Crash in js::GCMarker::markCurrentColorInParallel(JS::SliceBudget&)

Similar reports
Problem #698350
Component
firefox
Last affected version
0:136.0.1-1.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-12-06
Last occurrence
2026-01-12
Unique reports
8
Quality
-58

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 2 / 4
Fedora 41 8 / 19
Operating system Count
Fedora 41 19
Fedora 40 4
Architecture Count
x86_64 23
Related packages Count
firefox 23
 0:135.0-1.fc41 14
 0:133.0-2.fc41 5
 0:136.0.1-1.fc40 4
google-noto-sans-vf-fonts 7
 0:20240701-2.fc41 7

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::GCMarker::markCurrentColorInParallel(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2bb96ad
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
2
js::gc::ParallelMarkTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x34d0047
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
3
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x2e461d5
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
4
js::GCParallelTask::runFromMainThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x2e6c2b7
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
5
js::gc::ParallelMarker::markOneColor(js::gc::MarkColor, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x34cfe5d
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
6
js::gc::GCRuntime::markUntilBudgetExhausted(JS::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2e8add8
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
7
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x29297d8
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
8
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e68e83
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
9
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e68216
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
10
js::gc::GCRuntime::gc(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e68101
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
11
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0x3c2f7e
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
12
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsShrinking)
/usr/lib64/firefox/libxul.so 0xeb6799
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
13
nsJSContext::DoLowMemoryGC()
/usr/lib64/firefox/libxul.so 0xeb6892
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
14
mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ThenValue<nsJSContext::LowMemoryGC()::{lambda(bool)#1}, nsJSContext::LowMemoryGC()::{lambda(mozilla::ipc::ResponseRejectReason)#1}>::DoResolveOrRejectInternal(mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ResolveOrRejectValue&) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0xeb68e4
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
15
mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ThenValueBase::ResolveOrRejectRunnable::Run()
/usr/lib64/firefox/libxul.so 0x31967c0
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x27b2ec4
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
17
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x27b2772
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
18
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x27aff92
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
19
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c728c2
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
20
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c01d88
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
21
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c7229d
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
22
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c72134
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
23
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c7164b
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
24
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c01d88
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
25
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2bf271c
Build id: dad1a38ca80175f886ba7d6b824165e96a53892f 		-
26
main
/usr/lib64/firefox/firefox 0x426e7
Build id: 387345f71c45342b08678cbf8c62db92c726d065 		-
27
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: b6c381bfdcb5e08ea82c1c39cf16580181fb6cfc 		-
28
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: b6c381bfdcb5e08ea82c1c39cf16580181fb6cfc 		-
29
_start
/usr/lib64/firefox/firefox 0x3f755
Build id: 387345f71c45342b08678cbf8c62db92c726d065 		-