Crash in void js::GCMarker::markAndTraverse<4u, js::Shape>(js::Shape*)

Similar reports
Problem #293882
Component
firefox
Last affected version
0:110.0-3.fc37
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-01-22
Last occurrence
2024-02-13
Unique reports
17
Quality
-64

Graphs

Statistics

Operating system Unique / Total count
Fedora 36 1 / 1
Fedora 37 17 / 19
Operating system Count
Fedora 37 19
Fedora 36 1
Architecture Count
x86_64 20
Related packages Count
firefox 2
 0:110.0-3.fc36 1
 0:110.0-3.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
void js::GCMarker::markAndTraverse<4u, js::Shape>(js::Shape*)
/usr/lib64/firefox/libxul.so 0x524782a
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
2
void js::GCMarker::processMarkStackTop<4u>(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x524a512
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
3
bool js::GCMarker::doMarking<4u>(js::SliceBudget&, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x524b168
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
4
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x521fbab
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
5
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x523434d
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
6
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x5234aab
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
7
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x5234cdf
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
8
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x1c5b39d
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
9
nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x1c635fb
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
10
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x1ad03a2
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
11
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1ad68a8
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
12
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0xca5e9c
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
13
mozilla::TimedOut(nsITimer*, void*)
/usr/lib64/firefox/libxul.so 0xca5fe1
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
14
nsTimerImpl::Fire(int)
/usr/lib64/firefox/libxul.so 0xccfa8a
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
15
nsTimerEvent::Run()
/usr/lib64/firefox/libxul.so 0xccfd3b
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xcae81f
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
17
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xcb05fd
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xcb08b3
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
19
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0xcb0956
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xcd3039
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
21
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xcbfbaf
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
22
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x135a34a
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1317802
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
24
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3817c0c
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
25
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4cd5c76
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
26
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1317802
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
27
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4cd6111
Build id: 817737124cfc8439ad8e76aeafcd4f6b1082f1c7
-
28
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x1065a
Build id: e72b6196fdc030528b720461777cbb578de05710
-
29
main
/usr/lib64/firefox/firefox 0xfd2b
Build id: e72b6196fdc030528b720461777cbb578de05710
-
30
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 81daba31ee66dbd63efdc4252a872949d874d136
-
31
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 81daba31ee66dbd63efdc4252a872949d874d136
-
32
_start
/usr/lib64/firefox/firefox 0x10095
Build id: e72b6196fdc030528b720461777cbb578de05710
-