Crash in unsigned long js::gc::Arena::finalize<JSObject>(JS::GCContext*, js::gc::AllocKind, unsigned long)

Similar reports
Problem #499303
Component
firefox
Last affected version
0:105.0.2-1.fc36
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-08-10
Last occurrence
2025-01-02
Unique reports
1
Quality
-32

Graphs

Statistics

Operating system Unique / Total count
Fedora 35 14 / 14
Fedora 36 118 / 121
Fedora 37 1 / 1
Operating system Count
Fedora 36 121
Fedora 35 14
Fedora 37 1
Architecture Count
x86_64 136
Related packages Count
firefox 14
 0:105.0.2-1.fc36 8
 0:103.0.1-1.fc36 4
 0:105.0.2-1.fc35 1
 0:104.0.1-1.fc35 1
libbrotli 2
 0:1.0.9-7.fc36 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
unsigned long js::gc::Arena::finalize<JSObject>(JS::GCContext*, js::gc::AllocKind, unsigned long)
/usr/lib64/firefox/libxul.so 0x3e53a0a
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
2
bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x3e534e2
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
3
js::gc::GCRuntime::backgroundFinalize(JS::GCContext*, JS::Zone*, js::gc::AllocKind, js::gc::Arena**)
/usr/lib64/firefox/libxul.so 0x2d373c5
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
4
js::gc::GCRuntime::sweepBackgroundThings(js::gc::ZoneList&)
/usr/lib64/firefox/libxul.so 0x3e54365
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
5
js::gc::GCRuntime::sweepFromBackgroundThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3e5424a
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
6
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3e45808
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
7
js::GCParallelTask::runHelperThreadTask(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3e45791
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
8
js::GlobalHelperThreadState::runTaskLocked(js::HelperThreadTask*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3cc861b
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
9
js::GlobalHelperThreadState::runOneTask(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3cc83ad
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
10
JS::RunHelperThreadTask()
/usr/lib64/firefox/libxul.so 0x3cc835a
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
11
HelperThreadTaskHandler::Run()
/usr/lib64/firefox/libxul.so 0x2fdf48a
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
12
mozilla::TaskController::RunPoolThread()
/usr/lib64/firefox/libxul.so 0x2dc702d
Build id: d085f0649678c6c6763cbefe830388206b2d368c 		-
13
_pt_root
/lib64/libnspr4.so 0x2c413
Build id: 98f94ddf59984aec246bf5a21a3bb1a1264908a4 		-
14
set_alt_signal_stack_and_start(PthreadCreateParams*)
/usr/lib64/firefox/firefox 0x72e26
Build id: cb79e94d58178bf1cff97c034a2930aefac12cbb 		-
15
start_thread
/lib64/libc.so.6 0x8ce2d
Build id: 6f5ce514a9e7f51e0247a527c3a41ed981c04458 		-
16
__clone3
/lib64/libc.so.6 0x1121b0
Build id: 6f5ce514a9e7f51e0247a527c3a41ed981c04458 		-