Crash in bool js::gc::TraceEdgeInternal<JSObject*>(JSTracer*, JSObject**, char const*)

Similar reports
Problem #396300
Component
firefox
Last affected version
0:97.0-1.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-10-14
Last occurrence
2024-07-20
Unique reports
14
Quality
-54

Graphs

Statistics

Operating system Unique / Total count
Fedora 33 3 / 3
Fedora 34 11 / 11
Fedora 35 14 / 15
Operating system Count
Fedora 35 15
Fedora 34 11
Fedora 33 3
Architecture Count
x86_64 29
Related packages Count
firefox 16
 0:96.0-1.fc35 4
 0:95.0-1.fc35 3
 0:94.0-1.fc33 3
 0:96.0.3-1.fc34 2
 0:95.0.2-2.fc35 1
 0:95.0-1.fc34 1
 0:97.0-1.fc35 1
 0:95.0.2-2.fc34 1
soxr 3
 0:0.1.3-8.fc33 3
x265-libs 3
 0:3.4-3.fc33 3
Show more… (57)
numactl-libs 3
 0:2.0.14-1.fc33 3
dejavu-serif-fonts 3
 0:2.37-15.fc33 2
 0:2.37-16.fc34 1
ocl-icd 3
 0:2.3.0-1.fc33 3
libgomp 3
 0:10.3.1-1.fc33 3
libvorbis 3
 1:1.3.7-2.fc33 3
libvmaf 3
 0:1.5.1-5.fc33 3
pugixml 3
 0:1.11.4-1.fc33 3
xvidcore 3
 0:1.3.7-4.fc33 3
x264-libs 3
 0:0.160-2.20200702gitcde9a93.fc33 3
libva 3
 0:2.9.0-1.fc33 3
libtheora 2
 1:1.1.1-28.fc33 2
llvm-libs 2
 0:11.0.0-1.fc33 2
urw-base35-bookman-fonts 2
 0:20200910-6.fc33 2
opus 2
 0:1.3.1-6.fc33 2
rav1e-libs 2
 0:0.4.0~alpha-0.1.fc33 2
libogg 2
 2:1.3.4-3.fc33 2
vo-amrwbenc 2
 0:0.1.3-13.fc33 2
libglvnd-glx 2
 1:1.3.3-1.fc33 2
libvpx 2
 0:1.9.0-1.fc33 2
libedit 2
 0:3.1-38.20210714cvs.fc33 2
dejavu-sans-fonts 2
 0:2.37-15.fc33 2
ncurses-libs 2
 0:6.2-3.20200222.fc33 2
libdrm 2
 0:2.4.102-2.fc33 2
urw-base35-nimbus-roman-fonts 2
 0:20200910-6.fc33 2
vulkan-loader 2
 0:1.2.148.1-1.fc33 2
urw-base35-nimbus-mono-ps-fonts 2
 0:20200910-6.fc33 2
librsvg2 2
 0:2.50.3-1.fc33 2
speex 2
 0:1.2.0-6.fc33 2
openjpeg2 2
 0:2.3.1-11.fc33 2
libaom 2
 0:2.0.1-3.fc33 2
intel-mediasdk 2
 0:20.3.1-1.fc33 2
smc-meera-fonts 2
 0:7.0.3-2.fc33 2
google-noto-sans-cjk-ttc-fonts 2
 0:20190416-7.fc33 1
 0:20201206-3.fc35 1
ffmpeg-libs 2
 0:4.3.3-1.fc33 2
libglvnd 2
 1:1.3.3-1.fc33 2
xorg-x11-drv-nvidia-libs 1
 3:470.74-1.fc33 1
google-droid-sans-fonts 1
 0:20200215-8.fc33 1
libvdpau 1
 0:1.4-3.fc33 1
liberation-sans-fonts 1
 1:2.1.5-1.fc33 1
libxcb 1
 0:1.13.1-5.fc33 1
expat 1
 0:2.4.1-1.fc33 1
zvbi 1
 0:0.2.35-11.fc33 1
google-carlito-fonts 1
 0:1.103-0.15.20130920.fc33 1
gsm 1
 0:1.0.19-3.fc33 1
opencore-amr 1
 0:0.1.5-11.fc33 1
mesa-dri-drivers 1
 0:20.3.5-2.fc33 1
dejavu-sans-mono-fonts 1
 0:2.37-15.fc33 1
mesa-libglapi 1
 0:20.3.5-2.fc33 1
liberation-serif-fonts 1
 1:2.1.5-1.fc33 1
libwayland-server 1
 0:1.18.0-2.fc33 1
mesa-libEGL 1
 0:20.3.5-2.fc33 1
libreoffice-opensymbol-fonts 1
 1:7.0.6.2-1.fc33 1
urw-base35-nimbus-sans-fonts 1
 0:20200910-6.fc33 1
libdav1d 1
 0:0.7.1-2.fc33 1
pt-sans-fonts 1
 0:20141121-18.fc33 1
fdk-aac-free 1
 0:2.0.0-5.fc33 1
lame-libs 1
 0:3.100-9.fc33 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
bool js::gc::TraceEdgeInternal<JSObject*>(JSTracer*, JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x3cac20c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
2
js::TraceManuallyBarrieredGenericPointerEdge(JSTracer*, js::gc::Cell**, char const*)
/usr/lib64/firefox/libxul.so 0x2c7f627
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
3
js::PrivateScriptData::trace(JSTracer*)
/usr/lib64/firefox/libxul.so 0x2c34c6e
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
4
js::GCMarker::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2c7d153
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
5
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x3c9b992
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
6
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x3c99bdf
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
7
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3c9920b
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
8
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3c98c96
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
9
js::gc::GCRuntime::gcSlice(JS::GCReason, long)
/usr/lib64/firefox/libxul.so 0x3ca1fb5
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
10
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsIncremental, nsJSContext::IsShrinking, long)
/usr/lib64/firefox/libxul.so 0x3255887
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
11
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x31d064c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
12
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x31d02e9
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
13
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2d2641f
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
14
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2d2634c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
15
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ae4d72
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
16
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ae461c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
17
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x2d3b8f6
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
18
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2ae380f
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
19
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2ae2e70
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
20
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2aff3ca
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2eb698c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
22
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36e565d
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
23
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3ab9b0b
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
24
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2eb698c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
25
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3ab9840
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
26
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x5261f
Build id: fb81af70cfb918f15579261863f8df0dc7f90497 		-
27
main
/usr/lib64/firefox/firefox 0x43d45
Build id: fb81af70cfb918f15579261863f8df0dc7f90497 		-