Crash in js::gc::TenuringTracer::allocTenuredString(JSString*, JS::Zone*, js::gc::AllocKind)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:120.0.1-1.fc37
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-05-05
Last occurrence
2024-05-05
Unique reports
1
Quality
-142

Statistics

Operating system Unique / Total count
Fedora 37 1 / 1
Operating system Count
Fedora 37 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:120.0.1-1.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::allocTenuredString(JSString*, JS::Zone*, js::gc::AllocKind)
/usr/lib64/firefox/libxul.so 0x26de505
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
2
js::gc::TenuringTracer::moveToTenured(JSString*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x1bad08
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x26d940f
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x2b011a9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
5
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x2b00e35
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
6
void* js::gc::CellAllocator::RetryNurseryAlloc<(js::AllowGC)1>(JS::RootingContext*, JS::TraceKind, js::gc::AllocKind, unsigned long, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x2b00c8a
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
7
js::jit::CreateThisFromIC(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2b13685
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
8
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14e0c8f8ba -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea0d6bd9 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea11313a -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea00eade -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea113151 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14e0c8d4e6 -
14
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2685e65
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
15
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x263cf40
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
16
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x264b7a9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
17
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a5689a
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
18
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2a564ed
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
19
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14e0c8de95 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea09facf -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea0d5039 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea010b8a -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea0d0273 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea00eade -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea0cf3cc -
26
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea0cee05 -
27
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea0cec66 -
28
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14e0c8d2d5 -
29
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14e0c8d4e6 -
30
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2685e65
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
31
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x263cf40
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
32
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x264b7a9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
33
js::BoundFunctionObject::call(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2ab237a
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
34
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x264ba15
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
35
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2644e5c
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
36
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x263cfab
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
37
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x264b7a9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
38
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a9861f
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
39
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2be3f33
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
40
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14e0c916cd -
41
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14ea0ce01c -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x2a14e0c8d4e6 -
43
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2685e65
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
44
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x263cfd9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
45
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x264b7a9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
46
AsyncFunctionResume(JSContext*, JS::Handle<js::AsyncFunctionGeneratorObject*>, ResumeKind, JS::Handle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x271e874
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
47
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2b9081a
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
48
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x264b8ab
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
49
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x26a573a
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
50
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x25f3adf
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
51
mozilla::dom::CallbackObject::CallSetup::~CallSetup()
/usr/lib64/firefox/libxul.so 0x26a63ac
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
52
mozilla::dom::JSActor::CallReceiveMessage(JSContext*, mozilla::dom::JSActorMessageMeta const&, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2dcc2a6
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
53
mozilla::dom::JSActorManager::ReceiveRawMessage(mozilla::dom::JSActorMessageMeta const&, mozilla::Maybe<mozilla::dom::ipc::StructuredCloneData>&&, mozilla::Maybe<mozilla::dom::ipc::StructuredCloneData>&&)
/usr/lib64/firefox/libxul.so 0x2dcbb29
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
54
mozilla::dom::PWindowGlobalChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2b2ccf5
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
55
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x29bb615
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
56
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x259a1a6
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
57
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2926b3e
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
58
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2599297
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
59
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2598a7e
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
60
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x293e3a9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
61
nsThread::ProcessNextEvent(bool, bool*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x9a66d
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
62
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2925606
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
63
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x28c0cab
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
64
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x292537d
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
65
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x292496d
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
66
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x28c0cab
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
67
XRE_InitChildProcess(int, char**, XREChildData const*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x28b11c9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
68
main
/usr/lib64/firefox/firefox 0x52f98
Build id: 24369d7658ec9e4b1d749d399e9542214dcbdaf8 		-
69
__libc_start_call_main
/lib64/libc.so.6 0x27550
Build id: 0dc6d3e329f8bf5e8c1de63c4c9d560fb9953ade 		-
70
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27609
Build id: 0dc6d3e329f8bf5e8c1de63c4c9d560fb9953ade 		-
71
_start
/usr/lib64/firefox/firefox 0x50a75
Build id: 24369d7658ec9e4b1d749d399e9542214dcbdaf8 		-