Crash in js::ReportBadValueTypeAndCrash(JS::Value const&)

Note: Executable of this report does not come from a package.
Similar reports
Problem #98982
Component
firefox
Last affected version
N/A
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-01-19
Last occurrence
2021-01-19
Unique reports
1
Quality
-24

Statistics

Operating system Unique / Total count
Fedora 33 1 / 1
Operating system Count
Fedora 33 1
Architecture Count
x86_64 1
Related packages Count
x265-libs 1
 0:3.4-3.fc33 1
xvidcore 1
 0:1.3.7-4.fc33 1
ffmpeg-libs 1
 0:4.3.1-16.fc33 1
Show more… (3)
opencore-amr 1
 0:0.1.5-11.fc33 1
vo-amrwbenc 1
 0:0.1.3-13.fc33 1
x264-libs 1
 0:0.160-2.20200702gitcde9a93.fc33 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::ReportBadValueTypeAndCrash(JS::Value const&)
/usr/lib64/firefox/libxul.so 0x2866025
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
2
js::TenuringTracer::traceObject(JSObject*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x28eac8d
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
3
js::Nursery::collectToFixedPoint(js::TenuringTracer&, js::gc::TenureCountCache&)
/usr/lib64/firefox/libxul.so 0x2c473eb
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
4
js::Nursery::doCollection(JS::GCReason, js::gc::TenureCountCache&)
/usr/lib64/firefox/libxul.so 0x3bf1dd1
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
5
js::Nursery::collect(JSGCInvocationKind, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2c3fb56
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
6
js::gc::GCRuntime::collectNursery(JSGCInvocationKind, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3bd5389
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
7
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3bd51ef
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
8
JSObject* js::AllocateObject<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap, JSClass const*)
/usr/lib64/firefox/libxul.so 0x3bd6d64
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
9
NewObject(JSContext*, JS::Handle<js::ObjectGroup*>, js::gc::AllocKind, js::NewObjectKind, unsigned int)
/usr/lib64/firefox/libxul.so 0x2be8c68
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
10
js::NewObjectWithClassProto(JSContext*, JSClass const*, JS::Handle<JSObject*>, js::gc::AllocKind, js::NewObjectKind)
/usr/lib64/firefox/libxul.so 0x2be9c69
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
11
js::CloneFunctionReuseScript(JSContext*, JS::Handle<JSFunction*>, JS::Handle<JSObject*>, js::gc::AllocKind, JS::Handle<JSObject*>)
/usr/lib64/firefox/libxul.so 0x2bed62b
Build id: a51b80f27b9591c7395eb00912a1ff66f77716f2 		-
12
anonymous function
/home/faf/unknown filename 0xf1258e4d6fe -