Crash in void DoMarking<JSObject>(js::GCMarker*, JSObject*)

Similar reports
Problem #380628
Component
firefox
Last affected version
0:91.13.0-1.el7.centos
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-09-20
Last occurrence
2026-10-08
Unique reports
3
Quality
-54

Statistics

Operating system Unique / Total count
CentOS 7 3 / 4
Operating system Count
CentOS 7 4
Architecture Count
x86_64 4
Related packages Count
libgpg-error 4
 0:1.12-3.el7 4
libattr 4
 0:2.4.46-13.el7 4
libgcrypt 4
 0:1.5.3-14.el7 4
Show more… (75)
fontconfig 4
 0:2.13.0-4.3.el7 4
libxcb 4
 0:1.13-1.el7 4
cairo 4
 0:1.15.12-4.el7 4
libxkbcommon 4
 0:0.7.1-3.el7 4
libXau 4
 0:1.0.8-2.1.el7 4
libwayland-client 4
 0:1.15.0-1.el7 4
libblkid 4
 0:2.23.2-65.el7_9.1 4
systemd-libs 4
 0:219-78.el7_9.7 2
 0:219-78.el7_9.5 2
libXrender 4
 0:0.9.10-1.el7 4
gtk3 4
 0:3.22.30-8.el7_9 4
libXext 4
 0:1.3.3-3.el7 4
libffi 4
 0:3.0.13-19.el7 4
pixman 4
 0:0.34.0-1.el7 4
dbus-libs 4
 1:1.10.24-15.el7 4
glibc-common 4
 0:2.17-326.el7_9 4
freetype 4
 0:2.8-14.el7_9.1 4
firefox 4
 0:91.11.0-2.el7.centos 2
 0:91.13.0-1.el7.centos 2
libcap 4
 0:2.22-11.el7 4
libuuid 4
 0:2.23.2-65.el7_9.1 4
nss-util 4
 0:3.67.0-1.el7_9 3
 0:3.79.0-1.el7_9 1
libgcc 4
 0:4.8.5-44.el7 4
glibc 4
 0:2.17-326.el7_9 4
libSM 4
 0:1.2.2-2.el7 4
libpng 4
 2:1.5.13-8.el7 4
harfbuzz 4
 0:1.7.5-2.el7 4
elfutils-libelf 4
 0:0.176-5.el7 4
sqlite 4
 0:3.7.17-8.el7_7.1 4
zlib 4
 0:1.2.7-20.el7_9 4
gdk-pixbuf2 4
 0:2.36.12-3.el7 4
libX11 4
 0:1.6.7-4.el7_9 4
libglvnd-egl 4
 1:1.0.1-0.8.git5baa1e5.el7 4
libglvnd 4
 1:1.0.1-0.8.git5baa1e5.el7 4
expat 4
 0:2.1.0-14.el7_9 3
 0:2.1.0-15.el7_9 1
libXrandr 4
 0:1.5.1-2.el7 4
libXi 4
 0:1.7.9-1.el7 4
nspr 4
 0:4.32.0-1.el7_9 3
 0:4.34.0-3.1.el7_9 1
nss 4
 0:3.67.0-4.el7_9 3
 0:3.79.0-4.el7_9 1
pango 4
 0:1.42.4-4.el7_7 4
libselinux 4
 0:2.5-15.el7 4
xz-libs 4
 0:5.2.2-2.el7_9 4
libwayland-egl 4
 0:1.15.0-1.el7 4
at-spi2-atk 4
 0:2.26.2-1.el7 4
glib2 4
 0:2.56.1-9.el7_9 4
nss-softokn 4
 0:3.67.0-3.el7_9 3
 0:3.79.0-4.el7_9 1
libthai 4
 0:0.1.14-9.el7 4
libstdc++ 4
 0:4.8.5-44.el7 4
pcre 4
 0:8.32-17.el7 4
lz4 4
 0:1.8.3-1.el7 4
elfutils-libs 4
 0:0.176-5.el7 4
atk 4
 0:2.28.1-2.el7 4
libglvnd-glx 4
 1:1.0.1-0.8.git5baa1e5.el7 4
graphite2 4
 0:1.3.10-1.el7_3 4
bzip2-libs 4
 0:1.0.6-13.el7 4
libXcomposite 4
 0:0.4.4-4.1.el7 4
fribidi 4
 0:1.0.2-1.el7_7.1 4
libXinerama 4
 0:1.1.3-2.1.el7 4
libmount 4
 0:2.23.2-65.el7_9.1 4
libXdamage 4
 0:1.1.4-4.1.el7 4
urw-base35-nimbus-sans-fonts 3
 0:20170801-10.el7 3
nss-softokn-freebl 2
 0:3.79.0-4.el7_9 1
 0:3.67.0-3.el7_9 1
libICE 2
 0:1.0.9-9.el7 2
at-spi2-core 2
 0:2.28.0-1.el7 2
libXfixes 2
 0:5.0.3-1.el7 2
cairo-gobject 2
 0:1.15.12-4.el7 2
libXcursor 2
 0:1.1.15-1.el7 2
libXt 2
 0:1.1.5-3.el7 2
dbus-glib 2
 0:0.100-7.el7 2
libwayland-cursor 2
 0:1.15.0-1.el7 2
dejavu-sans-fonts 2
 0:2.33-6.el7 2
abattis-cantarell-fonts 2
 0:0.0.25-1.el7 2
libepoxy 2
 0:1.5.2-1.el7 2
dejavu-serif-fonts 1
 0:2.33-6.el7 1
paratype-pt-sans-fonts 1
 0:20101909-3.el7 1
liberation-sans-fonts 1
 1:1.07.2-16.el7 1
wqy-zenhei-fonts 1
 0:0.9.46-11.el7 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
void DoMarking<JSObject>(js::GCMarker*, JSObject*)
/usr/lib64/firefox/libxul.so 0x491e314
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
2
bool js::gc::TraceEdgeInternal<JSObject*>(JSTracer*, JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x491e388
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
3
js::BaseScript::traceChildren(JSTracer*)
/usr/lib64/firefox/libxul.so 0x4924700
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
4
js::GCMarker::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x492509a
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
5
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x48eef7f
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
6
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x490dff7
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
7
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x490e65d
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
8
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, mozilla::Maybe<JS::GCOptions> const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x490ea1d
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
9
JS::IncrementalGCSlice(JSContext*, JS::GCReason, long)
/usr/lib64/firefox/libxul.so 0x4911331
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
10
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsIncremental, nsJSContext::IsShrinking, long)
/usr/lib64/firefox/libxul.so 0x1ca841e
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
11
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1b62ce1
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
12
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0xb6baa8
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
13
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0xb6bbbf
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
14
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xb8f12c
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
15
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xb8f753
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
16
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xb8f8d0
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
17
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0xb8f982
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
18
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xb918a3
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
19
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xb7ebb8
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
20
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x113ab6a
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x10f52b5
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
22
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x33a64d8
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
23
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4408e73
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
24
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x10f52b5
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
25
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4409277
Build id: 33a2040838ad45c2e8f7c9f206bce5520788969f 		-
26
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x16287
Build id: a3a11d92b67dd92d7c4abe59317564aaf654f376 		-
27
main
/usr/lib64/firefox/firefox 0x15a50
Build id: a3a11d92b67dd92d7c4abe59317564aaf654f376 		-