Crash in JSObject::allocKindForTenure(js::Nursery const&) const

Similar reports
Problem #698197
Component
firefox
Last affected version
0:136.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-08-30
Last occurrence
2025-09-01
Unique reports
2
Quality
-54

Statistics

Operating system Unique / Total count
Fedora 42 2 / 4
Operating system Count
Fedora 42 4
Architecture Count
x86_64 4
Related packages Count
firefox 4
 0:136.0.3-1.fc42 4

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
JSObject::allocKindForTenure(js::Nursery const&) const
/usr/lib64/firefox/libxul.so 0x2a808c6
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
2
js::gc::TenuringTracer::promoteObjectSlow(JSObject*)
/usr/lib64/firefox/libxul.so 0x2a800ce
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
3
js::Nursery::doCollection(js::gc::AutoGCSession&, JS::GCOptions, JS::GCReason) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x2a7d73c
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
4
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2fbf707
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
5
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x2fbefcf
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
6
js::gc::GCRuntime::endPreparePhase(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2a9f014
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
7
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x2a9bc99
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
8
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3004f93
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
9
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x300415b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
10
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3338871
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
11
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x30ebfe8
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
12
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2fd17ac
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
13
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2fd16db
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
14
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x29170be
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
15
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x29164c8
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
16
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2914d37
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
17
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2def862
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
18
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2d7b62f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
19
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2def78d
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
20
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2def553
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
21
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2dee494
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2d7b62f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
23
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2d6bea5
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
24
main
/usr/lib64/firefox/firefox 0x3fa77
Build id: 3405c3a516529ae99d2c30e01e2a90f18eb27c3c 		-
25
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: 0a6f11930e8ccbc4fe862685a0cc984228f888c7 		-
26
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: 0a6f11930e8ccbc4fe862685a0cc984228f888c7 		-
27
_start
/usr/lib64/firefox/firefox 0x3cb55
Build id: 3405c3a516529ae99d2c30e01e2a90f18eb27c3c 		-