Crash in js::gc::CellWithLengthAndFlags::headerFlagsField() const

Note: Executable of this report does not come from a package.
Similar reports
Problem #496938
Component
firefox
Last affected version
N/A
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-06-25
Last occurrence
2021-06-25
Unique reports
1
Quality
-61

Statistics

Operating system Unique / Total count
Fedora 34 1 / 1
Operating system Count
Fedora 34 1
Architecture Count
x86_64 1

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::CellWithLengthAndFlags::headerFlagsField() const
/usr/lib64/firefox/libxul.so 0x3a4f744
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
2
void js::GCMarker::markAndTraverse<JSString>(JSString*)
/usr/lib64/firefox/libxul.so 0x3c2a059
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
3
bool js::gc::TraceEdgeInternal<JSString*>(JSTracer*, JSString**, char const*)
/usr/lib64/firefox/libxul.so 0x3c27d60
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
4
js::TraceManuallyBarrieredGenericPointerEdge(JSTracer*, js::gc::Cell**, char const*)
/usr/lib64/firefox/libxul.so 0x2c86de7
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
5
js::PrivateScriptData::trace(JSTracer*)
/usr/lib64/firefox/libxul.so 0x2c403e6
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
6
js::GCMarker::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2c851e3
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
7
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x3c16442
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
8
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3c13dc7
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
9
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3c13200
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
10
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3c12c92
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
11
js::gc::GCRuntime::gcSlice(JS::GCReason, long)
/usr/lib64/firefox/libxul.so 0x3c20ea5
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
12
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsIncremental, nsJSContext::IsShrinking, long)
/usr/lib64/firefox/libxul.so 0x3237bfc
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
13
InterSliceGCRunnerFired(mozilla::TimeStamp, void*)
/usr/lib64/firefox/libxul.so 0x3237a16
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
14
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2d2bf69
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
15
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2d2c13c
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2af297c
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
17
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2af21d3
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
18
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x2d32b86
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
19
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2af42bd
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
20
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2af3960
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
21
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2b0ad7a
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2eb0ffc
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
23
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36a385d
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
24
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3a3e4ab
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
25
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2eb0ffc
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
26
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3a3e1db
Build id: 1b4eaf766d4e17edcfbbcdd52dcacb59868be942 		-
27
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x5251f
Build id: 3c476514743eb7dbb4b54d5185225a5be67ce87a 		-
28
main
/usr/lib64/firefox/firefox 0x43a55
Build id: 3c476514743eb7dbb4b54d5185225a5be67ce87a 		-
29
/lib64/libc.so.6 0x27b75
Build id: 4dbd75de6ffcbcb11f2305cab2e40f597f54f80b 		-
30
_start
/usr/lib64/firefox/firefox 0x5212e
Build id: 3c476514743eb7dbb4b54d5185225a5be67ce87a 		-