Crash in CCGraphBuilder::AddNode(void*, nsCycleCollectionParticipant*)

Similar reports
Problem #657361
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-01-08
Last occurrence
2026-10-30
Unique reports
2
Quality
-74

Statistics

Operating system Unique / Total count
Fedora 41 2 / 3
Operating system Count
Fedora 41 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:145.0-2.fc41 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
CCGraphBuilder::AddNode(void*, nsCycleCollectionParticipant*)
/usr/lib64/firefox/libxul.so 0x46417a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
CCGraphBuilder::NoteChild(void*, nsCycleCollectionParticipant*, nsTString<char>&)
/usr/lib64/firefox/libxul.so 0x464e40
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
CCGraphBuilder::NoteJSChild(JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x46533e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
TraversalTracer::onChild(JS::GCCellPtr, char const*)
/usr/lib64/firefox/libxul.so 0x4330e0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
bool TraceTaggedPtrEdge<JS::Value>(JSTracer*, JS::Value*, char const*)
/usr/lib64/firefox/libxul.so 0x5620696
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
void js::gc::TraceRangeInternal<JS::Value>(JSTracer*, unsigned long, JS::Value*, char const*)
/usr/lib64/firefox/libxul.so 0x5620889
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
JSObject::traceChildren(JSTracer*)
/usr/lib64/firefox/libxul.so 0x51cafd6
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
JS::TraceChildren(JSTracer*, JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x56588fb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
mozilla::CycleCollectedJSRuntime::TraverseGCThing(mozilla::CycleCollectedJSRuntime::TraverseSelect, JS::GCCellPtr, nsCycleCollectionTraversalCallback&)
/usr/lib64/firefox/libxul.so 0x43fba3
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
mozilla::JSGCThingParticipant::TraverseNative(void*, nsCycleCollectionTraversalCallback&)
/usr/lib64/firefox/libxul.so 0x43fc1e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
CCGraphBuilder::BuildGraph(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x45c79b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
nsCycleCollector::MarkRoots(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x45c96d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
nsCycleCollector::Collect(mozilla::CCReason, ccIsManual, JS::SliceBudget&, nsICycleCollectorListener*, bool)
/usr/lib64/firefox/libxul.so 0x46fd8b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
nsCycleCollector_collectSlice(JS::SliceBudget&, mozilla::CCReason, bool)
/usr/lib64/firefox/libxul.so 0x470aa1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
nsJSContext::RunCycleCollectorSlice(mozilla::CCReason, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1b25f36
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
mozilla::CCGCScheduler::CCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1b263c5
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x4eebec
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
mozilla::TimedOut(nsITimer*, void*)
/usr/lib64/firefox/libxul.so 0x4eed31
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
nsTimerImpl::Fire(unsigned long)
/usr/lib64/firefox/libxul.so 0x51fc98
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
nsTimerEvent::Run()
/usr/lib64/firefox/libxul.so 0x520126
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f588f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f600b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
27
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
28
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
29
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
30
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
31
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
32
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
33
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
34
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
35
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
36
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
37
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-