Crash in js::gc::TenuringTracer::traverse(JS::Value*)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:146.0-3.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-02-19
Last occurrence
2026-02-19
Unique reports
1
Quality
-104

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:146.0-3.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TenuringTracer::traverse(JS::Value*)
/usr/lib64/firefox/libxul.so 0x30c1b98
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
2
js::Nursery::doCollection(js::gc::AutoGCSession&, JS::GCOptions, JS::GCReason) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x30bf12c
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x362dd0e
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x362da0f
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
5
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x362d8fe
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
6
void* js::gc::CellAllocator::RetryNurseryAlloc<(js::AllowGC)1>(JSContext*, JS::TraceKind, js::gc::AllocKind, unsigned long, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x362d6f7
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
7
js::NewDenseFullyAllocatedArray(JSContext*, unsigned int, js::NewObjectKind, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x3006a9b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
8
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2fc0eda
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
9
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2fbdb4b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
10
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2fcd03b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
11
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x302562a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
12
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x30252a9
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
13
anonymous function
/usr/lib64/firefox/libxul.so 0x3bd1876fc75 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x3bd18891039 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x3bd1876f3dd -
16
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3025e8c
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
17
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2fbeb15
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
18
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2fbdb4b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
19
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2fcd03b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
20
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x302562a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
21
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x30252a9
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
22
anonymous function
/usr/lib64/firefox/libxul.so 0x3bd1876fc75 -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x3bd18891039 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x3bd1876f3dd -
25
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3025e8c
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
26
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2fbdb77
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
27
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2fcd03b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
28
js::BoundFunctionObject::call(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x308c095
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
29
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2fcd189
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
30
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2fdec65
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
31
PromiseReactionJob(JSContext*, JS::Handle<JSObject*>) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31061fe
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
32
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3105fa9
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
33
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2fccf15
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
34
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x30fcd45
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
35
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x30fb2f6
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
36
mozilla::dom::ScriptLoader::ProcessRequest(JS::loader::ScriptLoadRequest*)
/usr/lib64/firefox/libxul.so 0x23a4b48
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
37
mozilla::dom::ScriptLoader::ProcessPendingRequests(bool) [clone .cold]
/usr/lib64/firefox/libxul.so 0x3bcc63
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
38
mozilla::dom::(anonymous namespace)::OffThreadCompilationCompleteTask::Run()
/usr/lib64/firefox/libxul.so 0x23a5094
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
39
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x310152c
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
40
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x310051a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
41
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2eba3c0
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
42
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x31b1181
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
43
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34f1ab3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
44
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b147d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
45
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b0eb4
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
46
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc51226
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
47
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34f1ab3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
48
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29ff3ce
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
49
main
/usr/lib64/firefox/firefox 0x40283
Build id: 7faaa58a26584c4a148345e3cd5e9eec958b6754 		-
50
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 8569a90e9859345324d8d0374c16836929c0761a 		-
51
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 8569a90e9859345324d8d0374c16836929c0761a 		-
52
_start
/usr/lib64/firefox/firefox 0x3da15
Build id: 7faaa58a26584c4a148345e3cd5e9eec958b6754 		-