Crash in FinalizeArenas(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&) [clone .lto_priv.0]

Similar reports
Problem #701179
Component
firefox
Last affected version
0:136.0.1-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-11-28
Last occurrence
2025-12-13
Unique reports
10
Quality
-56

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 6 / 8
Fedora 41 10 / 18
Operating system Count
Fedora 41 18
Fedora 40 8
Architecture Count
x86_64 26
Related packages Count
firefox 22
 0:136.0.1-1.fc41 9
 0:133.0-2.fc41 7
 0:134.0.1-1.fc40 2
 0:135.0.1-1.fc41 2
 0:133.0.3-2.fc40 1
 0:132.0.1-1.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
FinalizeArenas(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x29aa6ca
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
2
js::gc::GCRuntime::finalizeAllocKind(JS::GCContext*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2f2f1c0
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
3
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2f2eb2e
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
4
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2f03e12
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
5
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2f2e982
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
6
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2f03e12
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
7
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2f03bec
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
8
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x29884f1
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
9
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2edbd21
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
10
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2edafc6
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
11
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31ce69b
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
12
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x304f2c2
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
13
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x304eec4
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
14
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x304edab
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
15
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x28016a4
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
16
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2800b03
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
17
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x27fdee8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
18
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cc1022
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c501c8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
20
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cc08fd
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
21
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cc0794
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
22
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cbfc5b
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c501c8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
24
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2c42be0
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
25
main
/usr/lib64/firefox/firefox 0x43687
Build id: 7b8736680d7e71f02ca2abb17c3551195a09a8d2 		-
26
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
27
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
28
_start
/usr/lib64/firefox/firefox 0x40815
Build id: 7b8736680d7e71f02ca2abb17c3551195a09a8d2 		-