Crash in js::TenuringTracer::collectToObjectFixedPoint()

Similar reports
Problem #395137
Component
firefox
Last affected version
0:96.0.3-1.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-01-29
Last occurrence
2023-08-24
Unique reports
5
Quality
-18

Graphs

Statistics

Operating system Unique / Total count
Fedora 34 2 / 2
Fedora 35 10 / 10
Fedora 36 5 / 5
Operating system Count
Fedora 35 10
Fedora 36 5
Fedora 34 2
Architecture Count
x86_64 17
Related packages Count
firefox 4
 0:96.0-1.fc35 2
 0:96.0.3-1.fc35 1
 0:101.0-1.fc36 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::TenuringTracer::collectToObjectFixedPoint()
/usr/lib64/firefox/libxul.so 0x2d9fad7
Build id: 987c942c7bb2d7052494549b035713a070563492 		-
2
js::Nursery::doCollection(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3e3762d
Build id: 987c942c7bb2d7052494549b035713a070563492 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3e37150
Build id: 987c942c7bb2d7052494549b035713a070563492 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3e2a482
Build id: 987c942c7bb2d7052494549b035713a070563492 		-
5
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3e2a345
Build id: 987c942c7bb2d7052494549b035713a070563492 		-
6
JSObject* js::AllocateObject<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap, JSClass const*, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x3e272c3
Build id: 987c942c7bb2d7052494549b035713a070563492 		-
7
js::NativeObject::create(JSContext*, js::gc::AllocKind, js::gc::InitialHeap, JS::Handle<js::Shape*>, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x3c82d90
Build id: 987c942c7bb2d7052494549b035713a070563492 		-
8
js::NewPlainObjectOptimizedFallback(JSContext*, JS::Handle<js::Shape*>, js::gc::AllocKind, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x3c8a4b7
Build id: 987c942c7bb2d7052494549b035713a070563492 		-
9
anonymous function
/home/faf/unknown filename 0xb3927f8ba92 -