Crash in js::gc::AllocateTenuredCellInGC(JS::Zone*, js::gc::AllocKind)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-23
Last occurrence
2026-09-23
Unique reports
1
Quality
-94

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Operating system Count
Fedora 41 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:145.0-2.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::AllocateTenuredCellInGC(JS::Zone*, js::gc::AllocKind)
/usr/lib64/firefox/libxul.so 0x55ff3e6
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
js::gc::TenuringTracer::promotePlainObject(js::PlainObject*)
/usr/lib64/firefox/libxul.so 0x565914a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
js::gc::TenuringTracer::traverse(JS::Value*)
/usr/lib64/firefox/libxul.so 0x565fe25
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
js::gc::TenuringTracer::collectToObjectFixedPoint()
/usr/lib64/firefox/libxul.so 0x56604af
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
js::Nursery::doCollection(js::gc::AutoGCSession&, JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x562b5a9
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x562c275
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x562c499
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x562c6aa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
void* js::gc::CellAllocator::RetryNurseryAlloc<(js::AllowGC)1>(JSContext*, JS::TraceKind, js::gc::AllocKind, unsigned long, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x56007f5
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
js::NativeObject::create(JSContext*, js::gc::AllocKind, js::gc::Heap, JS::Handle<js::SharedShape*>, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x50cc881
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
js::NewObjectWithClassProto(JSContext*, JSClass const*, JS::Handle<JSObject*>, js::gc::AllocKind, js::NewObjectKind, js::EnumFlags<js::ObjectFlag>)
/usr/lib64/firefox/libxul.so 0x51dfa9d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
NewReactionRecord(JSContext*, JS::Handle<PromiseCapability>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, HostDefinedDataObjectOption)
/usr/lib64/firefox/libxul.so 0x5214422
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
PromiseResolveBuiltinThenableJob(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>)
/usr/lib64/firefox/libxul.so 0x521d3ad
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
PromiseResolveBuiltinThenableJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x521d55a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d11d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d5ad
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x5135661
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
mozilla::PromiseJobRunnable::Call()
/usr/lib64/firefox/libxul.so 0x43a817
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
mozilla::PromiseJobRunnable::Run(mozilla::AutoSlowOperation&)
/usr/lib64/firefox/libxul.so 0x43aa11
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x451f04
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
mozilla::dom::CallSetup::~CallSetup()
/usr/lib64/firefox/libxul.so 0x26a3a07
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
mozilla::dom::CallbackTimeoutHandler::Call(char const*)
/usr/lib64/firefox/libxul.so 0x1ac1f6c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
nsGlobalWindowInner::RunTimeoutHandler(mozilla::dom::Timeout*)
/usr/lib64/firefox/libxul.so 0x1908434
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
mozilla::dom::TimeoutManager::RunTimeout(mozilla::TimeStamp const&, mozilla::TimeStamp const&, bool)
/usr/lib64/firefox/libxul.so 0x1aca375
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
mozilla::dom::TimeoutExecutor::MaybeExecute()
/usr/lib64/firefox/libxul.so 0x1acae59
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
non-virtual thunk to mozilla::dom::TimeoutExecutor::Notify(nsITimer*)
/usr/lib64/firefox/libxul.so 0x1acaf4d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
27
nsTimerImpl::Fire(unsigned long)
/usr/lib64/firefox/libxul.so 0x51fc52
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
28
nsTimerEvent::Run()
/usr/lib64/firefox/libxul.so 0x520126
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
29
mozilla::ThrottledEventQueue::Inner::ExecuteRunnable()
/usr/lib64/firefox/libxul.so 0x50cdbc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
30
mozilla::ThrottledEventQueue::Inner::Executor::Run()
/usr/lib64/firefox/libxul.so 0x50ce11
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
31
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f588f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
32
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f600b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
33
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
34
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
36
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
37
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
38
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
39
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
40
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
41
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
42
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
43
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
44
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
45
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
46
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
47
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-