Crash in bool js::gc::IsAboutToBeFinalizedInternal<js::Shape>(js::Shape**)

Similar reports
Problem #162996
Component
firefox
Last affected version
0:94.0-1.fc33
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-09-24
Last occurrence
2026-01-19
Unique reports
7
Quality
-66

Graphs

Statistics

Operating system Unique / Total count
Fedora 33 42 / 42
Fedora 34 10 / 10
Fedora 35 7 / 7
Operating system Count
Fedora 33 42
Fedora 34 10
Fedora 35 7
Architecture Count
x86_64 59
Related packages Count
firefox 37
 0:94.0-1.fc33 35
 0:93.0-2.fc34 2
dejavu-serif-fonts 31
 0:2.37-15.fc33 30
 0:2.37-17.fc35 1
libedit 30
 0:3.1-38.20210714cvs.fc33 30
Show more… (111)
llvm-libs 30
 0:11.0.0-1.fc33 30
ncurses-libs 29
 0:6.2-3.20200222.fc33 29
mesa-libEGL 28
 0:20.3.5-2.fc33 28
libwayland-server 28
 0:1.18.0-2.fc33 28
mesa-libglapi 28
 0:20.3.5-2.fc33 28
liberation-sans-fonts 28
 1:2.1.5-1.fc33 28
libdrm 28
 0:2.4.102-2.fc33 28
libglvnd-glx 27
 1:1.3.3-1.fc33 27
libglvnd 26
 1:1.3.3-1.fc33 26
libxcb 26
 0:1.13.1-5.fc33 26
expat 26
 0:2.4.1-1.fc33 26
mesa-dri-drivers 26
 0:20.3.5-2.fc33 26
abattis-cantarell-fonts 23
 0:0.301-1.fc33 23
fdk-aac-free 23
 0:2.0.0-5.fc33 23
vulkan-loader 22
 0:1.2.148.1-1.fc33 22
dejavu-sans-fonts 21
 0:2.37-15.fc33 19
 0:2.37-16.fc34 1
 0:2.37-17.fc35 1
urw-base35-nimbus-roman-fonts 19
 0:20200910-6.fc33 19
urw-base35-nimbus-sans-fonts 19
 0:20200910-6.fc33 19
libxshmfence 18
 0:1.3-7.fc33 18
urw-base35-bookman-fonts 18
 0:20200910-6.fc33 18
mesa-libgbm 17
 0:20.3.5-2.fc33 17
elfutils-libelf 15
 0:0.185-2.fc33 15
libglvnd-egl 13
 1:1.3.3-1.fc33 13
google-droid-sans-fonts 9
 0:20200215-8.fc33 9
glibc 9
 0:2.32-10.fc33 9
gnu-free-mono-fonts 8
 0:20120503-23.fc33 8
libtasn1 8
 0:4.16.0-3.fc33 8
p11-kit-trust 7
 0:0.23.22-2.fc33 7
sqlite-libs 7
 0:3.34.1-1.fc33 7
p11-kit 7
 0:0.23.22-2.fc33 7
nss-softokn-freebl 7
 0:3.71.0-1.fc33 7
nss-softokn 6
 0:3.71.0-1.fc33 6
liberation-serif-fonts 6
 1:2.1.5-1.fc33 6
dejavu-sans-mono-fonts 6
 0:2.37-15.fc33 6
google-carlito-fonts 5
 0:1.103-0.15.20130920.fc33 5
x265-libs 5
 0:3.4-3.fc33 5
google-noto-sans-cjk-ttc-fonts 4
 0:20190416-7.fc33 4
glibc-all-langpacks 4
 0:2.32-10.fc33 4
gvfs-client 4
 0:1.46.2-1.fc33 4
urw-base35-gothic-fonts 4
 0:20200910-6.fc33 4
nss 3
 0:3.71.0-1.fc33 3
dbus-glib 3
 0:0.110-10.fc33 3
gnu-free-serif-fonts 3
 0:20120503-23.fc33 3
vo-amrwbenc 3
 0:0.1.3-13.fc33 3
ffmpeg-libs 3
 0:4.3.3-1.fc33 3
x264-libs 3
 0:0.160-2.20200702gitcde9a93.fc33 3
nss-util 3
 0:3.71.0-1.fc33 3
opencore-amr 3
 0:0.1.5-11.fc33 3
xvidcore 3
 0:1.3.7-4.fc33 3
rav1e-libs 2
 0:0.4.0~alpha-0.1.fc33 2
zvbi 2
 0:0.2.35-11.fc33 2
ocl-icd 2
 0:2.3.0-1.fc33 2
soxr 2
 0:0.1.3-8.fc33 2
libvmaf 2
 0:1.5.1-5.fc33 2
libvorbis 2
 1:1.3.7-2.fc33 2
numactl-libs 2
 0:2.0.14-1.fc33 2
opus 2
 0:1.3.1-6.fc33 2
libtheora 2
 1:1.1.1-28.fc33 2
pt-sans-fonts 2
 0:20141121-18.fc33 2
libva 2
 0:2.9.0-1.fc33 2
libdav1d 2
 0:0.7.1-2.fc33 2
libogg 2
 2:1.3.4-3.fc33 2
fdk-aac 2
 0:2.0.2-1.fc33 2
libvpx 2
 0:1.9.0-1.fc33 2
libaom 2
 0:2.0.1-3.fc33 2
filesystem 2
 0:3.14-3.fc33 2
openjpeg2 2
 0:2.3.1-11.fc33 2
librsvg2 2
 0:2.50.3-1.fc33 2
libgomp 2
 0:10.3.1-1.fc33 2
lame-libs 2
 0:3.100-9.fc33 2
speex 2
 0:1.2.0-6.fc33 2
pugixml 2
 0:1.11.4-1.fc33 2
urw-base35-c059-fonts 1
 0:20200910-6.fc33 1
gsm 1
 0:1.0.19-3.fc33 1
urw-base35-standard-symbols-ps-fonts 1
 0:20200910-6.fc33 1
xz-libs 1
 0:5.2.5-4.fc33 1
gdouros-symbola-fonts 1
 0:10.24-7.fc33 1
at-spi2-core 1
 0:2.38.0-2.fc33 1
libvdpau 1
 0:1.4-3.fc33 1
libselinux 1
 0:3.1-2.fc33 1
libxml2 1
 0:2.9.12-4.fc33 1
libgpg-error 1
 0:1.41-1.fc33 1
ht-caladea-fonts 1
 1:1.001-3.20200428git336a529.fc33 1
intel-mediasdk 1
 0:20.3.1-1.fc33 1
julietaula-montserrat-fonts 1
 1:7.210-4.fc33 1
pcre2 1
 0:10.36-4.fc33 1
lohit-devanagari-fonts 1
 0:2.95.4-11.fc33 1
urw-base35-p052-fonts 1
 0:20200910-6.fc33 1
libmount 1
 0:2.36.1-1.fc33 1
graphite2 1
 0:1.3.14-6.fc33 1
libzstd 1
 0:1.5.0-1.fc33 1
urw-base35-nimbus-mono-ps-fonts 1
 0:20200910-6.fc33 1
pcre 1
 0:8.44-2.fc33 1
libffi 1
 0:3.1-26.fc33 1
libgcrypt 1
 0:1.8.8-1.fc33 1
libbrotli 1
 0:1.0.9-3.fc33 1
bzip2-libs 1
 0:1.0.8-4.fc33 1
liberation-mono-fonts 1
 1:2.1.5-1.fc33 1
libjpeg-turbo 1
 0:2.0.5-5.fc33 1
libXau 1
 0:1.0.9-4.fc33 1
dconf 1
 0:0.38.0-1.fc33 1
lz4-libs 1
 0:1.9.1-3.fc33 1
libdatrie 1
 0:0.2.9-12.fc33 1
openssl-libs 1
 1:1.1.1l-2.fc33 1
xorg-x11-drv-nvidia-libs 1
 3:470.74-1.fc33 1
libthai 1
 0:0.1.28-5.fc33 1
lohit-gujarati-fonts 1
 0:2.92.4-10.fc33 1
dbus-libs 1
 1:1.12.20-2.fc33 1
systemd-libs 1
 0:246.15-1.fc33 1
libblkid 1
 0:2.36.1-1.fc33 1
msttcore-fonts-installer 1
 0:2.6-1 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
bool js::gc::IsAboutToBeFinalizedInternal<js::Shape>(js::Shape**)
/usr/lib64/firefox/libxul.so 0x3d29301
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
2
JS::WeakCache<JS::GCHashSet<js::WeakHeapPtr<js::Shape*>, js::PropMapShapeHasher, js::SystemAllocPolicy> >::sweep(js::gc::StoreBuffer*)
/usr/lib64/firefox/libxul.so 0x3c1cc40
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
3
IncrementalSweepWeakCache(js::gc::GCRuntime*, js::gc::WeakCacheToSweep const&)
/usr/lib64/firefox/libxul.so 0x3d16b6c
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
4
js::gc::ParallelWorker<js::gc::WeakCacheToSweep, js::gc::WeakCacheSweepIterator>::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3d16aae
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
5
js::GCParallelTask::runTask(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3d10e78
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
6
js::GCParallelTask::runFromMainThread()
/usr/lib64/firefox/libxul.so 0x3d12c37
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
7
js::GCParallelTask::joinWithLockHeld(js::AutoLockHelperThreadState&, mozilla::Maybe<mozilla::TimeStamp>)
/usr/lib64/firefox/libxul.so 0x3d0ad82
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
8
js::gc::GCRuntime::joinTask(js::GCParallelTask&, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3d13afb
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
9
js::gc::GCRuntime::sweepWeakCaches(JSFreeOp*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3d169d9
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
10
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3d148a3
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
11
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3d147fb
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
12
js::gc::GCRuntime::performSweepActions(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3d14685
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
13
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x3d123b2
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
14
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3d118db
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
15
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3d11366
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
16
js::gc::GCRuntime::gcSlice(JS::GCReason, long)
/usr/lib64/firefox/libxul.so 0x3d1a685
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
17
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsIncremental, nsJSContext::IsShrinking, long)
/usr/lib64/firefox/libxul.so 0x32bea37
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
18
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x324d4af
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
19
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2d7fd0f
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
20
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2d7fe5c
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
21
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2b3e47a
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
22
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2b3dd2c
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
23
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x2d94bc6
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
24
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2b3cf34
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
25
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2b3c5a0
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
26
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2b5915a
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
27
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2f0cdfc
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
28
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x375e75d
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
29
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3b3475b
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
30
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2f0cdfc
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
31
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3b34490
Build id: 72c4bb7be2a0da4ed26edc4a58aa59b88ea53426 		-
32
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x526ef
Build id: b67038de38d228c19fdd18deee9e150ad6873e6c 		-
33
main
/usr/lib64/firefox/firefox 0x43cb5
Build id: b67038de38d228c19fdd18deee9e150ad6873e6c 		-