Crash in js::GenericTracerImpl<js::gc::MarkingTracerT<4u> >::onObjectEdge(JSObject**, char const*)

Similar reports
Problem #698350
Component
firefox
Last affected version
0:132.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-11-03
Last occurrence
2024-11-26
Unique reports
1
Quality
-60

Statistics

Operating system Unique / Total count
Fedora 41 1 / 4
Operating system Count
Fedora 41 4
Architecture Count
x86_64 4
Related packages Count
firefox 4
 0:132.0-2.fc41 4

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::GenericTracerImpl<js::gc::MarkingTracerT<4u> >::onObjectEdge(JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x2bcbc74
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
2
js::ProxyObject::trace(JSTracer*, JSObject*)
/usr/lib64/firefox/libxul.so 0x292d8cf
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
3
js::GCMarker::markUntilBudgetExhausted(JS::SliceBudget&, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2928ef7
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
4
js::gc::IncrementalProgress js::gc::GCRuntime::markWeakReferences<js::gc::SweepGroupZonesIter>(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x292ed81
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
5
js::gc::GCRuntime::endMarkingSweepGroup(JS::GCContext*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2ea4e5f
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
6
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2e94772
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
7
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2e93960
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
8
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x2914ff7
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
9
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e70f18
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
10
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e700f6
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
11
js::gc::GCRuntime::gc(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e6ff71
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
12
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0x3c61d7
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
13
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsShrinking)
/usr/lib64/firefox/libxul.so 0xeed6df
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
14
nsJSContext::DoLowMemoryGC()
/usr/lib64/firefox/libxul.so 0xeed7d8
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
15
mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ThenValue<nsJSContext::LowMemoryGC()::{lambda(bool)#1}, nsJSContext::LowMemoryGC()::{lambda(mozilla::ipc::ResponseRejectReason)#1}>::DoResolveOrRejectInternal(mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ResolveOrRejectValue&) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0xeed82a
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
16
mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ThenValueBase::ResolveOrRejectRunnable::Run()
/usr/lib64/firefox/libxul.so 0x3162000
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
17
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x27921c4
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2791a62
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
19
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x278eb69
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
20
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c526b2
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2be1838
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
22
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c51f9d
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
23
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c51e34
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
24
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c512fb
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
25
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2be1838
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
26
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2bd41ca
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a 		-
27
main
/usr/lib64/firefox/firefox 0x3a927
Build id: 288affcd320e8ee1b438e9a66bcfb6f6984cb5f3 		-
28
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: ce61d1ab52a20e6d27ea2097686421c97a679572 		-
29
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: ce61d1ab52a20e6d27ea2097686421c97a679572 		-
30
_start
/usr/lib64/firefox/firefox 0x37ad5
Build id: 288affcd320e8ee1b438e9a66bcfb6f6984cb5f3 		-