Crash in js::frontend::InitialStencilAndDelazifications::Release()

Similar reports
Problem #756579
Component
firefox
Last affected version
0:140.0.4-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-07-03
Last occurrence
2025-08-07
Unique reports
2
Quality
-60

Statistics

Operating system Unique / Total count
Fedora 42 2 / 3
Operating system Count
Fedora 42 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:140.0.4-1.fc42 2
 0:140.0-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::frontend::InitialStencilAndDelazifications::Release()
/usr/lib64/firefox/libxul.so 0x2df1058
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
2
js::ScriptSourceObject::clearStencils() [clone .cold]
/usr/lib64/firefox/libxul.so 0x745e73
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
3
bool FinalizeTypedArenas<JSObject, (js::gc::FinalizeKind)1, (js::gc::ReleaseEmpty)0>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x32d4738
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
4
js::gc::GCRuntime::finalizeAllocKind(JS::GCContext*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x38ae94d
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
5
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x38ae6c6
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
6
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x38a086d
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
7
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x38ae44a
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
8
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x38a086d
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
9
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x38a062c
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
10
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x32bcab0
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
11
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x32bac0c
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
12
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x38936d5
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
13
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3a26e55
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
14
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x35b6513
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
15
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2fff72d
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
16
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x35a8a6b
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
17
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2f6c6df
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2f6bad2
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
19
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2ccd2d7
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
20
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3054a51
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3387793
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
22
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x362255d
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
23
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3621c45
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
24
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc3db3e
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
25
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3387793
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
26
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2822bf1
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
27
main
/usr/lib64/firefox/firefox 0x3e997
Build id: a0a7245b7061891bb338531538c1f24bee477655 		-
28
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: c4b06a608071b2c9852fae62ca3b69cdc22cd022 		-
29
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: c4b06a608071b2c9852fae62ca3b69cdc22cd022 		-
30
_start
/usr/lib64/firefox/firefox 0x3b9b5
Build id: a0a7245b7061891bb338531538c1f24bee477655 		-