Crash in bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)

Similar reports
Problem #595318
Component
firefox
Last affected version
0:119.0.1-1.fc39
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-07-22
Last occurrence
2026-10-31
Unique reports
36
Quality
-18

Graphs

Statistics

Operating system Unique / Total count
Fedora 37 19 / 23
Fedora 38 125 / 212
Fedora 39 36 / 42
Operating system Count
Fedora 38 212
Fedora 39 42
Fedora 37 23
Architecture Count
x86_64 277
Related packages Count
firefox 244
 0:118.0-1.fc38 42
 0:118.0.2-1.fc38 42
 0:117.0-1.fc38 34
 0:119.0-1.fc38 29
 0:117.0.1-1.fc38 21
 0:119.0.1-1.fc39 17
 0:118.0.1-7.fc38 16
 0:119.0-2.fc38 7
 0:119.0-5.fc38 6
 0:116.0.2-1.fc38 5
 0:118.0-1.fc37 5
 0:118.0.1-4.fc38 5
 0:119.0-5.fc39 5
 0:119.0-2.fc39 3
 0:115.0.2-3.fc38 3
 0:119.0.1-1.fc38 2
 0:118.0.2-1.fc39 1
 0:118.0.2-1.fc37 1
google-noto-serif-vf-fonts 3
 0:20230201-1.fc38 2
 0:20230801-3.fc39 1
google-noto-sans-vf-fonts 3
 0:20230201-1.fc38 3
liberation-sans-fonts 1
 1:2.1.5-7.fc39 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x32e8395
Build id: 36fa942427fe822bb9eda0d1727bc54853cb42a1 		-
2
js::gc::GCRuntime::backgroundFinalize(JS::GCContext*, JS::Zone*, js::gc::AllocKind, js::gc::Arena**)
/usr/lib64/firefox/libxul.so 0x32ead67
Build id: 36fa942427fe822bb9eda0d1727bc54853cb42a1 		-
3
js::gc::BackgroundSweepTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x372c65e
Build id: 36fa942427fe822bb9eda0d1727bc54853cb42a1 		-
4
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x36d1fca
Build id: 36fa942427fe822bb9eda0d1727bc54853cb42a1 		-
5
js::GCParallelTask::runHelperThreadTask(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x36d1e35
Build id: 36fa942427fe822bb9eda0d1727bc54853cb42a1 		-
6
mozilla::ThreadFuncPoolThread(void*)
/usr/lib64/firefox/libxul.so 0x35be5b8
Build id: 36fa942427fe822bb9eda0d1727bc54853cb42a1 		-
7
_pt_root
/lib64/libnspr4.so 0x2d739
Build id: 274218d7d2f6b1532ca85ca6dcfca4a47312cc54 		-
8
start_thread
/lib64/libc.so.6 0x8c907
Build id: 245240a31888ad5c11bbc55b18e02d87388f59a9 		-
9
__clone
/lib64/libc.so.6 0x112774
Build id: 245240a31888ad5c11bbc55b18e02d87388f59a9 		-