Crash in js::GenericTracerImpl<js::gc::MarkingTracerT<2u> >::onStringEdge(JSString**, char const*)

Similar reports
Problem #739580
Component
firefox
Last affected version
0:141.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-05-30
Last occurrence
2026-01-13
Unique reports
4
Quality
-56

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 2 / 2
Fedora 42 4 / 5
Operating system Count
Fedora 42 5
Fedora 41 2
Architecture Count
x86_64 7
Related packages Count
firefox 7
 0:138.0.4-1.fc42 4
 0:141.0-2.fc41 1
 0:137.0-2.fc41 1
 0:141.0.3-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::GenericTracerImpl<js::gc::MarkingTracerT<2u> >::onStringEdge(JSString**, char const*)
/usr/lib64/firefox/libxul.so 0x32881fc
Build id: daac599996733d190da69ea5130c1455e033e935 		-
2
js::PrivateScriptData::trace(JSTracer*)
/usr/lib64/firefox/libxul.so 0x31e44a3
Build id: daac599996733d190da69ea5130c1455e033e935 		-
3
js::gc::ParallelMarkTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3941f0e
Build id: daac599996733d190da69ea5130c1455e033e935 		-
4
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x33cfdd9
Build id: daac599996733d190da69ea5130c1455e033e935 		-
5
js::GCParallelTask::runFromMainThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x379ee97
Build id: daac599996733d190da69ea5130c1455e033e935 		-
6
js::gc::ParallelMarker::markOneColor(js::gc::MarkColor, JS::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x3941047
Build id: daac599996733d190da69ea5130c1455e033e935 		-
7
js::gc::GCRuntime::markUntilBudgetExhausted(JS::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x37a4b6c
Build id: daac599996733d190da69ea5130c1455e033e935 		-
8
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x31d4b1e
Build id: daac599996733d190da69ea5130c1455e033e935 		-
9
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x379c72e
Build id: daac599996733d190da69ea5130c1455e033e935 		-
10
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x379bbf5
Build id: daac599996733d190da69ea5130c1455e033e935 		-
11
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x393c5a5
Build id: daac599996733d190da69ea5130c1455e033e935 		-
12
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x34cef33
Build id: daac599996733d190da69ea5130c1455e033e935 		-
13
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2f4dec4
Build id: daac599996733d190da69ea5130c1455e033e935 		-
14
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x34c072b
Build id: daac599996733d190da69ea5130c1455e033e935 		-
15
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ec7d11
Build id: daac599996733d190da69ea5130c1455e033e935 		-
16
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ec70d2
Build id: daac599996733d190da69ea5130c1455e033e935 		-
17
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2c37fd7
Build id: daac599996733d190da69ea5130c1455e033e935 		-
18
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2fa1a31
Build id: daac599996733d190da69ea5130c1455e033e935 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x32a2f23
Build id: daac599996733d190da69ea5130c1455e033e935 		-
20
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x354035d
Build id: daac599996733d190da69ea5130c1455e033e935 		-
21
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x353fb05
Build id: daac599996733d190da69ea5130c1455e033e935 		-
22
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc12ebc
Build id: daac599996733d190da69ea5130c1455e033e935 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x32a2f23
Build id: daac599996733d190da69ea5130c1455e033e935 		-
24
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x27b5765
Build id: daac599996733d190da69ea5130c1455e033e935 		-
25
main
/usr/lib64/firefox/firefox 0x3e1f7
Build id: 0bf89a74f699ff3255d3677536b8ae9e150be7b4 		-
26
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
27
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
28
_start
/usr/lib64/firefox/firefox 0x3b225
Build id: 0bf89a74f699ff3255d3677536b8ae9e150be7b4 		-