Crash in bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&)

Similar reports
Problem #751656
Component
firefox
Last affected version
0:138.0.4-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-04-29
Last occurrence
2026-06-22
Unique reports
5
Quality
-16

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 15 / 19
Fedora 41 1 / 1
Fedora 42 5 / 5
Operating system Count
Fedora 40 19
Fedora 42 5
Fedora 41 1
Architecture Count
x86_64 25
Related packages Count
firefox 25
 0:137.0-2.fc40 19
 0:138.0.4-1.fc42 5
 0:138.0.4-1.fc41 1
mozilla-ublock-origin 1
 0:1.63.2-1.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2fcdcb2
Build id: b8c783537a078c39095535b827fa8d1f67443d65
-
2
js::gc::GCRuntime::sweepBackgroundThings(js::gc::ZoneList&)
/usr/lib64/firefox/libxul.so 0x2fce2ef
Build id: b8c783537a078c39095535b827fa8d1f67443d65
-
3
js::gc::BackgroundSweepTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x359f69b
Build id: b8c783537a078c39095535b827fa8d1f67443d65
-
4
mozilla::ThreadFuncPoolThread(void*)
/usr/lib64/firefox/libxul.so 0x319f781
Build id: b8c783537a078c39095535b827fa8d1f67443d65
-
5
_pt_root
/lib64/libnspr4.so 0x2b3b7
Build id: cb406f69d439e447e318c3ef0352083c89345a72
-
6
set_alt_signal_stack_and_start(PthreadCreateParams*)
/usr/lib64/firefox/firefox 0x49cc6
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06
-
7
start_thread
/lib64/libc.so.6 0x98088
Build id: c8c3fa52aaee3f5d73b6fd862e39e9d4c010b6ba
-
8
__clone
/lib64/libc.so.6 0x11bd94
Build id: c8c3fa52aaee3f5d73b6fd862e39e9d4c010b6ba
-