Crash in js::gc::TenuringTracer::traverse(JS::Value*)

Similar reports
Problem #704362
Component
firefox
Last affected version
0:131.0.2-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-10-07
Last occurrence
2025-02-07
Unique reports
2
Quality
-66

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 2 / 6
Fedora 41 2 / 2
Operating system Count
Fedora 40 6
Fedora 41 2
Architecture Count
x86_64 8
Related packages Count
firefox 8
 0:131.0-2.fc40 5
 0:131.0-2.fc41 1
 0:131.0.2-1.fc40 1
 0:131.0.2-1.fc41 1
google-noto-sans-vf-fonts 1
 0:20240701-2.fc41 1
google-noto-serif-vf-fonts 1
 0:20240701-2.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::traverse(JS::Value*)
/usr/lib64/firefox/libxul.so 0x4de67fc
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
2
js::gc::TenuringTracer::traceObject(JSObject*) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x4de6a2f
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
3
js::gc::TenuringTracer::collectToObjectFixedPoint()
/usr/lib64/firefox/libxul.so 0x4de6b17
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
4
js::Nursery::doCollection(js::gc::AutoGCSession&, JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x4dcf306
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
5
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x4dd017e
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
6
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x4d942f9
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
7
js::gc::GCRuntime::endPreparePhase(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x4da0148
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
8
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x4da3992
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
9
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x4da40a3
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
10
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x4da433f
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
11
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x19d20ed
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
12
nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x19e9777
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
13
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x182a06f
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
14
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1830634
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
15
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x4d093c
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
16
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x4d0a32
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
17
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4d9165
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
18
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4d9a0b
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
19
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4d9acb
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
20
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4d9c16
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
21
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x4fc91f
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
22
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x4ee7af
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
23
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc4547a
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
24
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xbf827d
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
25
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3c3855c
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
26
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3cee9f0
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
27
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x47f6871
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
28
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xbf827d
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
29
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x47f70c5
Build id: f1ce9bab697aa730672a195349bccaa506784835 		-
30
main
/usr/lib64/firefox/firefox 0x2a66
Build id: 68b4e880263862ff98ad9b567de6621c8012dcdb 		-
31
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: ce61d1ab52a20e6d27ea2097686421c97a679572 		-
32
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: ce61d1ab52a20e6d27ea2097686421c97a679572 		-
33
_start
/usr/lib64/firefox/firefox 0x2ef5
Build id: 68b4e880263862ff98ad9b567de6621c8012dcdb 		-