Crash in unsigned long js::gc::Arena::finalize<JSObject>(JSFreeOp*, js::gc::AllocKind, unsigned long)

Similar reports
Problem #497421
Component
firefox
Last affected version
0:73.0.1-1.fc31
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-03-03
Last occurrence
2021-03-03
Unique reports
1
Quality
-28

Statistics

Operating system Unique / Total count
Fedora 31 1 / 1
Operating system Count
Fedora 31 1
Architecture Count
x86_64 1
Related packages Count
llvm-libs 1
 0:9.0.1-4.fc31 1
firefox 1
 0:73.0.1-1.fc31 1
x265-libs 1
 0:3.1.2-2.fc31 1
Show moreā€¦ (4)
mesa-dri-drivers 1
 0:19.2.8-1.fc31 1
xvidcore 1
 0:1.3.7-1.fc31 1
ffmpeg-libs 1
 0:4.2.2-1.fc31 1
x264-libs 1
 0:0.157-12.20190717git34c06d1.fc31 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
unsigned long js::gc::Arena::finalize<JSObject>(JSFreeOp*, js::gc::AllocKind, unsigned long)
/usr/lib64/firefox/libxul.so 0x469a57d
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
2
bool FinalizeTypedArenas<JSObject>(JSFreeOp*, js::gc::Arena**, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x469a92c
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
3
FinalizeArenas(JSFreeOp*, js::gc::Arena**, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x469baa1
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
4
js::gc::ArenaLists::backgroundFinalize(JSFreeOp*, js::gc::Arena*, js::gc::Arena**)
/usr/lib64/firefox/libxul.so 0x469d2bf
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
5
js::gc::GCRuntime::sweepBackgroundThings(js::gc::ZoneList&, js::LifoAlloc&) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x469d77b
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
6
js::gc::GCRuntime::sweepFromBackgroundThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x469d9c8
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
7
js::GCParallelTaskHelper<js::gc::BackgroundSweepTask>::runTaskTyped(js::GCParallelTask*)
/usr/lib64/firefox/libxul.so 0x469de2f
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
8
js::GCParallelTask::runTask()
/usr/lib64/firefox/libxul.so 0x42bd210
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
9
js::GCParallelTask::runFromHelperThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x42c3677
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
10
js::HelperThread::handleGCParallelWorkload(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x42c3731
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
11
js::HelperThread::threadLoop()
/usr/lib64/firefox/libxul.so 0x42c2bfc
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
12
js::detail::ThreadTrampoline<void (&)(void*), js::HelperThread*>::Start(void*)
/usr/lib64/firefox/libxul.so 0x42bd2c9
Build id: af01094bf3d4bc7dad1cbf8e9fbfa89366a93a37
-
13
start_thread
/lib64/libpthread.so.0 0x94e2
Build id: d40c8da7371d8adea464ae2b099590b2c4465574
-
14
__clone
/lib64/libc.so.6 0x1016d3
Build id: 675ace3ca07a0b863df01f461a7b0984c65c8b37
-