Crash in js::GCMarker::eagerlyMarkChildren(js::Scope*)

Similar reports
Problem #524745
Component
firefox
Last affected version
0:107.0-4.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-11-06
Last occurrence
2026-01-08
Unique reports
5
Quality
-64

Graphs

Statistics

Operating system Unique / Total count
Fedora 35 9 / 9
Fedora 36 3 / 4
Fedora 37 5 / 6
Operating system Count
Fedora 35 9
Fedora 37 6
Fedora 36 4
Architecture Count
x86_64 19
Related packages Count
firefox 6
 0:107.0-4.fc35 5
 0:106.0.1-1.fc37 1
fdk-aac-free 2
 0:2.0.0-7.fc35 2
liberation-sans-fonts 1
 1:2.1.5-1.fc35 1
Show more… (7)
google-noto-sans-cjk-ttc-fonts 1
 0:20201206-5.fc37 1
dejavu-sans-fonts 1
 0:2.37-17.fc35 1
liberation-mono-fonts 1
 1:2.1.5-1.fc35 1
dejavu-serif-fonts 1
 0:2.37-17.fc35 1
dejavu-sans-mono-fonts 1
 0:2.37-17.fc35 1
google-carlito-fonts 1
 0:1.103-0.17.20130920.fc35 1
liberation-serif-fonts 1
 1:2.1.5-1.fc35 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::GCMarker::eagerlyMarkChildren(js::Scope*)
/usr/lib64/firefox/libxul.so 0x5164940
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
2
js::TraceManuallyBarrieredGenericPointerEdge(JSTracer*, js::gc::Cell**, char const*)
/usr/lib64/firefox/libxul.so 0x515c140
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
3
js::PrivateScriptData::trace(JSTracer*)
/usr/lib64/firefox/libxul.so 0x4dd74a0
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
4
js::GCMarker::processMarkStackTop(js::SliceBudget&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x5166f52
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
5
js::GCMarker::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x51680f0
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
6
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::GCMarker::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x514193c
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
7
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x5155699
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
8
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x5155deb
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
9
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x515601f
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
10
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x1c213bd
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
11
nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x1c2955b
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
12
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x1a99292
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
13
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1a9f6b8
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
14
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0xc9167c
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
15
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0xc91772
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xcbc95d
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
17
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xcbcf3b
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xcbd073
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
19
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0xcbd0e6
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xcbd789
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
21
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xca9b3f
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
22
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x133642a
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12f4572
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
24
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x378a47c
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
25
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4c14c86
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
26
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12f4572
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
27
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4c15193
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
28
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x106ea
Build id: 12107c8a732ff000935fddc46816d00734924ef8 		-
29
main
/usr/lib64/firefox/firefox 0xfdbb
Build id: 12107c8a732ff000935fddc46816d00734924ef8 		-
30
__libc_start_call_main
/lib64/libc.so.6 0x29510
Build id: 85c438f4ff93e21675ff174371c9c583dca00b2c 		-
31
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x295c9
Build id: 85c438f4ff93e21675ff174371c9c583dca00b2c 		-
32
_start
/usr/lib64/firefox/firefox 0x10125
Build id: 12107c8a732ff000935fddc46816d00734924ef8 		-