Ubuntu
gnome-shell package

gnome-shell crashed with SIGSEGV in st_widget_get_theme_node() from <JavaScript>BoxPointer::_reposition()

Bug #1796606 reported by errors.ubuntu.com bug bridge
80
This bug affects 7 people
Affects Status Importance Assigned to Milestone
GNOME Shell
Fix Released
Unknown
gnome-shell (Ubuntu)
Fix Released
Medium
Marco Trevisan (Treviño)
Bionic
Fix Released
Medium
Marco Trevisan (Treviño)
Disco
Fix Released
Medium
Marco Trevisan (Treviño)

Bug Description

https://gitlab.gnome.org/GNOME/gnome-shell/issues/1018
https://gitlab.gnome.org/GNOME/gnome-shell/issues/804

---

[ Impact ]

 - GNOME Shell crashes in st_widget_get_theme_node

[ Test Case ]

 - No clear test case for this, monitoring errors.ubuntu.com is the only feasible solution

[ Regression Potential ]

Shell actors might have wrong theming.
The crash will be converted in error trackable through journalctl

---

The Ubuntu Error Tracker has been receiving reports about a problem regarding gnome-shell. This problem was most recently seen with package version 3.30.0-3ubuntu1, the problem page at https://errors.ubuntu.com/problem/b693e6165eedd2cd0390c2e800ccb28aaca4cd0d contains more details, including versions of packages affected, stacktrace or traceback, and individual crash reports.
If you do not have access to the Ubuntu Error Tracker and are a software developer, you can request it at http://forms.canonical.com/reports/.

See original description

Related branches

~3v1n0/ubuntu/+source/gnome-shell:ubuntu/bionic
git-ubuntu developers: Pending requested
Diff: 10663 lines (+5895/-50) (has conflicts)
92 files modified
NEWS (+31/-0)
debian/changelog (+147/-0)
debian/control (+15/-0)
debian/control.in (+15/-0)
debian/gbp.conf (+6/-0)
debian/patches/41-handle-logind-fail.patch (+18/-0)
debian/patches/50_add_ubuntu_desktop_detect.patch (+38/-0)
debian/patches/70_allow_sound_above_100.patch (+21/-0)
debian/patches/71_smarter_alt_tab.patch (+40/-0)
debian/patches/CVE-2019-3820-1.patch (+29/-0)
debian/patches/CVE-2019-3820-2.patch (+93/-0)
debian/patches/StIcon-only-compute-shadow-pipeline-when-the-texture-is-p.patch (+4/-0)
debian/patches/dialog-Really-set-ellipsize-mode-in-subtitle-and-body.patch (+40/-0)
debian/patches/dnd-Only-handle-touch-events-in-wayland.patch (+40/-0)
debian/patches/js-fix-invalid-access-errors.patch (+62/-0)
debian/patches/js-ui-Choose-some-actors-to-cache-on-the-GPU.patch (+22/-0)
debian/patches/keyboard-Filter-redundant-FocusTracker-position-changed-s.patch (+38/-0)
debian/patches/keyboard-Listen-to-IbusPanelService-focus-in-out-to-track.patch (+65/-0)
debian/patches/optional-hot-corner.patch (+23/-0)
debian/patches/power-Label-the-PENDING_CHARGE-state-as-Not-Charging.patch (+212/-0)
debian/patches/series (+25/-0)
debian/patches/st-adjustment-Mark-all-properties-as-EXPLICIT_NOTIFY.patch (+85/-0)
debian/patches/st-scroll-view-Handle-the-case-where-scrollbars-are-NULL.patch (+38/-0)
debian/patches/st-scroll-view-Remove-scrollbars-references-on-dispose.patch (+33/-0)
debian/patches/st-texture-cache-Cancel-sliced-image-loading-on-target-ac.patch (+46/-0)
debian/patches/st-widget-Add-missing-g_return_val_if_fail.patch (+32/-0)
debian/patches/switchMonitor-switch-to-next-config-upon-initial-keypress.patch (+58/-0)
debian/patches/ubuntu-lightdm-user-switching.patch (+13/-0)
debian/patches/ubuntu_background_login.patch (+20/-0)
debian/patches/ubuntu_block_mode_extension_update.patch (+38/-0)
debian/patches/ubuntu_gdm.patch (+20/-0)
debian/patches/ubuntu_gdm_alternatives.patch (+18/-0)
debian/patches/ubuntu_lock_on_suspend.patch (+38/-0)
debian/patches/volume-Add-back-sound-feedback-on-scroll.patch (+32/-0)
debian/patches/windowManager-listen-actively-to-windows-being-destroyed-.patch (+47/-0)
debian/patches/workaround_crasher_fractional_scaling.patch (+24/-0)
debian/ubuntu-session-mods/ubuntu.css (+12/-0)
js/gdm/authPrompt.js (+12/-0)
js/gdm/util.js (+14/-0)
js/misc/ibusManager.js (+12/-0)
js/misc/keyboardManager.js (+11/-0)
js/misc/objectManager.js (+9/-0)
js/ui/calendar.js (+38/-0)
js/ui/components/automountManager.js (+14/-0)
js/ui/components/networkAgent.js (+4/-0)
js/ui/components/polkitAgent.js (+6/-0)
js/ui/dash.js (+5/-0)
js/ui/dnd.js (+31/-0)
js/ui/endSessionDialog.js (+4/-0)
js/ui/extensionSystem.js (+26/-0)
js/ui/iconGrid.js (+19/-0)
js/ui/keyboard.js (+178/-0)
js/ui/layout.js (+9/-0)
js/ui/magnifier.js (+10/-0)
js/ui/main.js (+17/-0)
js/ui/messageList.js (+5/-0)
js/ui/messageTray.js (+8/-0)
js/ui/notificationDaemon.js (+5/-0)
js/ui/osdWindow.js (+30/-0)
js/ui/overview.js (+5/-0)
js/ui/overviewControls.js (+8/-0)
js/ui/panel.js (+18/-0)
js/ui/popupMenu.js (+20/-0)
js/ui/remoteSearch.js (+4/-0)
js/ui/runDialog.js (+13/-0)
js/ui/search.js (+13/-0)
js/ui/status/keyboard.js (+30/-0)
js/ui/status/network.js (+15/-0)
js/ui/status/system.js (+10/-0)
js/ui/viewSelector.js (+12/-0)
js/ui/windowManager.js (+24/-0)
js/ui/windowMenu.js (+7/-0)
js/ui/workspace.js (+97/-0)
js/ui/workspaceThumbnail.js (+64/-0)
js/ui/workspacesView.js (+4/-0)
meson.build (+4/-0)
po/af.po (+1985/-50)
po/cs.po (+4/-0)
po/gd.po (+1119/-0)
po/pt_BR.po (+86/-0)
po/ru.po (+83/-0)
src/st/meson.build (+4/-0)
src/st/st-bin.c (+17/-0)
src/st/st-box-layout.c (+45/-0)
src/st/st-button.c (+11/-0)
src/st/st-entry.c (+41/-0)
src/st/st-label.c (+4/-0)
src/st/st-scroll-view.c (+14/-0)
src/st/st-texture-cache.c (+53/-0)
src/st/st-theme-node-drawing.c (+56/-0)
src/st/st-theme-node.h (+6/-0)
src/st/st-widget.c (+14/-0)
~3v1n0/ubuntu/+source/gnome-shell:ubuntu/bionic
Daniel van Vugt (community): Approve
Ubuntu Desktop: Pending requested
Diff: 330 lines (+244/-4)
9 files modified
debian/changelog (+18/-0)
debian/control (+2/-2)
debian/control.in (+2/-2)
debian/patches/dialog-Really-set-ellipsize-mode-in-subtitle-and-body.patch (+40/-0)
debian/patches/dnd-Only-handle-touch-events-in-wayland.patch (+40/-0)
debian/patches/series (+5/-0)
debian/patches/st-widget-Add-missing-g_return_val_if_fail.patch (+32/-0)
debian/patches/switchMonitor-switch-to-next-config-upon-initial-keypress.patch (+58/-0)
debian/patches/windowManager-listen-actively-to-windows-being-destroyed-.patch (+47/-0)
Daniel van Vugt (vanvugt)
summary: - /usr/bin/gnome-
- shell:11:st_widget_get_theme_node:ffi_call_unix64:ffi_call:gjs_invoke_c_function:function_call
+ gnome-shell crashed with SIGSEGV in st_widget_get_theme_node →
+ ffi_call_unix64 → ffi_call → gjs_invoke_c_function → function_call
Revision history for this message
Launchpad Janitor (janitor) wrote : Re: gnome-shell crashed with SIGSEGV in st_widget_get_theme_node → ffi_call_unix64 → ffi_call → gjs_invoke_c_function → function_call

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gnome-shell (Ubuntu):
status: New → Confirmed
Revision history for this message
Marco Trevisan (Treviño) (3v1n0) wrote :

Anyone affected, please share your

journalctl /usr/bin/gnome-shell -b

Revision history for this message
Aurimas Fišeras (aurimas-gmail) wrote :

Managed to reproduce the crash by launching gnome-tweaks.
Here is the log from just before the crash to after logging back in.

Revision history for this message
Marco Trevisan (Treviño) (3v1n0) wrote :
Download full text (3.2 KiB)

Great, thanks for this.
Can you reproduce this repeatedly? If so, you've also a /var/crash file for this?

at least now we know where it crashes :)

spal. 22 17:57:57 grr gnome-shell[20099]: Object Shell.GenericContainer (0x563876a896d0), has been already deallocated — impossible to get any property from it. This might be caused by the object having been destroyed from C code using something such as destroy(), dispose(), or remove() vfuncs.
spal. 22 17:57:57 grr gnome-shell[20099]: Object Shell.GenericContainer (0x563876a896d0), has been already deallocated — impossible to access it. This might be caused by the object having been destroyed from C code using something such as destroy(), dispose(), or remove() vfuncs.
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: == Stack trace for context 0x5638745012a0 ==
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #0 56387a1040b0 i resource:///org/gnome/shell/ui/boxpointer.js:234 (7fc34a71a940 @ 574)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #1 7fff5ce00020 b resource:///org/gnome/gjs/modules/_legacy.js:82 (7fc34aab0b80 @ 71)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #2 7fff5ce00100 b self-hosted:981 (7fc34aaf01f0 @ 474)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #3 7fff5ce01b80 b resource:///org/gnome/shell/ui/layout.js:211 (7fc34a701790 @ 62)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: == Stack trace for context 0x5638745012a0 ==
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #0 56387a104170 i resource:///org/gnome/shell/ui/boxpointer.js:448 (7fc34a71ab80 @ 179)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #1 7fff5cdff090 b resource:///org/gnome/gjs/modules/_legacy.js:82 (7fc34aab0b80 @ 71)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #2 56387a1040b0 i resource:///org/gnome/shell/ui/boxpointer.js:235 (7fc34a71a940 @ 597)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #3 7fff5ce00020 b resource:///org/gnome/gjs/modules/_legacy.js:82 (7fc34aab0b80 @ 71)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #4 7fff5ce00100 b self-hosted:981 (7fc34aaf01f0 @ 474)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #5 7fff5ce01b80 b resource:///org/gnome/shell/ui/layout.js:211 (7fc34a701790 @ 62)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: GNOME Shell crashed with signal 11
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: == Stack trace for context 0x5638745012a0 ==
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #0 56387a104170 i resource:///org/gnome/shell/ui/boxpointer.js:448 (7fc34a71ab80 @ 179)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #1 7fff5cdff090 b resource:///org/gnome/gjs/modules/_legacy.js:82 (7fc34aab0b80 @ 71)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #2 56387a1040b0 i resource:///org/gnome/shell/ui/boxpointer.js:235 (7fc34a71a940 @ 597)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #3 7fff5ce00020 b resource:///org/gnome/gjs/modules/_legacy.js:82 (7fc34aab0b80 @ 71)
spal. 22 17:57:57 grr org.gnome.Shell.desktop[20099]: #4 7fff5ce00100 b self-hosted:981 (7fc34aaf01f0 @ 474)
spal. 22 17:5...

Read more...

Revision history for this message
Aurimas Fišeras (aurimas-gmail) wrote :

I cannot reproduce it repeatedly. Currently gnome-tweaks opens without crashing gnome-shell.

Revision history for this message
Russell Neches (ubuntu-vort) wrote :

When I first started getting these crashes, they were triggered by attaching an external monitor, but that problem seems to have been fixed. Now, I am getting crashes when I put my laptop to sleep and then wake it up. It also destroys screen and tmux sessions somehow, so these crashes have about the same effect on the user as a kernel panic. Yet another way that systemd is broken, I guess?

There was a [similar bug](https://bbs.archlinux.org/viewtopic.php?id=224570) reported on Arch Linux, where the redshift extension was blamed as the culprit (though no explanation was given about his this was determined or what the mechanism might be.

I'm going to try disabling Night Mode.

Revision history for this message
Daniel van Vugt (vanvugt) wrote :

Upstream bug (?) https://gitlab.gnome.org/GNOME/gnome-shell/issues/804

Revision history for this message
Chris Rogers (settonull) wrote :

This (gnome-shell seg fault) happens to me every few times I close and reopen my laptop (though not every time). I've uploaded them almost every time, no idea how to link it to this (or any other) bug report.

https://errors.ubuntu.com/user/4594f62062058db851ff674f534862397e01aff99cc3bd84bf1015db3caa0b25927c8496a9181576609876d3f4807d122cf432748f94e6525c39ace3fb3b4352

Revision history for this message
Marco Trevisan (Treviño) (3v1n0) wrote :

Chris,

Do you have a journalctl error when this is happening?

Revision history for this message
Daniel van Vugt (vanvugt) wrote :

Upstream(s):

https://gitlab.gnome.org/GNOME/gnome-shell/issues/1018
https://gitlab.gnome.org/GNOME/gnome-shell/issues/804

description: updated
Marco Trevisan (Treviño) (3v1n0)
tags: added: fixed-3.32.1 fixed-upstream
El jinete sin cabeza (ejsc)
tags: added: rls-dd-incoming
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

Are you sure it's "fixed-upstream"? Both the upstream bugs in comment #10 are still open.

Revision history for this message
Marco Trevisan (Treviño) (3v1n0) wrote :

Daniel, while the fix¹ didn't landed yet it will land on 3.32.1².

[1] TBH this isn't really a fix for the problem itself but at least in ubuntu where we
    compile without `G_DISABLE_CHECKS` will mute the crash, making things for us at least
    good enough to close this.
[2] https://gitlab.gnome.org/GNOME/gnome-shell/merge_requests/438

Will Cooke (willcooke)
Changed in gnome-shell (Ubuntu):
assignee: nobody → Marco Trevisan (Treviño) (3v1n0)
tags: removed: rls-dd-incoming
Marco Trevisan (Treviño) (3v1n0)
Changed in gnome-shell (Ubuntu Bionic):
status: New → Triaged
assignee: nobody → Marco Trevisan (Treviño) (3v1n0)
Revision history for this message
Marco Trevisan (Treviño) (3v1n0) wrote :

This has been fixed for disco in gnome-shell 3.32.0-1ubuntu1

Changed in gnome-shell (Ubuntu Disco):
status: Confirmed → Fix Released
Marco Trevisan (Treviño) (3v1n0)
Changed in gnome-shell (Ubuntu Bionic):
status: Triaged → In Progress
Changed in gnome-shell (Ubuntu):
importance: Undecided → Medium
Changed in gnome-shell (Ubuntu Bionic):
importance: Undecided → Medium
Changed in gnome-shell (Ubuntu Disco):
importance: Undecided → Medium
Marco Trevisan (Treviño) (3v1n0)
description: updated
Bug Watch Updater (bug-watch-updater)
Changed in gnome-shell:
status: Unknown → New
Daniel van Vugt (vanvugt)
tags: added: disco
Daniel van Vugt (vanvugt)
summary: - gnome-shell crashed with SIGSEGV in st_widget_get_theme_node →
- ffi_call_unix64 → ffi_call → gjs_invoke_c_function → function_call
+ gnome-shell crashed with SIGSEGV in st_widget_get_theme_node() from
+ BoxPointer::_reposition()
summary: gnome-shell crashed with SIGSEGV in st_widget_get_theme_node() from
- BoxPointer::_reposition()
+ <JavaScript>BoxPointer::_reposition()
El jinete sin cabeza (ejsc)
description: updated
Revision history for this message
Brian Murray (brian-murray) wrote : Please test proposed package

Hello errors.ubuntu.com, or anyone else affected,

Accepted gnome-shell into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/gnome-shell/3.28.4-0ubuntu18.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in gnome-shell (Ubuntu Bionic):
status: In Progress → Fix Committed
tags: added: verification-needed verification-needed-bionic
Revision history for this message
Marco Trevisan (Treviño) (3v1n0) wrote :

No errors.ubuntu.com report for 3.28.4 and 3.32.0 (where the same patch is applied), plus this fix is part of the upstream release, and so marking as verified as per the GNOME SRU release exception.

tags: added: verification-done verification-done-bionic
removed: verification-needed verification-needed-bionic
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gnome-shell - 3.28.4-0ubuntu18.04.1

---------------
gnome-shell (3.28.4-0ubuntu18.04.1) bionic; urgency=medium

  * New upstream stable release
    - Fix ellipsization in dialog subtitles/bodies (LP: #1809788)
    - dnd: Only handle touch events in wayland (LP: #1817020)
    - windowManager: listen actively to windows being destroyed during WS switch
      (LP: #1812527)
    - Fix unresponsive-app dialog blocking input in other windows (LP: #1740869)
    - Fix regression on missing spread animation (LP: #1827284)
  * d/p/js-fix-invalid-access-errors.patch,
    d/p/js-ui-Choose-some-actors-to-cache-on-the-GPU.patch:
    - Refreshed
  * d/p/switchMonitor-switch-to-next-config-upon-initial-keypress.patch
    - Ensure switch display mode is cyclic (LP: #1772811)
  * debian/control:
    - Depends on mutter 3.28.4-0ubuntu18.04.1
  * d/p/st-widget-Add-missing-g_return_val_if_fail.patch:
    - st-widget: Protect from NULL obj in get_theme_node (LP: #1796606)

 -- Marco Trevisan (Treviño) <email address hidden> Fri, 10 May 2019 11:43:10 +0100

Changed in gnome-shell (Ubuntu Bionic):
status: Fix Committed → Fix Released
Revision history for this message
Łukasz Zemczak (sil2100) wrote : Update Released

The verification of the Stable Release Update for gnome-shell has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Bug Watch Updater (bug-watch-updater)
Changed in gnome-shell:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.