Crash in js::gc::TenuringTracer::promoteObjectSlow(JSObject*)

Similar reports
Problem #715036
Component
firefox
Last affected version
0:148.0.2-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-11-13
Last occurrence
2026-04-04
Unique reports
4
Quality
-42

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Fedora 41 1 / 1
Fedora 42 4 / 5
Operating system Count
Fedora 42 5
Fedora 40 1
Fedora 41 1
Architecture Count
x86_64 7
Related packages Count
firefox 7
 0:136.0.3-1.fc42 2
 0:143.0.1-1.fc42 2
 0:132.0.1-1.fc41 1
 0:148.0.2-1.fc42 1
 0:133.0-2.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::promoteObjectSlow(JSObject*)
/usr/lib64/firefox/libxul.so 0x28f2f29
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
2
js::gc::TenuringTracer::traverse(JS::Value*)
/usr/lib64/firefox/libxul.so 0x28f2b76
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
3
js::Nursery::doCollection(js::gc::AutoGCSession&, JS::GCOptions, JS::GCReason) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x28f15bf
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
4
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e037ae
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
5
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x2e03511
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
6
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x2e033b5
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
7
mozilla::detail::RunnableFunction<nsJSContext::MaybeRunNextCollectorSlice(nsIDocShell*, JS::GCReason)::{lambda()#1}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x36ec3f5
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
8
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x27950ad
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
9
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2794ca0
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
10
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2792096
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
11
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c4fb12
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
12
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2bdf618
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
13
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c4fa3d
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
14
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c4f8c4
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
15
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c4ebbb
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
16
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2bdf618
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
17
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2bd205a
Build id: b54eda8f1c815b0dd5708f80982b6abf017d9778 		-
18
main
/usr/lib64/firefox/firefox 0x3ac47
Build id: d019595a3170b776c90a7328788cf995ed3700f4 		-
19
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: 948d229348b56bdcf4e0a96d5ccd8fb175f617f0 		-
20
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: 948d229348b56bdcf4e0a96d5ccd8fb175f617f0 		-
21
_start
/usr/lib64/firefox/firefox 0x37e15
Build id: d019595a3170b776c90a7328788cf995ed3700f4 		-