Crash in js::TenuringTracer::onObjectEdge(JSObject*)

Similar reports
Problem #832655
Component
firefox
Last affected version
0:91.11.0-2.el7.centos
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-10-08
Last occurrence
2026-10-08
Unique reports
1
Quality
-44

Statistics

Operating system Unique / Total count
CentOS 7 1 / 2
Operating system Count
CentOS 7 2
Architecture Count
x86_64 2
Related packages Count
expat 2
 0:2.1.0-14.el7_9 2
libgcc 2
 0:4.8.5-44.el7 2
glib2 2
 0:2.56.1-9.el7_9 2
Show more… (60)
libblkid 2
 0:2.23.2-65.el7_9.1 2
libwayland-egl 2
 0:1.15.0-1.el7 2
freetype 2
 0:2.8-14.el7_9.1 2
libcap 2
 0:2.22-11.el7 2
graphite2 2
 0:1.3.10-1.el7_3 2
libXi 2
 0:1.7.9-1.el7 2
nspr 2
 0:4.32.0-1.el7_9 2
libXcomposite 2
 0:0.4.4-4.1.el7 2
glibc 2
 0:2.17-326.el7_9 2
bzip2-libs 2
 0:1.0.6-13.el7 2
at-spi2-atk 2
 0:2.26.2-1.el7 2
libX11 2
 0:1.6.7-4.el7_9 2
libpng 2
 2:1.5.13-8.el7 2
cairo 2
 0:1.15.12-4.el7 2
libXext 2
 0:1.3.3-3.el7 2
lz4 2
 0:1.8.3-1.el7 2
nss-util 2
 0:3.67.0-1.el7_9 2
libselinux 2
 0:2.5-15.el7 2
libgpg-error 2
 0:1.12-3.el7 2
fontconfig 2
 0:2.13.0-4.3.el7 2
libthai 2
 0:0.1.14-9.el7 2
libXau 2
 0:1.0.8-2.1.el7 2
systemd-libs 2
 0:219-78.el7_9.5 2
libxcb 2
 0:1.13-1.el7 2
firefox 2
 0:91.11.0-2.el7.centos 2
libXinerama 2
 0:1.1.3-2.1.el7 2
pango 2
 0:1.42.4-4.el7_7 2
libmount 2
 0:2.23.2-65.el7_9.1 2
zlib 2
 0:1.2.7-20.el7_9 2
urw-base35-nimbus-sans-fonts 2
 0:20170801-10.el7 2
libgcrypt 2
 0:1.5.3-14.el7 2
gdk-pixbuf2 2
 0:2.36.12-3.el7 2
elfutils-libs 2
 0:0.176-5.el7 2
libXdamage 2
 0:1.1.4-4.1.el7 2
dbus-libs 2
 1:1.10.24-15.el7 2
libglvnd 2
 1:1.0.1-0.8.git5baa1e5.el7 2
libXrandr 2
 0:1.5.1-2.el7 2
libwayland-client 2
 0:1.15.0-1.el7 2
glibc-common 2
 0:2.17-326.el7_9 2
nss-softokn 2
 0:3.67.0-3.el7_9 2
libglvnd-egl 2
 1:1.0.1-0.8.git5baa1e5.el7 2
atk 2
 0:2.28.1-2.el7 2
gtk3 2
 0:3.22.30-8.el7_9 2
fribidi 2
 0:1.0.2-1.el7_7.1 2
libffi 2
 0:3.0.13-19.el7 2
libglvnd-glx 2
 1:1.0.1-0.8.git5baa1e5.el7 2
pcre 2
 0:8.32-17.el7 2
libuuid 2
 0:2.23.2-65.el7_9.1 2
libSM 2
 0:1.2.2-2.el7 2
nss 2
 0:3.67.0-4.el7_9 2
elfutils-libelf 2
 0:0.176-5.el7 2
pixman 2
 0:0.34.0-1.el7 2
sqlite 2
 0:3.7.17-8.el7_7.1 2
libattr 2
 0:2.4.46-13.el7 2
libstdc++ 2
 0:4.8.5-44.el7 2
harfbuzz 2
 0:1.7.5-2.el7 2
libxkbcommon 2
 0:0.7.1-3.el7 2
xz-libs 2
 0:5.2.2-2.el7_9 2
libXrender 2
 0:0.9.10-1.el7 2
dejavu-sans-fonts 2
 0:2.33-6.el7 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::TenuringTracer::onObjectEdge(JSObject*)
/usr/lib64/firefox/libxul.so 0x4926edb
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
2
bool js::gc::TraceEdgeInternal<JSObject*>(JSTracer*, JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x491e3c5
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
3
js::TenuringTracer::traceObject(JSObject*)
/usr/lib64/firefox/libxul.so 0x4928921
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
4
js::Nursery::doCollection(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x49292af
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
5
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x492a151
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
6
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x48f38a2
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
7
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x48f39e6
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
8
mozilla::CycleCollectedJSContext::IsIdleGCTaskNeeded() const::IdleTimeGCTaskRunnable::Run()
/usr/lib64/firefox/libxul.so 0xad1481
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
9
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xb8eedd
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
10
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xb8f723
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
11
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xb8f8a0
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
12
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0xb8f952
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
13
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xb91873
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
14
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xb7eb88
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
15
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x113ab3a
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
16
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x10f5285
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
17
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x33a6548
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
18
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4408ed3
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x10f5285
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
20
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x44092d7
Build id: b779c9b78b82e83feae163d91cf9f1aa816e5611 		-
21
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x16287
Build id: 8a68a934ee67cf7719385f0036bc0adc823685b3 		-
22
main
/usr/lib64/firefox/firefox 0x15a50
Build id: 8a68a934ee67cf7719385f0036bc0adc823685b3 		-