Crash in js::gc::TenuringTracer::promoteString(JSString*)

Similar reports
Problem #819807
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-02-05
Last occurrence
2026-05-27
Unique reports
2
Quality
-54

Statistics

Operating system Unique / Total count
Fedora 41 2 / 2
Operating system Count
Fedora 41 2
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:145.0-2.fc41 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::promoteString(JSString*)
/usr/lib64/firefox/libxul.so 0x565ed09
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
js::gc::TenuringTracer::traverse(JS::Value*)
/usr/lib64/firefox/libxul.so 0x565fe65
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
js::gc::StoreBuffer::SlotsEdge::trace(js::gc::TenuringTracer&) const
/usr/lib64/firefox/libxul.so 0x566aacf
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::SlotsEdge>::trace(js::gc::TenuringTracer&, js::gc::StoreBuffer*)
/usr/lib64/firefox/libxul.so 0x566ad38
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
js::Nursery::traceRoots(js::gc::AutoGCSession&, js::gc::TenuringTracer&)
/usr/lib64/firefox/libxul.so 0x561dc0e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
js::Nursery::doCollection(js::gc::AutoGCSession&, JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x562b534
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x562c275
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x562c499
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x562c6aa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
mozilla::detail::RunnableFunction<nsJSContext::MaybeRunNextCollectorSlice(nsIDocShell*, JS::GCReason)::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x1b09ebd
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f588f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f61ab
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
25
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
26
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
27
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-