Crash in js::ReportBadValueTypeAndCrash(JS::Value const&) [clone .isra.0]

Similar reports
Problem #698189
Component
firefox
Last affected version
0:145.0.1-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-06-25
Last occurrence
2026-09-22
Unique reports
7
Quality
-52

Statistics

Operating system Unique / Total count
Fedora 42 7 / 7
Operating system Count
Fedora 42 7
Architecture Count
x86_64 7
Related packages Count
firefox 7
 0:141.0-2.fc42 2
 0:145.0.1-1.fc42 2
 0:142.0.1-1.fc42 1
 0:143.0.1-1.fc42 1
 0:139.0.4-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::ReportBadValueTypeAndCrash(JS::Value const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x285cd19
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
2
void js::gc::TraceRangeInternal<JS::Value>(JSTracer*, unsigned long, JS::Value*, char const*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x14964c
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
3
JSObject::traceChildren(JSTracer*)
/usr/lib64/firefox/libxul.so 0x32c42b7
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
4
JS::TraceChildren(JSTracer*, JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x32d074b
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
5
mozilla::CycleCollectedJSRuntime::TraverseGCThing(mozilla::CycleCollectedJSRuntime::TraverseSelect, JS::GCCellPtr, nsCycleCollectionTraversalCallback&)
/usr/lib64/firefox/libxul.so 0x32d0376
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
6
CCGraphBuilder::BuildGraph(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x32ccdb8
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
7
nsCycleCollector::MarkRoots(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x38aab18
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
8
nsCycleCollector::Collect(mozilla::CCReason, ccIsManual, JS::SliceBudget&, nsICycleCollectorListener*, bool)
/usr/lib64/firefox/libxul.so 0x32c5647
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
9
nsCycleCollector_collectSlice(JS::SliceBudget&, mozilla::CCReason, bool)
/usr/lib64/firefox/libxul.so 0x3b035d1
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
10
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureCCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>, mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&)
/usr/lib64/firefox/libxul.so 0x3aff9e9
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
11
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x35a43dc
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
12
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x35a430b
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
13
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2f4a59d
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
14
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2f498a2
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
15
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2cb071f
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
16
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3035c91
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
17
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3375e33
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
18
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x361d24d
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
19
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x361c045
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
20
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc45aac
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3375e33
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
22
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x280b992
Build id: cc15e52023ca3c91a37c6ab5296c0334f69108c8 		-
23
main
/usr/lib64/firefox/firefox 0x3df87
Build id: d24402ae2412d044bd5e7b8a04f88f8711ee0772 		-
24
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: a1dda014206b55b07f58fe8db80121b752dc3d03 		-
25
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: a1dda014206b55b07f58fe8db80121b752dc3d03 		-
26
_start
/usr/lib64/firefox/firefox 0x3af95
Build id: d24402ae2412d044bd5e7b8a04f88f8711ee0772 		-