Crash in js::gc::GCRuntime::sweepAtomsTable(JS::GCContext*, js::SliceBudget&)

Similar reports
Problem #603131
Component
firefox
Last affected version
0:125.0-1.fc38
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-11-07
Last occurrence
2026-09-26
Unique reports
4
Quality
-52

Graphs

Statistics

Operating system Unique / Total count
Fedora 38 2 / 2
Fedora 39 4 / 8
Operating system Count
Fedora 39 8
Fedora 38 2
Architecture Count
x86_64 10
Related packages Count
firefox 7
 0:120.0.1-1.fc39 5
 0:125.0-1.fc38 1
 0:119.0-2.fc38 1
google-noto-sans-mono-vf-fonts 1
 0:20230801-4.fc39 1
google-noto-serif-vf-fonts 1
 0:20230801-4.fc39 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::GCRuntime::sweepAtomsTable(JS::GCContext*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2b10338
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
2
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2af54c4
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
3
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2af530e
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
4
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x26c85c5
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
5
/usr/lib64/firefox/libxul.so 0x2acfca3
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
6
/usr/lib64/firefox/libxul.so 0x2acf0d4
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
7
js::gc::GCRuntime::gc(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2acefb3
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
8
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0x4189d6
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
9
nsJSContext::GarbageCollectNow(JS::GCReason, nsJSContext::IsShrinking)
/usr/lib64/firefox/libxul.so 0xc358e0
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
10
nsJSContext::DoLowMemoryGC()
/usr/lib64/firefox/libxul.so 0xc359ca
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
11
mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ThenValue<nsJSContext::LowMemoryGC()::{lambda(bool)#1}, nsJSContext::LowMemoryGC()::{lambda(mozilla::ipc::ResponseRejectReason)#1}>::DoResolveOrRejectInternal(mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ResolveOrRejectValue&) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0xc35a1c
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
12
mozilla::MozPromise<bool, mozilla::ipc::ResponseRejectReason, true>::ThenValueBase::ResolveOrRejectRunnable::Run()
/usr/lib64/firefox/libxul.so 0x2de1463
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
13
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x258e2d4
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
14
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x258db42
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
15
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x258be73
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
16
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28efa42
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
17
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288c59b
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
18
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x28ef95d
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
19
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28ef2c9
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
20
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288c59b
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
21
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x287de49
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
22
main
/usr/lib64/firefox/firefox 0x4d5d8
Build id: f7fcdbddf059fbc678c7c9375abda52bab4abb31 		-
23
__libc_start_call_main
/lib64/libc.so.6 0x27b8a
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24 		-
24
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27c4b
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24 		-
25
_start
/usr/lib64/firefox/firefox 0x4b9a5
Build id: f7fcdbddf059fbc678c7c9375abda52bab4abb31 		-