Crash in bool js::gc::IsAboutToBeFinalizedInternal<js::BaseShape>(js::BaseShape**)

Similar reports
Problem #162996
Component
firefox
Last affected version
0:94.0-1.fc33
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-11-01
Last occurrence
2023-07-11
Unique reports
1
Quality
-68

Graphs

Statistics

Operating system Unique / Total count
Fedora 33 1 / 1
Fedora 34 1 / 1
Operating system Count
Fedora 33 1
Fedora 34 1
Architecture Count
x86_64 2
Related packages Count
ncurses-libs 1
 0:6.2-3.20200222.fc33 1
urw-base35-nimbus-roman-fonts 1
 0:20200910-6.fc33 1
dejavu-serif-fonts 1
 0:2.37-15.fc33 1
Show more… (18)
abattis-cantarell-fonts 1
 0:0.301-1.fc33 1
libglvnd-glx 1
 1:1.3.3-1.fc33 1
urw-base35-bookman-fonts 1
 0:20200910-6.fc33 1
expat 1
 0:2.4.1-1.fc33 1
libwayland-server 1
 0:1.18.0-2.fc33 1
mesa-libglapi 1
 0:20.3.5-2.fc33 1
google-droid-sans-fonts 1
 0:20200215-8.fc33 1
liberation-sans-fonts 1
 1:2.1.5-1.fc33 1
firefox 1
 0:94.0-1.fc33 1
libxshmfence 1
 0:1.3-7.fc33 1
libglvnd 1
 1:1.3.3-1.fc33 1
libxcb 1
 0:1.13.1-5.fc33 1
dejavu-sans-fonts 1
 0:2.37-15.fc33 1
libdrm 1
 0:2.4.102-2.fc33 1
fdk-aac-free 1
 0:2.0.0-5.fc33 1
llvm-libs 1
 0:11.0.0-1.fc33 1
libedit 1
 0:3.1-38.20210714cvs.fc33 1
mesa-libEGL 1
 0:20.3.5-2.fc33 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
bool js::gc::IsAboutToBeFinalizedInternal<js::BaseShape>(js::BaseShape**)
/usr/lib64/firefox/libxul.so 0x3cb0b71
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
2
JS::WeakCache<JS::GCHashSet<js::WeakHeapPtr<js::BaseShape*>, js::BaseShapeHasher, js::SystemAllocPolicy> >::sweep(js::gc::StoreBuffer*)
/usr/lib64/firefox/libxul.so 0x3ba1287
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
3
IncrementalSweepWeakCache(js::gc::GCRuntime*, js::gc::WeakCacheToSweep const&)
/usr/lib64/firefox/libxul.so 0x3c9e47c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
4
js::gc::ParallelWorker<js::gc::WeakCacheToSweep, js::gc::WeakCacheSweepIterator>::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3c9e3be
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
5
js::GCParallelTask::runTask(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3c987a8
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
6
js::GCParallelTask::runFromMainThread()
/usr/lib64/firefox/libxul.so 0x3c9a587
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
7
js::GCParallelTask::joinWithLockHeld(js::AutoLockHelperThreadState&, mozilla::Maybe<mozilla::TimeStamp>)
/usr/lib64/firefox/libxul.so 0x3c92462
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
8
js::gc::GCRuntime::joinTask(js::GCParallelTask&, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3c9b48b
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
9
js::gc::GCRuntime::sweepWeakCaches(JSFreeOp*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3c9e2e5
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
10
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3c9c233
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
11
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3c9c18b
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
12
js::gc::GCRuntime::performSweepActions(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3c9c015
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
13
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x3c99cb3
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
14
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3c9920b
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
15
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3c98c96
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
16
js::gc::GCRuntime::gcSlice(JS::GCReason, long)
/usr/lib64/firefox/libxul.so 0x3ca1fb5
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
17
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsIncremental, nsJSContext::IsShrinking, long)
/usr/lib64/firefox/libxul.so 0x3255887
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
18
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x31d064c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
19
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x31d02e9
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
20
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2d2641f
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
21
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2d2634c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
22
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ae4d72
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
23
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ae461c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
24
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x2d3b8f6
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
25
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2ae380f
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
26
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2ae2e70
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
27
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2aff3ca
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
28
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2eb698c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
29
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36e565d
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
30
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3ab9b0b
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
31
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2eb698c
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
32
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3ab9840
Build id: 60454b360c261659817193678bf35f1897dff32a 		-
33
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x5261f
Build id: fb81af70cfb918f15579261863f8df0dc7f90497 		-
34
main
/usr/lib64/firefox/firefox 0x43d45
Build id: fb81af70cfb918f15579261863f8df0dc7f90497 		-