Crash in RedBlackTree<arena_chunk_map_t, ArenaAvailTreeTrait>::Remove(RedBlackTree<arena_chunk_map_t, ArenaAvailTreeTrait>::TreeNode)

Similar reports
Problem #702773
Component
firefox
Last affected version
0:131.0.2-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-11-03
Last occurrence
2024-11-03
Unique reports
1
Quality
-34

Statistics

Operating system Unique / Total count
Fedora 41 1 / 2
Operating system Count
Fedora 41 2
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:131.0.2-1.fc41 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
RedBlackTree<arena_chunk_map_t, ArenaAvailTreeTrait>::Remove(RedBlackTree<arena_chunk_map_t, ArenaAvailTreeTrait>::TreeNode)
/usr/lib64/firefox/firefox 0xc582
Build id: 670a10eebe2b95c4f595989970d3afbd4e0a8d92 		-
2
arena_t::DallocRun(arena_run_t*, bool)
/usr/lib64/firefox/firefox 0xe552
Build id: 670a10eebe2b95c4f595989970d3afbd4e0a8d92 		-
3
arena_dalloc(void*, unsigned long, arena_t*)
/usr/lib64/firefox/firefox 0xf7aa
Build id: 670a10eebe2b95c4f595989970d3afbd4e0a8d92 		-
4
bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x4dcf3a7
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
5
js::gc::GCRuntime::backgroundFinalize(JS::GCContext*, JS::Zone*, js::gc::AllocKind, js::gc::Arena**)
/usr/lib64/firefox/libxul.so 0x4ddbe9e
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
6
js::gc::GCRuntime::sweepBackgroundThings(js::gc::ZoneList&) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x4ddc01e
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
7
js::gc::BackgroundSweepTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x4ddc21b
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
8
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x4da77f8
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
9
js::GCParallelTask::runHelperThreadTask(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x4da7bfa
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
10
js::GlobalHelperThreadState::runTaskLocked(JS::HelperThreadTask*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x49826ae
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
11
JS::RunHelperThreadTask(JS::HelperThreadTask*)
/usr/lib64/firefox/libxul.so 0x498741e
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
12
HelperThreadTaskHandler::Run()
/usr/lib64/firefox/libxul.so 0xcf2831
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
13
mozilla::TaskController::RunPoolThread(mozilla::PoolThread*)
/usr/lib64/firefox/libxul.so 0x4d43cd
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
14
_pt_root
/lib64/libnspr4.so 0x233b7
Build id: d279889a5096a86610a7a5f8fe7139fa103e7292 		-
15
set_alt_signal_stack_and_start(PthreadCreateParams*)
/usr/lib64/firefox/firefox 0x154f5
Build id: 670a10eebe2b95c4f595989970d3afbd4e0a8d92 		-
16
start_thread
/lib64/libc.so.6 0x70797
Build id: ce61d1ab52a20e6d27ea2097686421c97a679572 		-
17
__clone
/lib64/libc.so.6 0xf4594
Build id: ce61d1ab52a20e6d27ea2097686421c97a679572 		-