Crash in js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::CellPtrEdge<JSObject> >::trace(js::TenuringTracer&)

Similar reports
Problem #285782
Component
firefox
Last affected version
0:94.0-1.fc33
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-05-13
Last occurrence
2026-01-24
Unique reports
1
Quality
-20

Graphs

Statistics

Operating system Unique / Total count
Fedora 33 2 / 2
Fedora 34 1 / 1
Operating system Count
Fedora 33 2
Fedora 34 1
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:94.0-1.fc33 2
 0:93.0-2.fc34 1
mesa-dri-drivers 2
 0:20.3.5-2.fc33 2
abattis-cantarell-fonts 1
 0:0.301-1.fc33 1
Show more… (9)
urw-base35-nimbus-roman-fonts 1
 0:20200910-6.fc33 1
libedit 1
 0:3.1-38.20210714cvs.fc33 1
fdk-aac-free 1
 0:2.0.0-5.fc33 1
ncurses-libs 1
 0:6.2-3.20200222.fc33 1
liberation-sans-fonts 1
 1:2.1.5-1.fc33 1
libxshmfence 1
 0:1.3-7.fc33 1
urw-base35-bookman-fonts 1
 0:20200910-6.fc33 1
dejavu-sans-fonts 1
 0:2.37-15.fc33 1
llvm-libs 1
 0:11.0.0-1.fc33 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::CellPtrEdge<JSObject> >::trace(js::TenuringTracer&)
/usr/lib64/firefox/libxul.so 0x3cc906a
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
2
js::Nursery::traceRoots(js::gc::AutoGCSession&, js::TenuringTracer&)
/usr/lib64/firefox/libxul.so 0x3cb3e0d
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
3
js::Nursery::doCollection(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3cb39cc
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
4
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3cb34f6
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
5
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3ca50fa
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
6
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3ca4f67
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
7
JSObject* js::AllocateObject<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap, JSClass const*, js::gc::AllocSite*)
/usr/lib64/firefox/libxul.so 0x3ca1d8a
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
8
js::CloneFunctionReuseScript(JSContext*, JS::Handle<JSFunction*>, JS::Handle<JSObject*>, JS::Handle<JSObject*>)
/usr/lib64/firefox/libxul.so 0x2c230a9
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
9
js::Lambda(JSContext*, JS::Handle<JSFunction*>, JS::Handle<JSObject*>)
/usr/lib64/firefox/libxul.so 0x2bf6704
Build id: ef88d53f0071042abc9b5002e2aca875d6aa8033 		-
10
anonymous function
/home/faf/unknown filename 0xfc4c025a36e -