Crash in js::GenericTracerImpl<js::gc::MarkingTracerT<2u> >::onObjectEdge(JSObject**, char const*)

Similar reports
Problem #736023
Component
firefox
Last affected version
0:136.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-11-28
Last occurrence
2025-05-29
Unique reports
1
Quality
-63

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 3 / 4
Fedora 42 1 / 1
Operating system Count
Fedora 41 4
Fedora 42 1
Architecture Count
x86_64 5
Related packages Count
firefox 5
 0:136.0.1-1.fc41 3
 0:136.0.3-1.fc42 1
 0:132.0.1-2.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::GenericTracerImpl<js::gc::MarkingTracerT<2u> >::onObjectEdge(JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x2bbebf5
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
2
js::GCMarker::markCurrentColorInParallel(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2b8ef64
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
3
js::gc::ParallelMarkTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x34998e3
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
4
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x2e16d35
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
5
js::GCParallelTask::runFromMainThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x2e409c7
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
6
js::gc::ParallelMarker::markOneColor(js::gc::MarkColor, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x34995fd
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
7
js::gc::GCRuntime::markUntilBudgetExhausted(JS::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2e5fdbc
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
8
/usr/lib64/firefox/libxul.so 0x2e64449
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
9
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2e61362
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
10
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2e61210
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
11
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x29089f6
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
12
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e3dea4
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
13
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e3d286
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
14
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x315fd51
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
15
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2fc097c
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
16
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2fc05a4
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
17
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2fc02ab
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
18
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x27926fd
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
19
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2791b80
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x278ef76
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
21
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c44852
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2bd4bc8
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
23
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c4477d
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
24
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c44614
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
25
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c439db
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
26
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2bd4bc8
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
27
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2bc760a
Build id: 560c26244d6f2af6db44f19bfbdb76a4475acd6a 		-
28
main
/usr/lib64/firefox/firefox 0x3aa07
Build id: 63ff41de35c00b4c6ca94e1b96838b43f652633d 		-
29
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: b6c381bfdcb5e08ea82c1c39cf16580181fb6cfc 		-
30
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: b6c381bfdcb5e08ea82c1c39cf16580181fb6cfc 		-
31
_start
/usr/lib64/firefox/firefox 0x37bf5
Build id: 63ff41de35c00b4c6ca94e1b96838b43f652633d 		-