Bug#900776: gnome-shell: crash on wayland when logind locks session after idle-time

Uwe Kleine-König uwe at kleine-koenig.org
Mon Jun 25 21:51:54 BST 2018


Hello Simon,

On Mon, Jun 04, 2018 at 08:18:04PM +0100, Simon McVittie wrote:
> On Mon, 04 Jun 2018 at 21:01:00 +0200, Jakobus Schürz wrote:
> > Jun 04 20:43:46 aldebaran kernel: gnome-shell[17126]: segfault at 560800000007 ip 00007fc52adc9d12 sp 00007fff91bff000 error 4 in libgobject-2.0.so.0.5600.1[7fc52ad94000+52000]
> 
> This is the real bug. Can you get a backtrace from this segfault, for
> instance by using systemd-coredump, corekeeper or similar?

I think this problem triggered for me. I have

	[28182.855672] gnome-shell[1909]: segfault at 1 ip 00007fba077bed12 sp 00007ffd6eac3df0 error 4 in libgobject-2.0.so.0.5600.1[7fba07789000+52000]

I didn't install all dbgsym packages that find-dbgsym-packages suggested
because my system is somewhere between sarge and unstable and I would
need to pick the right dbgsym packages from snapshot.d.o. So I only
installed the stuff that I considered important (or easy). Tell me if I
missed a critical package, I conserved the corefile. For a quick word I
also idle as ukleinek in #debian-gnome, just hilight me.

GNU gdb (Debian 7.12-6+b2) 7.12.0.20161007-git
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/bin/gnome-shell...Reading symbols from /usr/lib/debug/.build-id/19/f71b4f9a4e5350378a3fb89fb14d74a356ae72.debug...done.
done.
[New LWP 1909]
[New LWP 1912]
[New LWP 1913]
[New LWP 1944]
[New LWP 1943]
[New LWP 1916]
[New LWP 1945]
[New LWP 1947]
[New LWP 1936]
[New LWP 11381]
[New LWP 1948]
[New LWP 1914]
[New LWP 1949]
[New LWP 1942]
[New LWP 1946]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/bin/gnome-shell'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  g_type_check_instance_cast (type_instance=0x5583678164b0, iface_type=94022861577152) at ../../../../gobject/gtype.c:4057
4057	../../../../gobject/gtype.c: No such file or directory.
[Current thread is 1 (Thread 0x7fba08376ac0 (LWP 1909))]
(gdb) bt full
#0  0x00007fba077bed12 in g_type_check_instance_cast (type_instance=0x5583678164b0, iface_type=94022861577152) at ../../../../gobject/gtype.c:4057
        is_instantiatable = <optimized out>
        check = <optimized out>
#1  0x00007fba04f2b998 in st_label_set_text (label=0x558368173c60 [StLabel], text=0x55836ac42850 "44°C") at ../src/st/st-label.c:331
        priv = 0x558368173800
        ctext = <optimized out>
        __func__ = "st_label_set_text"
#2  0x00007fba017bafce in ffi_call_unix64 () at ../src/x86/unix64.S:76
#3  0x00007fba017ba93f in ffi_call (cif=cif at entry=0x558369459258, fn=<optimized out>, rvalue=<optimized out>, rvalue at entry=0x7ffd6eac40a8, avalue=avalue at entry=0x7ffd6eac3f90) at ../src/x86/ffi64.c:525
        classes = {X86_64_INTEGER_CLASS, X86_64_NO_CLASS, X86_64_NO_CLASS, X86_64_NO_CLASS}
        stack = <optimized out>
        argp = <optimized out>
        arg_types = <optimized out>
        gprcount = 2
        ssecount = <optimized out>
        ngpr = 1
        nsse = 0
        i = <optimized out>
        avn = <optimized out>
        ret_in_memory = <optimized out>
        reg_args = <optimized out>
#4  0x00007fba06491138 in gjs_invoke_c_function(JSContext*, Function*, JS::HandleObject, JS::HandleValueArray const&, mozilla::Maybe<JS::MutableHandle<JS::Value> >, GIArgument*) (context=context at entry=0x558367742a30, function=function at entry=0x558369459240, obj=..., obj at entry=..., args=..., js_rval=..., r_value=r_value at entry=0x0) at gi/function.cpp:1088
        in_arg_cvalues = 0x7ffd6eac3fb0
        out_arg_cvalues = 0x7ffd6eac3f70
        inout_original_arg_cvalues = 0x7ffd6eac3f50
        ffi_arg_pointers = 0x7ffd6eac3f90
        return_value = 
          {v_boolean = 1735666224, v_int8 = 48 '0', v_uint8 = 48 '0', v_int16 = 10800, v_uint16 = 10800, v_int32 = 1735666224, v_uint32 = 1735666224, v_int64 = 94022864742960, v_uint64 = 94022864742960, v_float = 1.15303564e+24, v_double = 4.6453467393074702e-310, v_short = 10800, v_ushort = 10800, v_int = 1735666224, v_uint = 1735666224, v_long = 94022864742960, v_ulong = 94022864742960, v_ssize = 94022864742960, v_size = 94022864742960, v_string = 0x558367742a30 "", v_pointer = 0x558367742a30}
        return_value_p = 0x7ffd6eac40a8
        return_gargument = 
          {v_boolean = 1856782784, v_int8 = -64 '\300', v_uint8 = 192 '\300', v_int16 = 16832, v_uint16 = 16832, v_int32 = 1856782784, v_uint32 = 1856782784, v_int64 = 140726460236224, v_uint64 = 140726460236224, v_float = 2.66554543e+28, v_double = 6.9528109463562511e-310, v_short = 16832, v_ushort = 16832, v_int = 1856782784, v_uint = 1856782784, v_long = 140726460236224, v_ulong = 140726460236224, v_ssize = 140726460236224, v_size = 140726460236224, v_string = 0x7ffd6eac41c0 "", v_pointer = 0x7ffd6eac41c0}
        processed_c_args = <optimized out>
        gi_argc = 1 '\001'
        gi_arg_pos = <optimized out>
        c_argc = 2 '\002'
        c_arg_pos = <optimized out>
        js_arg_pos = <optimized out>
        can_throw_gerror = false
        did_throw_gerror = false
        local_error = 0x0
        failed = false
        postinvoke_release_failed = <optimized out>
        is_method = <optimized out>
        is_object_method = true
        return_info = {dummy1 = 18, dummy2 = 2147483647, dummy3 = 0x55836720b820, dummy4 = 0x558369563d40, dummy5 = 0x55836793fd90, dummy6 = 14812, dummy7 = 0, padding = {0x0, 0x0, 0x0, 0x0}}
        return_tag = GI_TYPE_TAG_VOID
        return_values = 
                  {<JS::Rooted<JS::GCVector<JS::Value, 8, js::TempAllocPolicy> >> = {<js::RootedBase<JS::GCVector<JS::Value, 8, js::TempAllocPolicy> >> = {<js::MutableGCVectorOperations<JS::Rooted<JS::GCVector<JS::Value, 8, js::TempAllocPolicy> >, JS::Value, 8, js::TempAllocPolicy>> = {<js::GCVectorOperations<JS::Rooted<JS::GCVector<JS::Value, 8, js::TempAllocPolicy> >, JS::Value, 8, js::TempAllocPolicy>> = {<No data fields>}, <No data fields>}, <No data fields>}, stack = 0x558367736c70, prev = 0x7ffd6eac4958, ptr = {tracer = 0x7fba06488090 <JS::StructGCPolicy<JS::GCVector<JS::Value, 8ul, js::TempAllocPolicy> >::trace(JSTracer*, JS::GCVector<JS::Value, 8ul, js::TempAllocPolicy>*, char const*)>, storage = {vector = {<js::TempAllocPolicy> = {cx_ = 0x558367742a30}, static kElemIsPod = false, static kMaxInlineBytes = 1024, static kInlineCapacity = 8, static kInlineBytes = 64, mBegin = 0x7ffd6eac42b8, mLength = 0, mCapacity = 8, mStorage = {u = {mBytes = "\340}Sl\203U\000\000\260C\254n\375\177\000\000\313\a\000\000\000\000\000\000\026E\254n\375\177\000\000 at E\254n\375\177\000\000\060E\254n\375\177\000\000\060*tg\203U\000\000hlsg\203U\000", mDummy = 94022946487776}}, static sMaxInlineStorage = <optimized out>}}}}, <No data fields>}
        next_rval = 0 '\000'
        __PRETTY_FUNCTION__ = "bool gjs_invoke_c_function(JSContext*, Function*, JS::HandleObject, const JS::HandleValueArray&, mozilla::Maybe<JS::MutableHandle<JS::Value> >, GIArgument*)"
#5  0x00007fba06492a84 in function_call(JSContext*, unsigned int, JS::Value*) (context=context at entry=0x558367742a30, js_argc=1, vp=0x7ffd6eac47a0) at gi/function.cpp:1406
        object = {<js::RootedBase<JSObject*>> = {<No data fields>}, stack = 0x558367736c30, prev = 0x7ffd6eac4978, ptr = 0x7fb9bbdf6280}
        callee = {<js::RootedBase<JSObject*>> = {<No data fields>}, stack = 0x558367736c30, prev = 0x7ffd6eac4350, ptr = 0x7fb98f015820}
        success = <optimized out>
        priv = 0x558369459240
        retval = 
              {<js::RootedBase<JS::Value>> = {<js::MutableValueOperations<JS::Rooted<JS::Value> >> = {<js::ValueOperations<JS::Rooted<JS::Value> >> = {<No data fields>}, <No data fields>}, <No data fields>}, stack = 0x558367736c68, prev = 0x7ffd6eac4550, ptr = {data = {asBits = 18444773748872577024, debugView = {payload47 = 0, tag = JSVAL_TAG_UNDEFINED}, s = {payload = {i32 = 0, u32 = 0, why = JS_ELEMENTS_HOLE}}, asDouble = -nan(0x9000000000000), asPtr = 0xfff9000000000000, asWord = 18444773748872577024, asUIntPtr = 18444773748872577024}}}
#6  0x00007fb9fd424fdc in js::CallJSNative(JSContext*, bool (*)(JSContext*, unsigned int, JS::Value*), JS::CallArgs const&) (args=..., native=0x7fba06492920 <function_call(JSContext*, unsigned int, JS::Value*)>, cx=0x558367742a30) at ./js/src/jscntxtinlines.h:239
        ok = <optimized out>
        call = 0x7fba06492920 <function_call(JSContext*, unsigned int, JS::Value*)>
        gcIfRequested = {runtime = 0x558367742c30}
        skipForCallee = <optimized out>
        state = 
          {<js::RunState> = {_vptr.RunState = 0x558367736c48, kind_ = (unknown: 1735666224), script_ = {<js::RootedBase<JSScript*>> = {<No data fields>}, stack = 0x7ffd6eac47a0, prev = 0x1, ptr = 0x7ffd6eac4868}}, args_ = @0x7ffd6eac47b0, construct_ = (unknown: 1856783504), createSingleton_ = 253}
        ok = <optimized out>
#7  0x00007fb9fd424fdc in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=cx at entry=0x558367742a30, args=..., construct=construct at entry=js::NO_CONSTRUCT) at ./js/src/vm/Interpreter.cpp:447
        call = 0x7fba06492920 <function_call(JSContext*, unsigned int, JS::Value*)>
        gcIfRequested = {runtime = 0x558367742c30}
        skipForCallee = <optimized out>
        state = 
          {<js::RunState> = {_vptr.RunState = 0x558367736c48, kind_ = (unknown: 1735666224), script_ = {<js::RootedBase<JSScript*>> = {<No data fields>}, stack = 0x7ffd6eac47a0, prev = 0x1, ptr = 0x7ffd6eac4868}}, args_ = @0x7ffd6eac47b0, construct_ = (unknown: 1856783504), createSingleton_ = 253}
        ok = <optimized out>
---Type <return> to continue, or q <return> to quit---\
#8  0x00007fb9fd425099 in InternalCall(JSContext*, js::AnyInvokeArgs const&) (cx=cx at entry=0x558367742a30, args=...) at ./js/src/vm/Interpreter.cpp:504
#9  0x00007fb9fd4250ca in js::CallFromStack(JSContext*, JS::CallArgs const&) (cx=cx at entry=0x558367742a30, args=...) at ./js/src/vm/Interpreter.cpp:510
#10 0x00007fb9fd6453e6 in js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICCall_Fallback*, uint32_t, JS::Value*, JS::MutableHandleValue) (cx=0x558367742a30, frame=0x7ffd6eac4868, stub_=0x55836c537da8, argc=1, vp=0x7ffd6eac47a0, res=...)
    at ./js/src/jit/BaselineIC.cpp:6020
        info = 
          {maybeFrame_ = 0x7ffd6eac4868, outerScript_ = {<js::RootedBase<JSScript*>> = {<No data fields>}, stack = 0x558367736c40, prev = 0x7ffd6eac4f10, ptr = 0x7fb9b9bb89a0}, innerScript_ = {<js::RootedBase<JSScript*>> = {<No data fields>}, stack = 0x558367736c40, prev = 0x7ffd6eac4638, ptr = 0x7fb9b9bb89a0}, icEntry_ = 0x55836c535078}
        stub = {engine_ = js::jit::ICStubCompiler::Engine::Baseline, stub_ = 0x55836c537da8, frame_ = 0x7ffd6eac4868, pcOffset_ = 1995}
        script = {<js::RootedBase<JSScript*>> = {<No data fields>}, stack = 0x558367736c40, prev = 0x7ffd6eac4650, ptr = 0x7fb9b9bb89a0}
        op = <optimized out>
        constructing = false
        numValues = 3
        vpRoot = {<JS::AutoGCRooter> = {down = 0x7ffd6eac53b0, tag_ = 3, stackTop = 0x558367742a98}, array = 0x7ffd6eac47a0}
        callArgs = {<JS::detail::CallArgsBase<JS::detail::IncludeUsedRval>> = {<JS::detail::IncludeUsedRval> = {<No data fields>}, argv_ = 0x7ffd6eac47b0, argc_ = 1, constructing_ = false}, <No data fields>}
        callee = 
              {<js::RootedBase<JS::Value>> = {<js::MutableValueOperations<JS::Rooted<JS::Value> >> = {<js::ValueOperations<JS::Rooted<JS::Value> >> = {<No data fields>}, <No data fields>}, <No data fields>}, stack = 0x558367736c68, prev = 0x7ffd6eac4a70, ptr = {data = {asBits = 18446321558701037600, debugView = {payload47 = 140434944907296, tag = JSVAL_TAG_OBJECT}, s = {payload = {i32 = -1895737312, u32 = 2399229984, why = 2399229984}}, asDouble = -nan(0xe7fb98f015820), asPtr = 0xfffe7fb98f015820, asWord = 18446321558701037600, asUIntPtr = 18446321558701037600}}}
        createSingleton = <optimized out>
        handled = true
#11 0x000002c7952b8a96 in  ()
#12 0x0000558367742a30 in  ()
#13 0x00007ffd6eac4758 in  ()
#14 0x0000000000000008 in  ()
#15 0xfff9000000000000 in  ()
#16 0x00007fb9fe5cada0 in js::jit::DoCallFallbackInfo () at /usr/lib/x86_64-linux-gnu/libmozjs-52.so.0
#17 0x00007fb9d8571520 in  ()
#18 0x000002c79e2d7133 in  ()
#19 0x0000000000004822 in  ()
#20 0x00007ffd6eac4868 in  ()
#21 0x000055836c537da8 in  ()
#22 0x0000000000000001 in  ()
#23 0x00007ffd6eac47a0 in  ()
#24 0xfffe7fb98f015820 in  ()
#25 0xfffe7fb9bbdf6280 in  ()
#26 0xfffaffb9bb8f6118 in  ()
#27 0x00007ffd6eac4898 in  ()
#28 0x000055836c537da8 in  ()
#29 0x000002c79e47b1e1 in  ()
#30 0x000000000000c821 in  ()
#31 0xfffaffb9bb8f6118 in  ()
#32 0xfffe7fb9bbdf6280 in  ()
#33 0xfffe7fb98f015820 in  ()
#34 0xfffe7fb9bb8f5500 in  ()
#35 0xfffe7fb9b9b9bfa0 in  ()
#36 0xfffe7fb9bbdf6280 in  ()
#37 0xfffe7fb9bb8f5500 in  ()
#38 0xfffe7fb98714a138 in  ()
#39 0x4046000000000000 in  ()
#40 0x4074580000000000 in  ()
#41 0xfff8800000000008 in  ()
#42 0xfffe7fb98714a058 in  ()
#43 0xfffe7fb987149bd8 in  ()
#44 0xfffe7fb987149158 in  ()
#45 0xfffe7fb987148638 in  ()
#46 0xfffe7fb9871478d8 in  ()
#47 0xfffe7fb987147878 in  ()
#48 0xfffe7fb98f0c07e0 in  ()
#49 0x0000000000000000 in  ()
(gdb) 

Best regards
Uwe
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20180625/c38b1c6f/attachment-0001.sig>


More information about the pkg-gnome-maintainers mailing list