Crash in js::GCMarker::markCurrentColorInParallel(js::gc::ParallelMarkTask*, JS::SliceBudget&)

Similar reports
Problem #756579
Component
firefox
Last affected version
0:149.0-4.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-05-10
Last occurrence
2026-05-14
Unique reports
1
Quality
-62

Statistics

Operating system Unique / Total count
Fedora 42 1 / 3
Operating system Count
Fedora 42 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:149.0-4.fc42 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::GCMarker::markCurrentColorInParallel(js::gc::ParallelMarkTask*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3578892
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
2
js::gc::ParallelMarkTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3cd71e2
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
3
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3750679
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
4
js::GCParallelTask::runFromMainThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3b7dd97
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
5
js::gc::ParallelMarker::markOneColor(js::gc::GCRuntime*, js::gc::MarkColor, JS::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x3cd6bbc
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
6
js::gc::GCRuntime::markSynchronously(JS::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x3b82de8
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
7
js::gc::GCRuntime::markGray(JS::GCContext*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3b8ad24
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
8
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3b871b7
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
9
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3b86dbc
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
10
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x34ff321
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
11
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x34fd0a3
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
12
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3b7be06
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
13
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3cca085
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
14
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3866153
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
15
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x32741ad
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
16
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x3865aeb
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
17
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x31f4ba7
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x31f400a
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
19
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2fa920e
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
20
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x32aaf32
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x36085b3
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
22
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x38c213d
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
23
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x38c1484
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
24
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc9ad88
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
25
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x36085b3
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
26
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2ab8adc
Build id: dc31372f018dbeb69d0f90f18ac2beabc4dbc176 		-
27
main
/usr/lib64/firefox/firefox 0x3e9e3
Build id: ace6c33d65b81206d0eb8a69362044f7c383d13a 		-
28
/usr/lib64/libc.so.6 (deleted) 0x3575
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1 		-
29
/usr/lib64/libc.so.6 (deleted) 0x3628
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1 		-
30
_start
/usr/lib64/firefox/firefox 0x3c1d5
Build id: ace6c33d65b81206d0eb8a69362044f7c383d13a 		-