Crash in bool js::GCMarker::mark<JSString>(JSString*)

Similar reports
Problem #824633
Component
firefox
Last affected version
0:100.0.2-2.fc34
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-04-15
Last occurrence
2026-06-08
Unique reports
1
Quality
-16

Graphs

Statistics

Operating system Unique / Total count
Fedora 34 24 / 24
Fedora 36 1 / 1
Operating system Count
Fedora 34 24
Fedora 36 1
Architecture Count
x86_64 25
Related packages Count
firefox 25
 0:100.0.2-2.fc34 24
 0:100.0-4.fc36 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
bool js::GCMarker::mark<JSString>(JSString*)
/usr/lib64/firefox/libxul.so 0x3fa4a70
Build id: 2270a4b70a993df163fd8662e0536868a3c04c4c 		-
2
js::GCMarker::eagerlyMarkChildren(JSRope*)
/usr/lib64/firefox/libxul.so 0x3fa8717
Build id: 2270a4b70a993df163fd8662e0536868a3c04c4c 		-
3
js::GCMarker::traceBarrieredCells(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3fa5221
Build id: 2270a4b70a993df163fd8662e0536868a3c04c4c 		-
4
js::gc::BarrierTracer::handleBufferFull(JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x2b21609
Build id: 2270a4b70a993df163fd8662e0536868a3c04c4c 		-
5
JSLinearString* JSRope::flattenInternal<(JSRope::UsingBarrier)1, char16_t>(JSRope*)
/usr/lib64/firefox/libxul.so 0x3e9ecd5
Build id: 2270a4b70a993df163fd8662e0536868a3c04c4c 		-
6
JSRope::flatten(JSContext*)
/usr/lib64/firefox/libxul.so 0x2e8d3d6
Build id: 2270a4b70a993df163fd8662e0536868a3c04c4c 		-
7
js::jit::CharCodeAt(JSContext*, JS::Handle<JSString*>, int, unsigned int*)
/usr/lib64/firefox/libxul.so 0x401bf12
Build id: 2270a4b70a993df163fd8662e0536868a3c04c4c 		-
8
anonymous function
/usr/lib64/firefox/libxul.so 0x309f859da348 -