Crash in js::ShapeZone::fixupPropMapShapeTableAfterMovingGC()

Note: Executable of this report does not come from a package.
Similar reports
Problem #161603
Component
firefox
Last affected version
N/A
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-03-19
Last occurrence
2022-04-20
Unique reports
2
Quality
-58

Graphs

Statistics

Operating system Unique / Total count
Fedora 34 1 / 1
Fedora 35 2 / 2
Operating system Count
Fedora 35 2
Fedora 34 1
Architecture Count
x86_64 3

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::ShapeZone::fixupPropMapShapeTableAfterMovingGC()
/usr/lib64/firefox/libxul.so 0x2e46826
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
2
js::gc::GCRuntime::updateZonePointersToRelocatedCells(JS::Zone*)
/usr/lib64/firefox/libxul.so 0x3f12363
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
3
js::gc::GCRuntime::compactPhase(JS::GCReason, js::SliceBudget&, js::gc::AutoGCSession&)
/usr/lib64/firefox/libxul.so 0x3f1184c
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
4
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x3f0cd59
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
5
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3f0c243
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
6
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3f0bdff
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
7
js::gc::GCRuntime::gcSlice(JS::GCReason, js::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x3f109fe
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
8
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x346b86d
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
9
nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)
/usr/lib64/firefox/libxul.so 0x346b769
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
10
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x33e41f8
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
11
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x33e3e99
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
12
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2f2424f
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
13
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2f2447c
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
14
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2cdd99a
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
15
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2cdd25a
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
16
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x2f3b326
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
17
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2cdc3e7
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
18
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2cdba30
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
19
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cf7baa
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
20
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x30b8f9c
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
21
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3906ebd
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
22
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3d4535b
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x30b8f9c
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
24
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3d450ac
Build id: d27ff556e42f9d534bcbea732640a613b19b2bc9 		-
25
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x53abf
Build id: ddcac6baf41ae8c522fee543e930efd7c5bd1aff 		-
26
main
/usr/lib64/firefox/firefox 0x46bc5
Build id: ddcac6baf41ae8c522fee543e930efd7c5bd1aff 		-
27
__libc_start_call_main
/lib64/libc.so.6 0x2d560
Build id: 6d847f497e836e0c0db41da9b27e2527e6e85f74 		-
28
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2d60c
Build id: 6d847f497e836e0c0db41da9b27e2527e6e85f74 		-
29
_start
/usr/lib64/firefox/firefox 0x536c5
Build id: ddcac6baf41ae8c522fee543e930efd7c5bd1aff 		-