Crash in js::gc::TenuringTracer::traverse(JS::Value*)

Similar reports
Problem #715036
Component
firefox
Last affected version
0:147.0.1-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-09-27
Last occurrence
2026-05-23
Unique reports
10
Quality
-43

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 7 / 8
Fedora 41 4 / 4
Fedora 42 10 / 12
Operating system Count
Fedora 42 12
Fedora 40 8
Fedora 41 4
Architecture Count
x86_64 24
Related packages Count
firefox 24
 0:133.0-2.fc40 2
 0:136.0.3-1.fc42 2
 0:137.0-2.fc40 2
 0:143.0.4-1.fc42 2
 0:143.0-1.fc42 2
 0:132.0.1-1.fc40 2
 0:145.0.1-1.fc42 2
 0:130.0.1-1.fc40 2
 0:134.0.2-1.fc41 1
 0:143.0.3-1.fc42 1
 0:136.0.2-1.fc41 1
 0:132.0-2.fc41 1
 0:136.0.1-1.fc41 1
 0:147.0-1.fc42 1
 0:147.0.1-2.fc42 1
 0:138.0.4-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::traverse(JS::Value*)
/usr/lib64/firefox/libxul.so 0x28f20d2
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
2
js::Nursery::doCollection(js::gc::AutoGCSession&, JS::GCOptions, JS::GCReason) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x28f01bb
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2dfd3c9
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x2dfd131
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
5
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x2dfcfc5
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
6
mozilla::detail::RunnableFunction<nsJSContext::MaybeRunNextCollectorSlice(nsIDocShell*, JS::GCReason)::{lambda()#1}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x36dd40b
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
7
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x278cc84
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
8
/usr/lib64/firefox/libxul.so 0x278c700
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
9
/usr/lib64/firefox/libxul.so 0x278a020
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
10
/usr/lib64/firefox/libxul.so 0x2c45fd2
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
11
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2bd79b8
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
12
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c45ebd
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
13
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c45d54
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
14
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c4565b
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
15
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2bd79b8
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
16
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2bc9f48
Build id: ba83736b54bb9da9f1c70cb108808a6491f8c5c5 		-
17
main
/usr/lib64/firefox/firefox 0x56068
Build id: 0b44005ac2dfc238bad1531040e76215c18bedcc 		-
18
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
19
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
20
_start
/usr/lib64/firefox/firefox 0x53265
Build id: 0b44005ac2dfc238bad1531040e76215c18bedcc 		-