Crash in js::gc::TenuringTracer::promoteObjectSlow(JSObject*)

Similar reports
Problem #715036
Component
firefox
Last affected version
0:140.0-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-04-28
Last occurrence
2025-07-02
Unique reports
2
Quality
-40

Statistics

Operating system Unique / Total count
Fedora 41 2 / 2
Operating system Count
Fedora 41 2
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:140.0-1.fc41 1
 0:137.0-2.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::promoteObjectSlow(JSObject*)
/usr/lib64/firefox/libxul.so 0x2cb5c5e
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
2
js::gc::TenuringTracer::traverse(JS::Value*)
/usr/lib64/firefox/libxul.so 0x2cb589a
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2cb119e
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x31d1c55
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
5
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x31d1b2e
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
6
mozilla::detail::RunnableFunction<nsJSContext::MaybeRunNextCollectorSlice(nsIDocShell*, JS::GCReason)::{lambda()#1}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x389603d
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
7
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2cfd940
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
8
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2cfd558
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
9
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2aa1d4e
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
10
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2dcd772
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
11
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x30a48fc
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
12
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x334b83d
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
13
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x334a880
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
14
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb40707
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
15
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x30a48fc
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
16
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x232b542
Build id: ce60950f9ce1afaf962f5ff5865a4b2e8d1aec71 		-
17
main
/usr/lib64/firefox/firefox 0x3f737
Build id: b6985bcef66d11f9c1095d1987004ae4d29b90ff 		-
18
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: b840d32d15506ed2f29610c7f512d9084f2d7d69 		-
19
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: b840d32d15506ed2f29610c7f512d9084f2d7d69 		-
20
_start
/usr/lib64/firefox/firefox 0x3c6f5
Build id: b6985bcef66d11f9c1095d1987004ae4d29b90ff 		-