Crash in bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)

Similar reports
Problem #595295
Component
firefox
Last affected version
0:119.0-5.fc38
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-09-18
Last occurrence
2024-05-08
Unique reports
1
Quality
-56

Graphs

Statistics

Operating system Unique / Total count
Fedora 38 3 / 7
Fedora 39 1 / 1
Operating system Count
Fedora 38 7
Fedora 39 1
Architecture Count
x86_64 8
Related packages Count
firefox 7
 0:116.0-2.fc38 6
 0:119.0-5.fc38 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
bool FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x31c3587
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
2
js::gc::GCRuntime::finalizeAllocKind(JS::GCContext*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x31c0489
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
3
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x35efbd9
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
4
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x35d1cd4
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
5
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x35ef9b3
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
6
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x35d1cd4
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
7
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x35d1b82
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
8
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x31a737f
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
9
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x35a5f91
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
10
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x35a5144
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
11
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x38b9048
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
12
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3736747
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
13
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x3735bb8
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
14
mozilla::TimedOut(nsITimer*, void*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x37359ca
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
15
nsTimerEvent::Run()
/usr/lib64/firefox/libxul.so 0x33fb9d3
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x307f538
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
17
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x307ee32
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
18
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x307d15b
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
19
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x33bfaf2
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
20
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x335a41b
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
21
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x33bfa0d
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
22
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x33bf299
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x335a41b
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
24
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x334b9e3
Build id: 5d8119196fd3793b6bd198ab4d95d92c04dfaccd 		-
25
main
/usr/lib64/firefox/firefox 0x4e713
Build id: 90ac49a02709c213682da19f0c4ce4d942fce3d6 		-
26
__libc_start_call_main
/lib64/libc.so.6 0x27b4a
Build id: 245240a31888ad5c11bbc55b18e02d87388f59a9 		-
27
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27c0b
Build id: 245240a31888ad5c11bbc55b18e02d87388f59a9 		-
28
_start
/usr/lib64/firefox/firefox 0x4cb55
Build id: 90ac49a02709c213682da19f0c4ce4d942fce3d6 		-