Crash in js::GCMarker::eagerlyMarkChildren(JSString*)

Similar reports
Problem #824421
Component
firefox
Last affected version
0:107.0-4.fc36
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-04-15
Last occurrence
2026-05-15
Unique reports
1
Quality
-154

Graphs

Statistics

Operating system Unique / Total count
Fedora 35 12 / 12
Fedora 36 1 / 1
Operating system Count
Fedora 35 12
Fedora 36 1
Architecture Count
x86_64 13
Related packages Count
firefox 13
 0:107.0-4.fc35 12
 0:107.0-4.fc36 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::GCMarker::eagerlyMarkChildren(JSString*)
/usr/lib64/firefox/libxul.so 0x519a016
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
2
js::GCMarker::traceBarrieredCells(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x519d397
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
3
js::gc::BarrierTracer::performBarrier(JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x519d53e
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
4
JSLinearString* JSRope::flattenInternal<(JSRope::UsingBarrier)1, char16_t>(JSRope*)
/usr/lib64/firefox/libxul.so 0x4ed5232
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
5
JSRope::flatten(JSContext*)
/usr/lib64/firefox/libxul.so 0x4ed671a
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
6
js::jit::CharCodeAt(JSContext*, JS::Handle<JSString*>, int, unsigned int*)
/usr/lib64/firefox/libxul.so 0x524654b
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
7
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ee2d9 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a4970c887 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a496f0f7b -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a4960f9db -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495f647d -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a4960f9db -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495f6389 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ec2d5 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ec4ee -
16
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x53ed8ce
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
17
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55b8bdc
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
18
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b910c
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
19
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x51ff7b7
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
20
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495eeda9 -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495f6389 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ec4ee -
23
js::jit::EnterBaselineInterpreterAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*)
/usr/lib64/firefox/libxul.so 0x52015d3
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
24
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55b84e3
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
25
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55b8bf9
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
26
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b910c
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
27
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b9590
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
28
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4eb449b
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
29
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x52444e4
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
30
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ef961 -
31
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ec2d5 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ec4ee -
33
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x53ed8ce
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
34
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55ad63e
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
35
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55b8bf9
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
36
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b910c
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
37
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b9590
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
38
js::PromiseObject::create(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, bool)
/usr/lib64/firefox/libxul.so 0x4e766e5
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
39
PromiseConstructor(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4e76c51
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
40
InternalConstruct(JSContext*, js::AnyConstructArgs const&, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55ba2c2
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
41
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55acfb9
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
42
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55b8bf9
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
43
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b910c
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
44
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b9590
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
45
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4eb449b
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
46
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x52444e4
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
47
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ef961 -
48
anonymous function
/usr/lib64/firefox/libxul.so 0x3c6a495ec4ee -
49
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x53ed8ce
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
50
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55ad63e
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
51
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x55b8bf9
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
52
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b910c
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
53
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b9590
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
54
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4e4ea66
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
55
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4e7f7fd
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
56
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b9222
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
57
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55b9590
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
58
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4d68589
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
59
mozilla::dom::PromiseJobCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1fa0c4a
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
60
mozilla::dom::PromiseJobCallback::Call(mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*)
/usr/lib64/firefox/libxul.so 0xbec188
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
61
mozilla::PromiseJobRunnable::Run(mozilla::AutoSlowOperation&)
/usr/lib64/firefox/libxul.so 0xbec31a
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
62
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0xbfd7b9
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
63
mozilla::CycleCollectedJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0xbfdd2f
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
64
XPCJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0x1408498
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
65
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xcadc88
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
66
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc9b3cf
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
67
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x1331eba
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
68
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12edaa9
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
69
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b0edc
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
70
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4c3b417
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
71
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12edaa9
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
72
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4c3b7aa
Build id: da2f877efda9cb9babc49f5180442629259fe6cd 		-
73
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0xfb2b
Build id: 7b5f292723f0ab5f45a9e544c3495518182abf46 		-
74
main
/usr/lib64/firefox/firefox 0xf191
Build id: 7b5f292723f0ab5f45a9e544c3495518182abf46 		-
75
__libc_start_call_main
/lib64/libc.so.6 0x3feb0
Build id: 1a817dfb16572d718ba9d914a76b5bd35cbea55c 		-
76
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3ff60
Build id: 1a817dfb16572d718ba9d914a76b5bd35cbea55c 		-
77
_start
/usr/lib64/firefox/firefox 0xf505
Build id: 7b5f292723f0ab5f45a9e544c3495518182abf46 		-