Crash in js::TenuringTracer::collectToObjectFixedPoint()

Note: Executable of this report does not come from a package.
Similar reports
Problem #395137
Component
firefox
Last affected version
N/A
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-05-04
Last occurrence
2022-06-24
Unique reports
2
Quality
-18

Statistics

Operating system Unique / Total count
Fedora 35 2 / 2
Operating system Count
Fedora 35 2
Architecture Count
x86_64 2

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::TenuringTracer::collectToObjectFixedPoint()
/usr/lib64/firefox/libxul.so 0x2ead786
Build id: 03dfd5977fa5a676c5477071e009e6f19d46177e 		-
2
js::Nursery::doCollection(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3f7281d
Build id: 03dfd5977fa5a676c5477071e009e6f19d46177e 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2ea05ad
Build id: 03dfd5977fa5a676c5477071e009e6f19d46177e 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3f64bc2
Build id: 03dfd5977fa5a676c5477071e009e6f19d46177e 		-
5
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3f64a85
Build id: 03dfd5977fa5a676c5477071e009e6f19d46177e 		-
6
JSObject* js::AllocateObject<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap, JSClass const*, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x3f61663
Build id: 03dfd5977fa5a676c5477071e009e6f19d46177e 		-
7
js::NewObjectWithGivenTaggedProto(JSContext*, JSClass const*, JS::Handle<js::TaggedProto>, js::gc::AllocKind, js::NewObjectKind)
/usr/lib64/firefox/libxul.so 0x2e512f6
Build id: 03dfd5977fa5a676c5477071e009e6f19d46177e 		-
8
js::CloneRegExpObject(JSContext*, JS::Handle<js::RegExpObject*>)
/usr/lib64/firefox/libxul.so 0x2e63d8a
Build id: 03dfd5977fa5a676c5477071e009e6f19d46177e 		-
9
anonymous function
/home/faf/unknown filename 0x12bdc9e5956a -