Crash in js::GCMarker::eagerlyMarkChildren(JSString*)

Similar reports
Problem #824421
Component
firefox
Last affected version
0:102.14.0-3.el7.centos
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-07-10
Last occurrence
2026-07-10
Unique reports
1
Quality
-128

Statistics

Operating system Unique / Total count
CentOS 7 1 / 2
Operating system Count
CentOS 7 2
Architecture Count
x86_64 2
Related packages Count
libX11 2
 0:1.6.7-4.el7_9 2
glibc 2
 0:2.17-326.el7_9 2
libXext 2
 0:1.3.3-3.el7 2
Show more… (70)
dejavu-serif-fonts 2
 0:2.33-6.el7 2
pixman 2
 0:0.34.0-1.el7 2
freetype 2
 0:2.8-14.el7_9.1 2
libuuid 2
 0:2.23.2-65.el7_9.1 2
libxcb 2
 0:1.13-1.el7 2
libXfixes 2
 0:5.0.3-1.el7 2
libwayland-cursor 2
 0:1.15.0-1.el7 2
cairo-gobject 2
 0:1.15.12-4.el7 2
alsa-lib 2
 0:1.1.8-1.el7 2
nss-softokn 2
 0:3.79.0-4.el7_9 2
libXrender 2
 0:0.9.10-1.el7 2
libwayland-client 2
 0:1.15.0-1.el7 2
gtk3 2
 0:3.22.30-8.el7_9 2
sqlite 2
 0:3.7.17-8.el7_7.1 2
dbus-glib 2
 0:0.100-7.el7 2
libgpg-error 2
 0:1.12-3.el7 2
libepoxy 2
 0:1.5.2-1.el7 2
dejavu-sans-fonts 2
 0:2.33-6.el7 2
elfutils-libs 2
 0:0.176-5.el7 2
libglvnd 2
 1:1.0.1-0.8.git5baa1e5.el7 2
libmount 2
 0:2.23.2-65.el7_9.1 2
at-spi2-core 2
 0:2.28.0-1.el7 2
libgcrypt 2
 0:1.5.3-14.el7 2
glibc-common 2
 0:2.17-326.el7_9 2
dbus-libs 2
 1:1.10.24-15.el7 2
libffi 2
 0:3.0.13-19.el7 2
libXi 2
 0:1.7.9-1.el7 2
libattr 2
 0:2.4.46-13.el7 2
zlib 2
 0:1.2.7-21.el7_9 2
glib2 2
 0:2.56.1-9.el7_9 2
libXau 2
 0:1.0.8-2.1.el7 2
lz4 2
 0:1.8.3-1.el7 2
expat 2
 0:2.1.0-15.el7_9 2
urw-base35-nimbus-sans-fonts 2
 0:20170801-10.el7 2
fontconfig 2
 0:2.13.0-4.3.el7 2
gdk-pixbuf2 2
 0:2.36.12-3.el7 2
libwayland-egl 2
 0:1.15.0-1.el7 2
cairo 2
 0:1.15.12-4.el7 2
nss 2
 0:3.79.0-5.el7_9 2
nss-softokn-freebl 2
 0:3.79.0-4.el7_9 2
libXcursor 2
 0:1.1.15-1.el7 2
libstdc++ 2
 0:4.8.5-44.el7 2
libglvnd-glx 2
 1:1.0.1-0.8.git5baa1e5.el7 2
libselinux 2
 0:2.5-15.el7 2
firefox 2
 0:102.14.0-3.el7.centos 2
libxkbcommon 2
 0:0.7.1-3.el7 2
libblkid 2
 0:2.23.2-65.el7_9.1 2
at-spi2-atk 2
 0:2.26.2-1.el7 2
pcre 2
 0:8.32-17.el7 2
graphite2 2
 0:1.3.10-1.el7_3 2
pango 2
 0:1.42.4-4.el7_7 2
libXinerama 2
 0:1.1.3-2.1.el7 2
libglvnd-egl 2
 1:1.0.1-0.8.git5baa1e5.el7 2
libXdamage 2
 0:1.1.4-4.1.el7 2
bzip2-libs 2
 0:1.0.6-13.el7 2
systemd-libs 2
 0:219-78.el7_9.7 2
libXtst 2
 0:1.2.3-1.el7 2
atk 2
 0:2.28.1-2.el7 2
libXrandr 2
 0:1.5.1-2.el7 2
nss-util 2
 0:3.79.0-1.el7_9 2
xz-libs 2
 0:5.2.2-2.el7_9 2
fribidi 2
 0:1.0.2-1.el7_7.1 2
libgcc 2
 0:4.8.5-44.el7 2
elfutils-libelf 2
 0:0.176-5.el7 2
libthai 2
 0:0.1.14-9.el7 2
libpng 2
 2:1.5.13-8.el7 2
libXcomposite 2
 0:0.4.4-4.1.el7 2
libcap 2
 0:2.22-11.el7 2
harfbuzz 2
 0:1.7.5-2.el7 2
nspr 2
 0:4.34.0-3.1.el7_9 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::GCMarker::eagerlyMarkChildren(JSString*)
/usr/lib64/firefox/libxul.so 0x4d41ea2
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
2
js::GCMarker::traceBarrieredCells(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x4d46927
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
3
js::gc::BarrierTracer::performBarrier(JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x4d46b06
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
4
JSLinearString* JSRope::flattenInternal<(JSRope::UsingBarrier)1, char16_t>(JSRope*)
/usr/lib64/firefox/libxul.so 0x4ab6c5a
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
5
JSRope::flatten(JSContext*)
/usr/lib64/firefox/libxul.so 0x4ab816a
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
6
js::jit::CharCodeAt(JSContext*, JS::Handle<JSString*>, int, unsigned int*)
/usr/lib64/firefox/libxul.so 0x4dede0b
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
7
anonymous function
/usr/lib64/firefox/libxul.so 0x31d1cdbce358 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x7f45ae67d108 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x31d1cdbfccc5 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x7f45b667a018 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x31d1cdbfccc5 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x7f45b6679050 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x31d1cdbcc317 -
14
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x4f883e9
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
15
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x513cc80
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
16
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5146a25
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
17
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5146f5f
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
18
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5147589
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
19
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4a7a8e3
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
20
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4debf40
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
21
anonymous function
/usr/lib64/firefox/libxul.so 0x31d1cdbcf9e0 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x31d1cdbcc317 -
23
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x4f883e9
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
24
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x513cc80
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
25
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5146a25
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
26
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5146f5f
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
27
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5147589
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
28
js::PromiseObject::create(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, bool)
/usr/lib64/firefox/libxul.so 0x4a5e9ba
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
29
PromiseConstructor(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4a5f156
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
30
InternalConstruct(JSContext*, js::AnyConstructArgs const&)
/usr/lib64/firefox/libxul.so 0x5147e9a
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
31
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x513ca66
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
32
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5146a25
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
33
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5146f5f
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
34
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5147589
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
35
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4a7a8e3
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
36
js::jit::InterpretResume(JSContext*, JS::Handle<JSObject*>, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4debf40
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
37
anonymous function
/usr/lib64/firefox/libxul.so 0x31d1cdbcf9e0 -
38
anonymous function
/usr/lib64/firefox/libxul.so 0x31d1cdbcc56a -
39
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x4f883e9
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
40
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x513cc80
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
41
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5146a25
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
42
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5146f5f
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
43
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5147589
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
44
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4a223a2
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
45
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4a5dfea
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
46
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5147106
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
47
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5147589
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
48
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4931079
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
49
mozilla::dom::PromiseJobCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1f365ea
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
50
mozilla::dom::PromiseJobCallback::Call(mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*)
/usr/lib64/firefox/libxul.so 0xbdc544
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
51
mozilla::PromiseJobRunnable::Run(mozilla::AutoSlowOperation&)
/usr/lib64/firefox/libxul.so 0xbdc6c2
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
52
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0xbed7a8
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
53
mozilla::CycleCollectedJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0xbedf0b
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
54
XPCJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0x13ee684
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
55
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xc9e0bd
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
56
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc8a6bb
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
57
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x131f9aa
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
58
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12d67d5
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
59
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x363b828
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
60
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4807dc3
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
61
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12d67d5
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
62
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4808247
Build id: 41dda868a16d6eca0a1a04058afda66b97f79bee 		-
63
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x16477
Build id: 0a21a1595d24cd189cacd363397d1b6ddd17cf14 		-
64
main
/usr/lib64/firefox/firefox 0x15c20
Build id: 0a21a1595d24cd189cacd363397d1b6ddd17cf14 		-