Crash in js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::delete_worker(js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::Node*, js::jit::JitCodeRange* const&) [clone .isra.0]

Similar reports
Problem #819243
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-10-15
Last occurrence
2026-05-19
Unique reports
1
Quality
-78

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Fedora 41 1 / 1
Operating system Count
Fedora 40 1
Fedora 41 1
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:131.0.2-1.fc40 1
 0:145.0-2.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::delete_worker(js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::Node*, js::jit::JitCodeRange* const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x510da64
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
2
js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::delete_worker(js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::Node*, js::jit::JitCodeRange* const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x510d9fd
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
3
js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::delete_worker(js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::Node*, js::jit::JitCodeRange* const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x510d939
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
4
js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::delete_worker(js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::Node*, js::jit::JitCodeRange* const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x510d939
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
5
js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::delete_worker(js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::Node*, js::jit::JitCodeRange* const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x510d939
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
6
js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::delete_worker(js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::Node*, js::jit::JitCodeRange* const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x510d939
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
7
js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::delete_worker(js::AvlTreeImpl<js::jit::JitCodeRange*, js::jit::JitCodeRange>::Node*, js::jit::JitCodeRange* const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x510d939
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
8
js::jit::JitcodeGlobalTable::traceWeak(JSRuntime*, JSTracer*)
/usr/lib64/firefox/libxul.so 0x510ef63
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
9
js::gc::GCRuntime::sweepJitDataOnMainThread(JS::GCContext*)
/usr/lib64/firefox/libxul.so 0x4e45a46
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
10
js::gc::GCRuntime::beginSweepingSweepGroup(JS::GCContext*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x4e59064
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
11
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x4e3f0ac
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
12
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x4e448d9
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
13
js::gc::GCRuntime::performSweepActions(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x4e46a0f
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
14
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x4e1129c
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
15
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x4e118e3
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
16
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x4e11b7f
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
17
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x1a3e0cd
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
18
nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x1a55767
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
19
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x189602f
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
20
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x189c5f4
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
21
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x53b54c
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
22
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x53b642
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
23
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x543d85
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
24
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x54462b
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
25
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x5446db
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
26
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x544836
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
27
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5675df
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
28
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x55940f
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
29
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xcb067a
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
30
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xc634bd
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
31
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3ca581c
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
32
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3d5bcf0
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
33
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4864151
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
34
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xc634bd
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
35
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x48649a5
Build id: 75cad7dbba4a88b8e0df3cd4f3eeed136d4960ad 		-
36
main
/usr/lib64/firefox/firefox 0xda96
Build id: bf99e0c6379140683c2f5ce9c2d765dc0b70ae63 		-
37
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
38
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
39
_start
/usr/lib64/firefox/firefox 0xdf25
Build id: bf99e0c6379140683c2f5ce9c2d765dc0b70ae63 		-