Crash in arena_t::DallocSmall(arena_chunk_t*, void*, arena_chunk_map_t*) [clone .isra.0] [clone .cold]

Similar reports
Problem #524745
Component
firefox
Last affected version
0:107.0-4.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-02-07
Last occurrence
2024-02-13
Unique reports
1
Quality
-74

Graphs

Statistics

Operating system Unique / Total count
Fedora 35 1 / 1
Fedora 37 1 / 1
Operating system Count
Fedora 35 1
Fedora 37 1
Architecture Count
x86_64 2
Related packages Count
firefox 1
 0:107.0-4.fc35 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
arena_t::DallocSmall(arena_chunk_t*, void*, arena_chunk_map_t*) [clone .isra.0] [clone .cold]
/usr/lib64/firefox/firefox 0xe257
Build id: 1e62015f16d914af29c262b262af4c9e4631ac59 		-
2
free
/usr/lib64/firefox/firefox 0x199ea
Build id: 1e62015f16d914af29c262b262af4c9e4631ac59 		-
3
js::SetObject::finalize(JS::GCContext*, JSObject*)
/usr/lib64/firefox/libxul.so 0x4db7f1b
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
4
bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x525c631
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
5
js::gc::GCRuntime::finalizeAllocKind(JS::GCContext*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x52610f1
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
6
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x525b955
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
7
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x525b89c
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
8
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x525b68e
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
9
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x525b89c
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
10
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x5261775
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
11
js::gc::GCRuntime::performSweepActions(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x52636cb
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
12
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x52324c7
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
13
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x5232b6b
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
14
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x5232d9f
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
15
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&)
/usr/lib64/firefox/libxul.so 0x1c59f1d
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
16
nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x1c6217b
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
17
mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&)
/usr/lib64/firefox/libxul.so 0x1acef22
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
18
mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x1ad5428
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
19
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0xca4a1c
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
20
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0xca4b12
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
21
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xcad702
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
22
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xcaf304
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
23
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xcaf433
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
24
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0xcaf4d6
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
25
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xcd1bb9
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
26
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xcbe72f
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
27
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x1358eba
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
28
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1316372
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
29
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3815b3c
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
30
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4cd3d36
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
31
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1316372
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
32
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4cd41d1
Build id: 609a12445960d87bc84fb49dbca4dd1ff90e94dd 		-
33
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x1065a
Build id: 1e62015f16d914af29c262b262af4c9e4631ac59 		-
34
main
/usr/lib64/firefox/firefox 0xfd2b
Build id: 1e62015f16d914af29c262b262af4c9e4631ac59 		-
35
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
36
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
37
_start
/usr/lib64/firefox/firefox 0x10095
Build id: 1e62015f16d914af29c262b262af4c9e4631ac59 		-