Crash in JS::HeapObjectWriteBarriers(JSObject**, JSObject*, JSObject*)

Similar reports
Problem #805729
Component
firefox
Last affected version
0:145.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-11-30
Last occurrence
2026-01-22
Unique reports
1
Quality
-76

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Fedora 42 1 / 4
Operating system Count
Fedora 42 4
Fedora 41 1
Architecture Count
x86_64 5
Related packages Count
firefox 5
 0:145.0-2.fc42 4
 0:145.0-2.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
JS::HeapObjectWriteBarriers(JSObject**, JSObject*, JSObject*)
/usr/lib64/firefox/libxul.so 0x5605761
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
mozilla::dom::FinalizeGlobal(JS::GCContext*, JSObject*)
/usr/lib64/firefox/libxul.so 0x26a02d4
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
mozilla::dom::Window_Binding::_finalize(JS::GCContext*, JSObject*)
/usr/lib64/firefox/libxul.so 0x2325bec
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
bool FinalizeTypedArenas<JSObject, (js::gc::FinalizeKind)1, (js::gc::ReleaseEmpty)0>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x5650976
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
js::gc::ArenaLists::foregroundFinalize(JS::GCContext*, js::gc::AllocKind, JS::SliceBudget&, js::gc::SortedArenaList&)
/usr/lib64/firefox/libxul.so 0x565b6ad
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
js::gc::GCRuntime::finalizeAllocKind(JS::GCContext*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x565b80a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x564d002
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x564ce0c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x564ceef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x564ce0c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x5653a89
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
js::gc::GCRuntime::performSweepActions(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x5655adf
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x5636fb6
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x56377ee
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x5637b60
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x1b0e48d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x1b25c97
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x194ab2f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x19520c4
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x4eebec
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x4eece2
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f5905
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f61ab
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
27
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
28
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
29
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
30
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
31
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
32
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
33
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
34
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
35
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
36
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
37
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
38
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-