pointer in cast to 'ClutterText'
Okt 24 13:08:28 r-thinktop gnome-shell[1794]: clutter_text_get_editable: assertion 'CLUTTER_IS_TEXT (self)' failed
Okt 24 13:08:28 r-thinktop gnome-shell[1794]: clutter_text_get_text: assertion 'CLUTTER_IS_TEXT (self)' failed
Okt 24 13:08:28 r-thinktop gnome-shell[1794]: clutter_text_set_text: assertion 'CLUTTER_IS_TEXT (self)' failed
Okt 24 13:08:28 r-thinktop kernel: traps: gnome-shell[1794] general protection ip:7f4a21bcaddd sp:7ffebec79010 error:0 in libgobject-2.0.so.0.5400.1[7f4a21b95000+52000]
Okt 24 13:08:28 r-thinktop systemd[1]: Created slice system-systemd\x2dcoredump.slice.
Okt 24 13:08:28 r-thinktop systemd[1]: Attaching egress BPF program to cgroup /sys/fs/cgroup/unified/system.slice/system-systemd\x2dcoredump.slice/systemd-coredump@0-11517-0.service failed: Invalid argument
Okt 24 13:08:28 r-thinktop systemd[1]: Started Process Core Dump (PID 11517/UID 0).
Okt 24 13:08:29 r-thinktop polkitd(authority=local)[770]: Unregistered Authentication Agent for unix-session:2 (system bus name :1.124, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.U
Okt 24 13:08:29 r-thinktop gnome-session[1712]: gnome-session-binary[1712]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 11
Okt 24 13:08:29 r-thinktop gnome-session-binary[1712]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 11
Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): EDID vendor "SHP", prod id 5179
Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): Printing DDC gathered Modelines:
Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): Modeline "3840x2160"x0.0  533.25  3840 3888 3920 4000  2160 2163 2168 2222 -hsync -vsync (133.3 kHz eP)
Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): EDID vendor "SHP", prod id 5179
Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): Printing DDC gathered Modelines:
Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): Modeline "3840x2160"x0.0  533.25  3840 3888 3920 4000  2160 2163 2168 2222 -hsync -vsync (133.3 kHz eP)
Okt 24 13:08:30 r-thinktop systemd-coredump[11518]: Process 1794 (gnome-shell) of user 1000 dumped core.
                                                    
                                                    Stack trace of thread 1794:
                                                    #0  0x00007f4a21bcaddd g_type_check_instance_cast (libgobject-2.0.so.0)
                                                    #1  0x00007f4a1f36e7d8 st_label_set_text (libst-1.0.so)
                                                    #2  0x00007f4a1b85f038 ffi_call_unix64 (libffi.so.6)
                                                    #3  0x00007f4a1b85ea9a ffi_call (libffi.so.6)
                                                    #4  0x00007f4a20892ed8 n/a (libgjs.so.0)
                                                    #5  0x00007f4a208947b4 n/a (libgjs.so.0)
                                                    #6  0x00007f4a17977fdc n/a (libmozjs-52.so.0)
                                                    #7  0x00007f4a179780f9 n/a (libmozjs-52.so.0)
                                                    #8  0x00007f4a1776a079 n/a (libmozjs-52.so.0)
                                                    #9  0x00000583cb7883c6 n/a (n/a)

Unfortunately, neither libmozjs-52-0 nor libgjs seem to have a -dbg(sym) package in Debian.  Is there another way to get more information out of this?

I have the following extensions enabled:
Alternatetab
Dash to panel
Topicon plus
Workspace indicator
Comment 1 Ralf 2017-10-24 11:41:44 UTC
Something I noticed about this backtrace:  There's an assertion failure in clutter_text_set_text right before the crash, and st_label_set_text is almost at the top of the backtrace.  Seems likely that this is related?  (I have no idea about the inner works of Gnome Shell, though.)
Comment 2 Michael 2017-10-24 13:26:51 UTC
Here is a little more details with a crash as the same point.

          PID: 1202 (gnome-shell)
           UID: 1000
           GID: 1000
        Signal: 11 (SEGV)
     Timestamp: Tue 2017-10-24 08:21:21 CDT (45s ago)
  Command Line: /usr/bin/gnome-shell
    Executable: /usr/bin/gnome-shell
 Control Group: /user.slice/user-1000.slice/session-c3.scope
          Unit: session-c3.scope
         Slice: user-1000.slice
       Session: c3
     Owner UID: 1000
       Boot ID: d09e1fe4d9334b61a08bd7486551e1a0
    Machine ID: aa9d59961df749169fe2cd638e7c9e6d
       Storage: /var/lib/systemd/coredump/core.gnome-shell.1000.d09e1fe4d9334b61a08bd7486551e1a0.1202.1508851281000000.lz4
       Message: Process 1202 (gnome-shell) of user 1000 dumped core.

                Stack trace of thread 1202:
                #0  0x00007fd1091e89e2 g_type_check_instance_cast (libgobject-2.0.so.0)
                #1  0x00007fd106f0b960 st_label_set_text (libst-1.0.so)
                #2  0x00007fd1038781c8 ffi_call_unix64 (libffi.so.6)
                #3  0x00007fd103877c2a ffi_call (libffi.so.6)
                #4  0x00007fd107e91cbb n/a (libgjs.so.0)
                #5  0x00007fd107e93617 n/a (libgjs.so.0)
                #6  0x00007fd10154264d _ZN2js12CallJSNativeEP9JSContextPFbS1_jPN2JS5ValueEERKNS2_8CallArgsE (libmozjs-52.so.0)
                #7  0x00007fd101535687 _ZN2js13CallFromStackEP9JSContextRKN2JS8CallArgsE (libmozjs-52.so.0)
                #8  0x00007fd101541e97 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libmozjs-52.so.0)
                #9  0x00007fd10154246f _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE (libmozjs-52.so.0)
                #10 0x00007fd101542779 _ZN2js4CallEP9JSContextN2JS6HandleINS2_5ValueEEES5_RKNS_13AnyInvokeArgsENS2_13MutableHandleIS4_EE (libmozjs-52.so.0)
                #11 0x00007fd101332219 _ZN2js3jit14InvokeFunctionEP9JSContextN2JS6HandleIP8JSObjectEEbjPNS3_5ValueENS3_13MutableHandleIS8_EE (libmozjs-52.so.0)
                #12 0x00000ce08d92f3c6 n/a (n/a)
                #13 0x00007fd101230d3e EnterIon (libmozjs-52.so.0)
                #14 0x00007fd1015419e3 Interpret (libmozjs-52.so.0)
                #15 0x00007fd101541e97 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libmozjs-52.so.0)
                #16 0x00007fd10154246f _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE (libmozjs-52.so.0)
                #17 0x00007fd101542779 _ZN2js4CallEP9JSContextN2JS6HandleINS2_5ValueEEES5_RKNS_13AnyInvokeArgsENS2_13MutableHandleIS4_EE (libmozjs-52.so.0)
                #18 0x00007fd101332219 _ZN2js3jit14InvokeFunctionEP9JSContextN2JS6HandleIP8JSObjectEEbjPNS3_5ValueENS3_13MutableHandleIS8_EE (libmozjs-52.so.0)
                #19 0x00000ce08d92f3c6 n/a (n/a)
                #20 0x000055ebef8e4620 n/a (n/a)
                #21 0x00000ce08d9b89d5 n/a (n/a)
                #22 0x00007fd101230d3e EnterIon (libmozjs-52.so.0)
                #23 0x00007fd1015419e3 Interpret (libmozjs-52.so.0)
                #24 0x00007fd101541e97 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libmozjs-52.so.0)
                #25 0x00007fd10154246f _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE (libmozjs-52.so.0)
lines 1-45
Comment 3 Michael 2017-10-24 13:28:20 UTC
Created attachment 362181 [details]
Core Dump info with all thread states
Comment 4 Marco Trevisan (Treviño) 2017-10-24 20:15:53 UTC
This is indeed a duplicate of Bug 788931

Please, provide your JS stack dump as well as explained here https://is.gd/wiki_gnome_shell_crash_debug

Thanks

*** This bug has been marked as a duplicate of bug 788931 ***