Crash in huge_dalloc(void*, arena_t*)

Similar reports
Problem #497421
Component
firefox
Last affected version
0:75.0-1.fc31
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-01-19
Last occurrence
2021-01-21
Unique reports
3
Quality
-32

Statistics

Operating system Unique / Total count
Fedora 31 3 / 3
Operating system Count
Fedora 31 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:75.0-1.fc31 3
mesa-libEGL 2
 0:19.2.8-1.fc31 2
nss-util 2
 0:3.51.0-1.fc31 2
Show moreā€¦ (19)
nspr 2
 0:4.25.0-1.fc31 2
mesa-libgbm 2
 0:19.2.8-1.fc31 2
libgcc 2
 0:9.3.1-1.fc31 2
libstdc++ 2
 0:9.3.1-1.fc31 2
pcre2 2
 0:10.34-8.fc31 2
nss-softokn-freebl 2
 0:3.51.0-1.fc31 2
nss-softokn 2
 0:3.51.0-1.fc31 2
p11-kit-trust 2
 0:0.23.20-1.fc31 2
mesa-libglapi 2
 0:19.2.8-1.fc31 2
p11-kit 2
 0:0.23.20-1.fc31 2
glib2 2
 0:2.62.6-1.fc31 2
nss 2
 0:3.51.0-1.fc31 2
gtk3 2
 0:3.24.13-1.fc31 2
glibc-langpack-fr 2
 0:2.30-11.fc31 2
glibc-all-langpacks 2
 0:2.30-11.fc31 2
glibc 2
 0:2.30-11.fc31 2
libX11-xcb 2
 0:1.6.9-2.fc31 2
mesa-dri-drivers 2
 0:19.2.8-1.fc31 2
libX11 2
 0:1.6.9-2.fc31 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
huge_dalloc(void*, arena_t*)
/usr/lib64/firefox/firefox 0x1662e
Build id: 67812682a9570f6feefffe43f77105481e9bab24
-
2
unsigned long js::gc::Arena::finalize<JSObject>(JSFreeOp*, js::gc::AllocKind, unsigned long)
/usr/lib64/firefox/libxul.so 0x47d1d5d
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
3
bool FinalizeTypedArenas<JSObject>(JSFreeOp*, js::gc::Arena**, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x47d1f34
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
4
FinalizeArenas(JSFreeOp*, js::gc::Arena**, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x47d3590
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
5
js::gc::ArenaLists::backgroundFinalize(JSFreeOp*, js::gc::Arena*, js::gc::Arena**)
/usr/lib64/firefox/libxul.so 0x47d41af
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
6
js::gc::GCRuntime::sweepBackgroundThings(js::gc::ZoneList&, js::LifoAlloc&) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x47d58ad
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
7
js::gc::GCRuntime::sweepFromBackgroundThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x47d5d38
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
8
js::gc::BackgroundSweepTask::run()
/usr/lib64/firefox/libxul.so 0x47d619f
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
9
js::GCParallelTask::runTask()
/usr/lib64/firefox/libxul.so 0x47baeb7
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
10
js::GCParallelTask::runFromHelperThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x47ce61d
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
11
js::HelperThread::handleGCParallelWorkload(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x4440081
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
12
js::HelperThread::threadLoop()
/usr/lib64/firefox/libxul.so 0x444346c
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
13
js::HelperThread::ThreadMain(void*)
/usr/lib64/firefox/libxul.so 0x44434a8
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
14
js::detail::ThreadTrampoline<void (&)(void*), js::HelperThread*>::Start(void*)
/usr/lib64/firefox/libxul.so 0x443f609
Build id: a854cd978c95a872e3e9607a8fb8fd1f363b0fc0
-
15
start_thread
/lib64/libpthread.so.0 0x94e2
Build id: c884b569c06fe8ef964bc6d508438a1337dc953c
-
16
__clone
/lib64/libc.so.6 0x1016a3
Build id: 7cad4f745bde5c52c2da346d8b5e5b57008d896c
-