Crash in js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::CellPtrEdge<JSObject> >::trace(js::TenuringTracer&)

Note: Executable of this report does not come from a package.
Similar reports
Problem #395137
Component
firefox
Last affected version
N/A
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-03-23
Last occurrence
2023-01-07
Unique reports
1
Quality
-20

Graphs

Statistics

Operating system Unique / Total count
Fedora 34 1 / 1
Fedora 35 2 / 2
Fedora 36 1 / 1
Operating system Count
Fedora 35 2
Fedora 34 1
Fedora 36 1
Architecture Count
x86_64 4

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::CellPtrEdge<JSObject> >::trace(js::TenuringTracer&)
/usr/lib64/firefox/libxul.so 0x3e8b041
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
2
js::Nursery::traceRoots(js::gc::AutoGCSession&, js::TenuringTracer&)
/usr/lib64/firefox/libxul.so 0x3e7747d
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
3
js::Nursery::doCollection(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3e77045
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
4
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3e76ba0
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
5
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3e69c92
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
6
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3e69b55
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
7
JSObject* js::AllocateObject<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap, JSClass const*, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x3e66b63
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
8
js::NativeObject::create(JSContext*, js::gc::AllocKind, js::gc::InitialHeap, JS::Handle<js::Shape*>, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x3cc61d0
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
9
js::NewPlainObjectOptimizedFallback(JSContext*, JS::Handle<js::Shape*>, js::gc::AllocKind, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x3ccd597
Build id: b64afc240e91196d3277199940121831d616a2b9 		-
10
anonymous function
/home/faf/unknown filename 0x25a64b14aa92 -