Crash in js::gc::TraceExternalEdge(JSTracer*, JSObject**, char const*)

Note: Executable of this report does not come from a package.
Similar reports
Problem #595295
Component
firefox
Last affected version
N/A
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-08-30
Last occurrence
2023-11-19
Unique reports
2
Quality
-54

Statistics

Operating system Unique / Total count
Fedora 37 2 / 3
Operating system Count
Fedora 37 3
Architecture Count
x86_64 3

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TraceExternalEdge(JSTracer*, JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x3632c5a
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
2
void JS::TraceEdge<JSObject*>(JSTracer*, JS::TenuredHeap<JSObject*>*, char const*)
/usr/lib64/firefox/libxul.so 0x363a2b6
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
3
XPCJSRuntime::TraceAdditionalNativeGrayRoots(JSTracer*) [clone .cold]
/usr/lib64/firefox/libxul.so 0xb436e3
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
4
mozilla::CycleCollectedJSRuntime::TraceGrayJS(JSTracer*, js::SliceBudget&, void*)
/usr/lib64/firefox/libxul.so 0x36375b7
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
5
js::gc::GCRuntime::markGrayRootsInCurrentGroup(JS::GCContext*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x36372b5
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
6
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3636564
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
7
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x36363a2
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
8
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x31f0154
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
9
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x360b423
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
10
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x360a694
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
11
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x392431a
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
12
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x37b6647
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
13
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x378e864
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
14
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x37b61fb
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
15
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x30ae64f
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
16
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x30adae9
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
17
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x30ab6cc
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
18
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3425e6a
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x33bffcb
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
20
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3425d8d
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
21
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x34253cd
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x33bffcb
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
23
XRE_InitChildProcess(int, char**, XREChildData const*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x33b1147
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
24
main
/usr/lib64/firefox/firefox 0x4f713
Build id: cf9e1e9e9b9545c9c2c4dbdc123f083f8ddcd099 		-
25
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
26
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
27
_start
/usr/lib64/firefox/firefox 0x4da85
Build id: cf9e1e9e9b9545c9c2c4dbdc123f083f8ddcd099 		-