Crash in void js::GCMarker::markAndTraverse<1u, js::PropMap>(js::PropMap*)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:137.0-2.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-02-12
Last occurrence
2026-02-12
Unique reports
1
Quality
-156

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Operating system Count
Fedora 40 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:137.0-2.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
void js::GCMarker::markAndTraverse<1u, js::PropMap>(js::PropMap*)
/usr/lib64/firefox/libxul.so 0x2fc3fef
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
2
js::gc::PerformIncrementalReadBarrier(js::gc::TenuredCell*)
/usr/lib64/firefox/libxul.so 0x36ff9e8
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
3
WarpScriptOracle::maybeInlineIC(mozilla::LinkedList<js::jit::WarpOpSnapshot>&, js::BytecodeLocation)
/usr/lib64/firefox/libxul.so 0x2d171b9
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
4
WarpScriptOracle::createScriptSnapshot() [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x2d14f48
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
5
js::jit::IonCompile(JSContext*, JS::Handle<JSScript*>, unsigned char*)
/usr/lib64/firefox/libxul.so 0x324c17d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
6
js::jit::Compile(JSContext*, JS::Handle<JSScript*>, js::jit::BaselineFrame*, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x324bb3c
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
7
IonCompileScriptForBaseline(JSContext*, js::jit::BaselineFrame*, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2d14a13
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
8
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc544fab -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcdd92c3 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcdf06c7 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc86f23d -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcdd31f4 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcd5377a -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dd416c9d -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dd2a0840 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc5414e6 -
17
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
18
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b902f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
19
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
20
js::PromiseObject::create(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, bool)
/usr/lib64/firefox/libxul.so 0x2be575d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
21
PromiseConstructor(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3140390
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
22
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcef3ff1 -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc799048 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcdd269c -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc86f23d -
26
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcdb7bbb -
27
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcd5377a -
28
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dd416c9d -
29
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dd2a0840 -
30
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc5414e6 -
31
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
32
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b902f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
33
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
34
js::PromiseObject::create(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, bool)
/usr/lib64/firefox/libxul.so 0x2be575d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
35
PromiseConstructor(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3140390
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
36
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcef3ff1 -
37
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc799048 -
38
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcdb75db -
39
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc86f23d -
40
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcdb7324 -
41
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc86f23d -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dd046baf -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dcd5377a -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dd416c9d -
45
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dce184c5 -
46
anonymous function
/usr/lib64/firefox/libxul.so 0x2d24dc5414e6 -
47
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
48
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b90389
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
49
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
50
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2bb3f83
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
51
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2ceb633
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
52
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba134a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
53
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2ce2fbc
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
54
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x2ce1725
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
55
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2d86793
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
56
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2d85c46
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
57
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2d74f74
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
58
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x28bae1
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
59
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x32cc1ac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
60
mozilla::dom::IDBTransaction::FireCompleteOrAbortEvents(nsresult)
/usr/lib64/firefox/libxul.so 0x32dc1a2
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
61
mozilla::dom::indexedDB::PBackgroundIDBTransactionChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x32ec5dd
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
62
mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x32c7cfa
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
63
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x2cd8975
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
64
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2cd83e7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
65
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ce6879
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
66
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ce6142
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
67
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2a7cd70
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
68
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2db3802
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
69
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
70
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x331843d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
71
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x33176c0
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
72
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb04615
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
73
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
74
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x22d46f3
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
75
main
/usr/lib64/firefox/firefox 0x49517
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-
76
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
77
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
78
_start
/usr/lib64/firefox/firefox 0x464a5
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-