Crash in js::TraceManuallyBarrieredGenericPointerEdge(JSTracer*, js::gc::Cell**, char const*)

Similar reports
Problem #395128
Component
firefox
Last affected version
0:96.0-1.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-12-13
Last occurrence
2022-06-12
Unique reports
6
Quality
-62

Graphs

Statistics

Operating system Unique / Total count
Fedora 34 6 / 7
Fedora 35 6 / 6
Operating system Count
Fedora 34 7
Fedora 35 6
Architecture Count
x86_64 13
Related packages Count
firefox 6
 0:95.0-1.fc35 3
 0:95.0.2-2.fc35 1
 0:96.0-1.fc35 1
 0:95.0.2-2.fc34 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::TraceManuallyBarrieredGenericPointerEdge(JSTracer*, js::gc::Cell**, char const*)
/usr/lib64/firefox/libxul.so 0x2ce6a51
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
2
js::PrivateScriptData::trace(JSTracer*)
/usr/lib64/firefox/libxul.so 0x2ca7446
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
3
js::GCMarker::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2ce573b
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
4
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x3d47132
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
5
js::gc::GCRuntime::markGray(JSFreeOp*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3d5e55f
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
6
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3d5e023
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
7
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3d5df7b
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
8
js::gc::GCRuntime::performSweepActions(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3d5de95
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
9
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x3d4540d
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
10
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3d44979
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
11
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3d4443a
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
12
js::gc::GCRuntime::gcSlice(JS::GCReason, long)
/usr/lib64/firefox/libxul.so 0x3d49555
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
13
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsIncremental, nsJSContext::IsShrinking, long)
/usr/lib64/firefox/libxul.so 0x32de427
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
14
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x325526c
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
15
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x3254f09
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
16
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2d9b91f
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
17
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2d9ba2c
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
18
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2b4cdd7
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
19
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2b4c68c
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
20
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x2db1f56
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
21
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2b4b887
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
22
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2b4aec0
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
23
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2b68a6a
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
24
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2f316dc
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
25
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x377a6cd
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
26
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3b7b06b
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
27
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2f316dc
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
28
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3b7ada0
Build id: 9aea9561afa6ede3a8ccfc6a0b742cee43c2b5c6 		-
29
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x5278f
Build id: dad3fe1b6a7f3e72a13c0862066238f81f43097b 		-
30
main
/usr/lib64/firefox/firefox 0x43f55
Build id: dad3fe1b6a7f3e72a13c0862066238f81f43097b 		-
31
anonymous function
/usr/lib64/libc.so.6 (deleted) 0x2d560
Build id: bd53c3d9c280f83262f145bc19b2036b866c88ba 		-