Crash in js::GCMarker::eagerlyMarkChildren(JSString*)

Similar reports
Problem #824421
Component
firefox
Last affected version
0:107.0-4.fc36
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-04-18
Last occurrence
2026-05-14
Unique reports
2
Quality
-164

Graphs

Statistics

Operating system Unique / Total count
Fedora 35 28 / 30
Fedora 36 2 / 2
Fedora 37 2 / 2
Operating system Count
Fedora 35 30
Fedora 36 2
Fedora 37 2
Architecture Count
x86_64 34
Related packages Count
firefox 34
 0:107.0-4.fc35 30
 0:107.0-4.fc36 2
 0:106.0.1-1.fc37 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::GCMarker::eagerlyMarkChildren(JSString*)
/usr/lib64/firefox/libxul.so 0x5163ba4
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
2
js::GCMarker::traceBarrieredCells(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x5165e77
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
3
js::gc::BarrierTracer::performBarrier(JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x516601e
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
4
JSLinearString* JSRope::flattenInternal<(JSRope::UsingBarrier)1, char16_t>(JSRope*)
/usr/lib64/firefox/libxul.so 0x4ea6824
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
5
JSRope::flatten(JSContext*)
/usr/lib64/firefox/libxul.so 0x4ea7f6a
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
6
js::jit::CharCodeAt(JSContext*, JS::Handle<JSString*>, int, unsigned int*)
/usr/lib64/firefox/libxul.so 0x5210d7b
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
7
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099e2d9 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a101cceb -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a09cfa3b -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a09a647d -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a09cfa3b -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a09a6389 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099c2d5 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a09cd02e -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a09a6389 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099c4ee -
17
js::jit::EnterBaselineInterpreterAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*)
/usr/lib64/firefox/libxul.so 0x51cbb7a
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
18
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x557f974
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
19
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x557fe3b
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
20
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580285
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
21
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580720
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
22
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4e866bc
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
23
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x520ed54
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
24
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099f961 -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099c2d5 -
26
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099c4ee -
27
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x53b59d4
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
28
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x557fd49
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
29
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580285
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
30
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x51c9d28
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
31
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099eda9 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a09a6389 -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099c4ee -
34
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x53b59d4
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
35
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x557fd49
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
36
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580285
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
37
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580720
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
38
js::PromiseObject::create(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, bool)
/usr/lib64/firefox/libxul.so 0x4e5da0f
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
39
PromiseConstructor(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4e5de44
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
40
InternalConstruct(JSContext*, js::AnyConstructArgs const&, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5581412
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
41
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x51c9bb6
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
42
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099eda9 -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a09a66a9 -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099c4ee -
45
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x53b59d4
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
46
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x557b80c
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
47
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x557fe3b
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
48
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580285
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
49
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580720
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
50
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4e866bc
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
51
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x520ed54
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
52
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099f961 -
53
anonymous function
/usr/lib64/firefox/libxul.so 0x1e21a099c4ee -
54
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x53b59d4
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
55
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x557b80c
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
56
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x557fde2
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
57
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580285
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
58
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580720
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
59
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4e225b6
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
60
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4e5affd
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
61
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x55803e1
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
62
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5580720
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
63
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4d3dfe3
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
64
mozilla::dom::PromiseJobCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1f713ba
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
65
mozilla::dom::PromiseJobCallback::Call(mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*)
/usr/lib64/firefox/libxul.so 0xbe0084
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
66
mozilla::PromiseJobRunnable::Run(mozilla::AutoSlowOperation&)
/usr/lib64/firefox/libxul.so 0xbe0201
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
67
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0xbecbe9
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
68
mozilla::CycleCollectedJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0xbed26f
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
69
XPCJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0x13f1b77
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
70
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xc9f08d
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
71
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc8b39f
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
72
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x131db6a
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
73
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12db612
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
74
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x378b2fc
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
75
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4c11b86
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
76
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12db612
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
77
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4c1202a
Build id: 401f741cfced74f602c75be96b8ce5b020192e37 		-
78
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x1065a
Build id: 93e3d2e4d4128b1eb19e5317322cd756c5195d91 		-
79
main
/usr/lib64/firefox/firefox 0xfd2b
Build id: 93e3d2e4d4128b1eb19e5317322cd756c5195d91 		-
80
__libc_start_call_main
/lib64/libc.so.6 0x29510
Build id: 85c438f4ff93e21675ff174371c9c583dca00b2c 		-
81
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x295c9
Build id: 85c438f4ff93e21675ff174371c9c583dca00b2c 		-
82
_start
/usr/lib64/firefox/firefox 0x10095
Build id: 93e3d2e4d4128b1eb19e5317322cd756c5195d91 		-