1829913 - Linux Crash in DBus [@ toggle_refs_notify]

Status: RESOLVED DUPLICATE of bug 1834219

(Core :: Widget: Gtk, defect, P3)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Not a new crash signature, most crash reports for Nightly builds, ~20-30 per development cycle.

Crash report: https://crash-stats.mozilla.org/report/index/80a9d9f1-0f32-4bcd-a375-639c70230425

Reason: SIGSEGV / SEGV_MAPERR

Top 10 frames of crashing thread:

0  libgobject-2.0.so.0  toggle_refs_notify  /usr/src/debug/glib2/glib/gobject/gobject.c:3610
1  libgio-2.0.so.0  g_dbus_connection_emit_signal  /usr/src/debug/glib2/glib/gio/gdbusconnection.c:5736
2  libxul.so  libxul.so@0x7ef3242  
3  libxul.so  libxul.so@0x7ef3983  
4  libxul.so  libxul.so@0x7ef33fa  
5  libxul.so  libxul.so@0x775335a  
6  libxul.so  libxul.so@0x775e06e  
7  libxul.so  libxul.so@0x775defd  
8  libxul.so  libxul.so@0x776179e  
9  libxul.so  libxul.so@0x4f50dbc  

Comment 1

[Martin Stránský [:stransky] (ni? me)]

I see two sources of the crash:

mozilla::widget::IMContextWrapper::OnKeyEvent(nsWindow*, _GdkEventKey*, bool) mozilla::widget::IMContextWrapper::NotifyIMEOfFocusChange(mozilla::widget::IMContextWrapper::IMEFocusState) mozilla::widget::MPRISServiceHandler::EmitPropertiesChangedSignal(_GVariant*) const

so looks like we destroyed the object before DBus callback call.

Comment 2

[Karl Tomlinson (:karlt)]

https://crash-stats.mozilla.org/report/index/49cd3c25-f465-49fb-af1a-b5df20230630 is an example with IMContextWrapper::OnKeyEvent() and im-ibus.so.
https://crash-stats.mozilla.org/report/index/26f204a1-e374-483c-a8bd-50c4e0230630 is IMContextWrapper::OnSelectionChange() and libFcitx5GClient.so.2.

Comment 3

[Paul Menzel]

On the Intel Broadwell laptop Dell Latitude E7250 with Debian sid/unstable and Nightly 118.0a1, suspend my suspend with Nightly running, and then resuming I saw the crash dialog of Nightly.

https://crash-stats.mozilla.org/report/index/dd358018-4076-47f4-ad4c-59c3c0230812

I do not see the IMContextWrapper:: in there though.

Comment 4

[Paul Menzel]

https://crash-stats.mozilla.org/report/index/3c75d1a4-4d6e-4675-8d94-83d640230828 happened unrelated to resume/suspend. I was streaming a video in a private window, and probably there is also memory pressure on the system.