Crash in js::GCMarker::eagerlyMarkChildren(JSString*)

Similar reports
Problem #824421
Component
firefox
Last affected version
0:102.15.0-1.el7.centos
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-06-04
Last occurrence
2026-09-09
Unique reports
2
Quality
-138

Statistics

Operating system Unique / Total count
CentOS 7 2 / 2
Operating system Count
CentOS 7 2
Architecture Count
x86_64 2
Related packages Count
libwayland-egl 2
 0:1.15.0-1.el7 2
expat 2
 0:2.1.0-15.el7_9 2
nspr 2
 0:4.34.0-3.1.el7_9 1
 0:4.35.0-1.el7_9 1
Show more… (70)
nss-softokn-freebl 2
 0:3.90.0-6.el7_9 1
 0:3.79.0-4.el7_9 1
dejavu-sans-fonts 2
 0:2.33-6.el7 2
libthai 2
 0:0.1.14-9.el7 2
libcap 2
 0:2.22-11.el7 2
systemd-libs 2
 0:219-78.el7_9.7 2
libXinerama 2
 0:1.1.3-2.1.el7 2
bzip2-libs 2
 0:1.0.6-13.el7 2
libXrandr 2
 0:1.5.1-2.el7 2
libxcb 2
 0:1.13-1.el7 2
libX11 2
 0:1.6.7-4.el7_9 2
nss 2
 0:3.90.0-2.el7_9 1
 0:3.79.0-5.el7_9 1
libstdc++ 2
 0:4.8.5-44.el7 2
libXext 2
 0:1.3.3-3.el7 2
glibc 2
 0:2.17-326.el7_9 2
cairo-gobject 2
 0:1.15.12-4.el7 2
libuuid 2
 0:2.23.2-65.el7_9.1 2
nss-softokn 2
 0:3.90.0-6.el7_9 1
 0:3.79.0-4.el7_9 1
firefox 2
 0:102.15.0-1.el7.centos 2
graphite2 2
 0:1.3.10-1.el7_3 2
libXau 2
 0:1.0.8-2.1.el7 2
libwayland-cursor 2
 0:1.15.0-1.el7 2
libXcomposite 2
 0:0.4.4-4.1.el7 2
glib2 2
 0:2.56.1-9.el7_9 2
nss-util 2
 0:3.79.0-1.el7_9 1
 0:3.90.0-1.el7_9 1
lz4 2
 0:1.8.3-1.el7 2
libblkid 2
 0:2.23.2-65.el7_9.1 2
libglvnd-egl 2
 1:1.0.1-0.8.git5baa1e5.el7 2
libXi 2
 0:1.7.9-1.el7 2
libwayland-client 2
 0:1.15.0-1.el7 2
pango 2
 0:1.42.4-4.el7_7 2
libglvnd-glx 2
 1:1.0.1-0.8.git5baa1e5.el7 2
libattr 2
 0:2.4.46-13.el7 2
libglvnd 2
 1:1.0.1-0.8.git5baa1e5.el7 2
libgcc 2
 0:4.8.5-44.el7 2
cairo 2
 0:1.15.12-4.el7 2
atk 2
 0:2.28.1-2.el7 2
pcre 2
 0:8.32-17.el7 2
fribidi 2
 0:1.0.2-1.el7_7.1 2
libXcursor 2
 0:1.1.15-1.el7 2
libXrender 2
 0:0.9.10-1.el7 2
libXdamage 2
 0:1.1.4-4.1.el7 2
libgpg-error 2
 0:1.12-3.el7 2
libgcrypt 2
 0:1.5.3-14.el7 2
gdk-pixbuf2 2
 0:2.36.12-3.el7 2
elfutils-libelf 2
 0:0.176-5.el7 2
at-spi2-core 2
 0:2.28.0-1.el7 2
libpng 2
 2:1.5.13-8.el7 2
libffi 2
 0:3.0.13-19.el7 2
pixman 2
 0:0.34.0-1.el7 2
libselinux 2
 0:2.5-15.el7 2
gtk3 2
 0:3.22.30-8.el7_9 2
dbus-libs 2
 1:1.10.24-15.el7 2
harfbuzz 2
 0:1.7.5-2.el7 2
fontconfig 2
 0:2.13.0-4.3.el7 2
libXtst 2
 0:1.2.3-1.el7 2
glibc-common 2
 0:2.17-326.el7_9 2
xz-libs 2
 0:5.2.2-2.el7_9 2
urw-base35-nimbus-sans-fonts 2
 0:20170801-10.el7 2
libmount 2
 0:2.23.2-65.el7_9.1 2
libepoxy 2
 0:1.5.2-1.el7 2
alsa-lib 2
 0:1.1.8-1.el7 2
libxkbcommon 2
 0:0.7.1-3.el7 2
at-spi2-atk 2
 0:2.26.2-1.el7 2
elfutils-libs 2
 0:0.176-5.el7 2
dejavu-serif-fonts 2
 0:2.33-6.el7 2
sqlite 2
 0:3.7.17-8.el7_7.1 2
zlib 2
 0:1.2.7-21.el7_9 2
libXfixes 2
 0:5.0.3-1.el7 2
freetype 2
 0:2.8-14.el7_9.1 2
dbus-glib 2
 0:0.100-7.el7 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::GCMarker::eagerlyMarkChildren(JSString*)
/usr/lib64/firefox/libxul.so 0x4d432a2
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
2
js::GCMarker::traceBarrieredCells(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x4d47d27
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
3
js::gc::BarrierTracer::performBarrier(JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x4d47f06
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
4
JSLinearString* JSRope::flattenInternal<(JSRope::UsingBarrier)1, char16_t>(JSRope*)
/usr/lib64/firefox/libxul.so 0x4ab805a
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
5
JSRope::flatten(JSContext*)
/usr/lib64/firefox/libxul.so 0x4ab956a
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
6
js::jit::CharCodeAt(JSContext*, JS::Handle<JSString*>, int, unsigned int*)
/usr/lib64/firefox/libxul.so 0x4def20b
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
7
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366ce358 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x7fe59e653018 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366fccc5 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x7fe59e645050 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366cc317 -
12
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x4f897e9
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
13
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5147e08
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
14
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x514835f
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
15
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4da17b9
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
16
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366cee28 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x7fe59742d2b0 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366cc56a -
19
js::jit::EnterBaselineInterpreterAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*)
/usr/lib64/firefox/libxul.so 0x4da3549
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
20
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x51474a3
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
21
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5147e25
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
22
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x514835f
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
23
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5148989
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
24
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4a7bce3
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
25
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4ded340
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
26
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366cf9e0 -
27
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366cc317 -
28
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x4f897e9
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
29
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x513e080
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
30
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5147e25
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
31
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x514835f
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
32
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5148989
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
33
js::PromiseObject::create(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, bool)
/usr/lib64/firefox/libxul.so 0x4a5fdba
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
34
PromiseConstructor(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4a60556
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
35
InternalConstruct(JSContext*, js::AnyConstructArgs const&)
/usr/lib64/firefox/libxul.so 0x514929a
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
36
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x513de66
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
37
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5147e25
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
38
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x514835f
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
39
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5148989
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
40
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4a7bce3
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
41
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4ded340
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
42
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366cf9e0 -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x3f79366cc56a -
44
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x4f897e9
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
45
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x513e080
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
46
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5147e25
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
47
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x514835f
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
48
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5148989
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
49
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4a237a2
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
50
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4a5f3ea
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
51
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5148506
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
52
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5148989
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
53
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4932479
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
54
mozilla::dom::PromiseJobCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1f36bba
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
55
mozilla::dom::PromiseJobCallback::Call(mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*)
/usr/lib64/firefox/libxul.so 0xbdc584
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
56
mozilla::PromiseJobRunnable::Run(mozilla::AutoSlowOperation&)
/usr/lib64/firefox/libxul.so 0xbdc702
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
57
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0xbed7e8
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
58
mozilla::CycleCollectedJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0xbedf4b
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
59
XPCJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0x13ee864
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
60
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xc9e0fd
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
61
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc8a6fb
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
62
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x131fb8a
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
63
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12d69b5
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
64
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x363c528
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
65
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x48091c3
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
66
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12d69b5
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
67
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4809647
Build id: 598fe7a7fd1dcef26b18cb8dfac1c1a2b89e50a3 		-
68
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x16477
Build id: 458fcf34bc7ea1e2dc019bb47fd6c0a993fae273 		-
69
main
/usr/lib64/firefox/firefox 0x15c20
Build id: 458fcf34bc7ea1e2dc019bb47fd6c0a993fae273 		-