Crash in js::GenericTracerImpl<js::gc::MarkingTracerT<2u> >::onObjectEdge(JSObject**, char const*)

Similar reports
Problem #736023
Component
firefox
Last affected version
0:137.0-2.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-09-20
Last occurrence
2025-10-03
Unique reports
3
Quality
-52

Statistics

Operating system Unique / Total count
Fedora 40 3 / 3
Operating system Count
Fedora 40 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:137.0-2.fc40 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::GenericTracerImpl<js::gc::MarkingTracerT<2u> >::onObjectEdge(JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x3055c05
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
2
js::gc::ParallelMarkTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x36f9b6d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
3
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x31a1179
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
4
js::GCParallelTask::runFromMainThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x35854b7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
5
js::gc::ParallelMarker::markOneColor(js::gc::MarkColor, JS::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x36f8938
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
6
js::gc::GCRuntime::markUntilBudgetExhausted(JS::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x358d160
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
7
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x2fb97f2
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
8
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x358391c
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
9
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3582e3b
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
10
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x36ef65b
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
11
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x32a5bfb
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
12
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x32a3844
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
13
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ce6f7a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
14
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ce6498
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
15
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2a7cd70
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
16
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2db3802
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
17
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
18
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x331843d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
19
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x33176c0
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
20
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb04615
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
22
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x22d46f3
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
23
main
/usr/lib64/firefox/firefox 0x49517
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-
24
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
25
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
26
_start
/usr/lib64/firefox/firefox 0x464a5
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-