Crash in js::ShapeZone::fixupPropMapShapeTableAfterMovingGC()

Similar reports
Problem #161603
Component
firefox
Last affected version
0:96.0.3-1.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-11-29
Last occurrence
2022-05-25
Unique reports
11
Quality
-56

Graphs

Statistics

Operating system Unique / Total count
Fedora 34 1 / 1
Fedora 35 11 / 12
Operating system Count
Fedora 35 12
Fedora 34 1
Architecture Count
x86_64 13
Related packages Count
firefox 7
 0:96.0.3-1.fc35 2
 0:96.0-1.fc35 2
 0:96.0.3-1.fc34 1
 0:95.0.2-2.fc35 1
 0:95.0-1.fc35 1
dejavu-serif-fonts 2
 0:2.37-17.fc35 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::ShapeZone::fixupPropMapShapeTableAfterMovingGC()
/usr/lib64/firefox/libxul.so 0x3bc8d2f
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
2
js::gc::GCRuntime::updateZonePointersToRelocatedCells(JS::Zone*)
/usr/lib64/firefox/libxul.so 0x3cc36a3
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
3
js::gc::GCRuntime::compactPhase(JS::GCReason, js::SliceBudget&, js::gc::AutoGCSession&)
/usr/lib64/firefox/libxul.so 0x3cc2cbf
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
4
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x3cbd986
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
5
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3cbcd4b
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
6
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3cbc7fa
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
7
js::gc::GCRuntime::gcSlice(JS::GCReason, long)
/usr/lib64/firefox/libxul.so 0x3cc1e55
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
8
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsIncremental, nsJSContext::IsShrinking, long)
/usr/lib64/firefox/libxul.so 0x327eab7
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
9
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x31f8dac
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
10
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x31f8a49
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
11
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2d4ff6f
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
12
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2d500ec
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
13
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2b035e8
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
14
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2b02e9c
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
15
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x2d656f6
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
16
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2b0206f
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
17
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2b016a0
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
18
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2b1e5ba
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2ee0d1c
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
20
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x371980d
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
21
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3aeeb7b
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2ee0d1c
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
23
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3aee8b0
Build id: 819997624ed9d6c2b880c0871117d4f65ba9878d 		-
24
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x52a7f
Build id: 971cf4f2eb981d3640fae93c7fa8c3c05d81f446 		-
25
main
/usr/lib64/firefox/firefox 0x43f25
Build id: 971cf4f2eb981d3640fae93c7fa8c3c05d81f446 		-
26
__libc_start_call_main
/lib64/libc.so.6 0x2d560
Build id: 148792ddec60e0b15e20655fdc10c35a5c394413 		-
27
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2d60c
Build id: 148792ddec60e0b15e20655fdc10c35a5c394413 		-
28
_start
/usr/lib64/firefox/firefox 0x52685
Build id: 971cf4f2eb981d3640fae93c7fa8c3c05d81f446 		-