Crash in js::GenericTracerImpl<js::gc::MarkingTracerT<0u> >::onObjectEdge(JSObject**, char const*)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-11
Last occurrence
2026-09-11
Unique reports
1
Quality
-63

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Operating system Count
Fedora 41 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:145.0-2.fc41 1
google-noto-sans-vf-fonts 1
 0:20240701-2.fc41 1
google-noto-color-emoji-fonts 1
 0:20241008-1.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::GenericTracerImpl<js::gc::MarkingTracerT<0u> >::onObjectEdge(JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x5623554
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
bool js::GCMarker::markAndTraversePrivateGCThing<0u>(JSObject*, js::gc::Cell*)
/usr/lib64/firefox/libxul.so 0x56360ca
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
bool js::GCMarker::processMarkStackTop<0u>(JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x563635e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
bool js::GCMarker::doMarking<0u>(JS::SliceBudget&, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x5636a12
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
js::gc::GCRuntime::markUntilBudgetExhausted(JS::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x5636c3c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
/usr/lib64/firefox/libxul.so 0x5636f4c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x56377ee
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x5637b60
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x1b0e48d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x1b25c97
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x194ab2f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x19520c4
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x4eebec
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x4eece2
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f5905
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f61ab
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
27
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
28
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
29
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
30
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
31
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-