Crash in TraversalTracer::onChild(JS::GCCellPtr, char const*)

Similar reports
Problem #657361
Component
firefox
Last affected version
0:147.0.4-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-03-04
Last occurrence
2026-06-08
Unique reports
1
Quality
-64

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 4 / 8
Fedora 42 1 / 1
Operating system Count
Fedora 41 8
Fedora 42 1
Architecture Count
x86_64 9
Related packages Count
firefox 9
 0:145.0-2.fc41 8
 0:147.0.4-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
TraversalTracer::onChild(JS::GCCellPtr, char const*)
/usr/lib64/firefox/libxul.so 0x4a1a70
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
2
bool TraceTaggedPtrEdge<JS::Value>(JSTracer*, JS::Value*, char const*)
/usr/lib64/firefox/libxul.so 0x595190d
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
3
void js::gc::TraceRangeInternal<JS::Value>(JSTracer*, unsigned long, JS::Value*, char const*)
/usr/lib64/firefox/libxul.so 0x5951b89
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
4
JSObject::traceChildren(JSTracer*)
/usr/lib64/firefox/libxul.so 0x54d6183
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
5
JS::TraceChildren(JSTracer*, JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x598cceb
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
6
mozilla::CycleCollectedJSRuntime::TraverseGCThing(mozilla::CycleCollectedJSRuntime::TraverseSelect, JS::GCCellPtr, nsCycleCollectionTraversalCallback&)
/usr/lib64/firefox/libxul.so 0x4b2277
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
7
mozilla::JSGCThingParticipant::TraverseNative(void*, nsCycleCollectionTraversalCallback&)
/usr/lib64/firefox/libxul.so 0x4b22fe
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
8
CCGraphBuilder::BuildGraph(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x4cf103
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
9
nsCycleCollector::MarkRoots(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x4cf2d2
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
10
nsCycleCollector::Collect(mozilla::CCReason, ccIsManual, JS::SliceBudget&, nsICycleCollectorListener*, bool)
/usr/lib64/firefox/libxul.so 0x4e24ae
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
11
nsCycleCollector_collectSlice(JS::SliceBudget&, mozilla::CCReason, bool)
/usr/lib64/firefox/libxul.so 0x4e31b7
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
12
nsJSContext::RunCycleCollectorSlice(mozilla::CCReason, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1c743f1
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
13
mozilla::CCGCScheduler::CCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1c74885
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
14
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x56641f
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
15
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x566527
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x572c95
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
17
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x57333b
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x5733fd
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
19
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x573516
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5952be
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
21
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x5956a1
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
22
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xdca21a
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xd78dd4
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
24
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x452629c
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
25
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x462cbfb
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
26
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x52d5cc1
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
27
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xd78dd4
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
28
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x52d6850
Build id: 4f0821258cda68c96f5239b1f2c7454bd537c784
-
29
main
/usr/lib64/firefox/firefox 0x2014
Build id: d67d0e86647dcb1b06bcbf05f31636fa59728497
-
30
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1
-
31
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1
-
32
_start
/usr/lib64/firefox/firefox 0x2625
Build id: d67d0e86647dcb1b06bcbf05f31636fa59728497
-