Crash in js::gc::IncrementalProgress js::gc::GCRuntime::markWeakReferences<js::gc::SweepGroupZonesIter>(JS::SliceBudget&) [clone .cold]

Similar reports
Problem #756579
Component
firefox
Last affected version
0:140.0-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-07-12
Last occurrence
2025-09-06
Unique reports
3
Quality
-48

Statistics

Operating system Unique / Total count
Fedora 41 3 / 5
Operating system Count
Fedora 41 5
Architecture Count
x86_64 5
Related packages Count
firefox 5
 0:140.0-1.fc41 5

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::IncrementalProgress js::gc::GCRuntime::markWeakReferences<js::gc::SweepGroupZonesIter>(JS::SliceBudget&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x5bae3d
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
2
js::gc::GCRuntime::endMarkingSweepGroup(JS::GCContext*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3736654
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
3
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3732e2d
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
4
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3732ccc
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
5
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x3154c5c
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
6
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3153864
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
7
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3727deb
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
8
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x38bd451
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
9
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3449c45
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
10
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x3448b6d
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
11
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2e57aaa
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
12
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2e56d70
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
13
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2bd5d08
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
14
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2f2f622
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
15
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x320de9c
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
16
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x34b417d
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
17
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x34b1380
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
18
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb7b4d5
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x320de9c
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
20
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x23b09e5
Build id: d7002d4dfb8eea1dce13ac022026862d70402dcb 		-
21
main
/usr/lib64/firefox/firefox 0x3f567
Build id: 6651e0a13d0b96c36ef64e3786e8f74759b0381b 		-
22
__libc_start_call_main
/lib64/libc.so.6 0x3488
Build id: 8d0812d9e0a232d8c2f08880afc3718f055805e6 		-
23
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x354b
Build id: 8d0812d9e0a232d8c2f08880afc3718f055805e6 		-
24
_start
/usr/lib64/firefox/firefox 0x3c5d5
Build id: 6651e0a13d0b96c36ef64e3786e8f74759b0381b 		-