Crash in bool FinalizeTypedArenas<JSObject, (js::gc::FinalizeKind)1, (js::gc::ReleaseEmpty)0>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&)

Similar reports
Problem #735817
Component
firefox
Last affected version
0:148.0-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-02-06
Last occurrence
2026-08-26
Unique reports
7
Quality
-54

Statistics

Operating system Unique / Total count
Fedora 42 7 / 11
Operating system Count
Fedora 42 11
Architecture Count
x86_64 11
Related packages Count
firefox 11
 0:148.0-1.fc42 10
 0:147.0.2-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
bool FinalizeTypedArenas<JSObject, (js::gc::FinalizeKind)1, (js::gc::ReleaseEmpty)0>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x34ed955
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
2
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3c3cd84
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
3
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3c30924
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
4
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3c3c8fa
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
5
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3c30924
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
6
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3c3079c
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
7
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x34c9779
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
8
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x34c76f8
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
9
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3c2b956
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
10
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3c7bed5
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
11
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x37e6763
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
12
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x321ce2d
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
13
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x37e63eb
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
14
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x31a9e2b
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
15
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x31a91da
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
16
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2f69868
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
17
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3260027
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
18
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x35ac753
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
19
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x38794ad
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
20
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3878414
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
21
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc7b43a
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x35ac753
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
23
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2a87607
Build id: 1168cd7a82b173de3fb2775ffaed300bf91afda2 		-
24
main
/usr/lib64/firefox/firefox 0x3e923
Build id: 4d2bf84dc9e6bd2daf280e31de00a2a742674477 		-
25
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1 		-
26
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1 		-
27
_start
/usr/lib64/firefox/firefox 0x3c155
Build id: 4d2bf84dc9e6bd2daf280e31de00a2a742674477 		-