Crash in void js::GCMarker::markAndTraverse<2u, js::Shape>(js::Shape*)

Similar reports
Problem #698350
Component
firefox
Last affected version
0:132.0.1-1.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-01-16
Last occurrence
2025-02-27
Unique reports
2
Quality
-62

Statistics

Operating system Unique / Total count
Fedora 40 2 / 2
Operating system Count
Fedora 40 2
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:132.0.1-1.fc40 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
void js::GCMarker::markAndTraverse<2u, js::Shape>(js::Shape*)
/usr/lib64/firefox/libxul.so 0x2c0b04d
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
2
void js::GCMarker::eagerlyMarkChildren<2u>(js::Scope*)
/usr/lib64/firefox/libxul.so 0x2c0bc88
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
3
js::PrivateScriptData::trace(JSTracer*)
/usr/lib64/firefox/libxul.so 0x299db72
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
4
js::gc::ParallelMarkTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3511c6a
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
5
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x2e89169
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
6
js::GCParallelTask::runFromMainThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x2edfbed
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
7
js::gc::ParallelMarker::markOneColor(js::gc::MarkColor, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3510f3d
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
8
js::gc::GCRuntime::markUntilBudgetExhausted(JS::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2f0207c
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
9
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x2987c97
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
10
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2edbd21
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
11
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2edafc6
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
12
js::gc::GCRuntime::gc(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2edaeb1
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
13
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0x42655f
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
14
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsShrinking)
/usr/lib64/firefox/libxul.so 0xf603b5
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
15
nsJSContext::DoLowMemoryGC()
/usr/lib64/firefox/libxul.so 0xf604a6
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
16
mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ThenValue<nsJSContext::LowMemoryGC()::{lambda(bool)#1}, nsJSContext::LowMemoryGC()::{lambda(mozilla::ipc::ResponseRejectReason)#1}>::DoResolveOrRejectInternal(mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ResolveOrRejectValue&) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0xf8b466
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
17
mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ThenValueBase::ResolveOrRejectRunnable::Run()
/usr/lib64/firefox/libxul.so 0x31cdbd0
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
18
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2800f54
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
19
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x28007e2
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x27fdee8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
21
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cc1022
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c501c8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
23
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cc08fd
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
24
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cc0794
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
25
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cbfc5b
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
26
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c501c8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
27
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2c42be0
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
28
main
/usr/lib64/firefox/firefox 0x43687
Build id: 7b8736680d7e71f02ca2abb17c3551195a09a8d2 		-
29
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
30
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
31
_start
/usr/lib64/firefox/firefox 0x40815
Build id: 7b8736680d7e71f02ca2abb17c3551195a09a8d2 		-