Crash in js::GenericTracerImpl<js::gc::MarkingTracerT<0u> >::onObjectEdge(JSObject**, char const*)

Similar reports
Problem #632477
Component
firefox
Last affected version
0:122.0.1-1.fc38
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-11-28
Last occurrence
2024-03-11
Unique reports
3
Quality
-56

Statistics

Operating system Unique / Total count
Fedora 38 3 / 4
Operating system Count
Fedora 38 4
Architecture Count
x86_64 4
Related packages Count
firefox 4
 0:122.0.1-1.fc38 2
 0:120.0-2.fc38 2
google-noto-serif-vf-fonts 2
 0:20230201-2.fc38 2
firefox-langpacks 2
 0:120.0-2.fc38 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::GenericTracerImpl<js::gc::MarkingTracerT<0u> >::onObjectEdge(JSObject**, char const*)
/usr/lib64/firefox/libxul.so 0x2883675
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
2
mozilla::dom::TraceProtoAndIfaceCache(JSTracer*, JSObject*)
/usr/lib64/firefox/libxul.so 0x26e7535
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
3
xpc::TraceXPCGlobal(JSTracer*, JSObject*)
/usr/lib64/firefox/libxul.so 0x2b067f2
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
4
js::GCMarker::markUntilBudgetExhausted(js::SliceBudget&, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x26e5328
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
5
js::gc::GCRuntime::markUntilBudgetExhausted(js::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2aff3b4
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
6
js::gc::GCRuntime::markGray(JS::GCContext*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2b0b0b9
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
7
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2b08d84
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
8
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2b08abe
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
9
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x26d720d
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
10
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2ae122b
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
11
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2ae05a4
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
12
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2df1cda
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
13
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c812fd
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
14
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2c81038
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
15
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2c8469b
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x25989ab
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
17
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2597de3
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
18
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2596193
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
19
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28fed22
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
20
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x289a44b
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
21
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x28feb7d
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
22
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28fdf0d
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x289a44b
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
24
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x288ac6e
Build id: 8a60bb709818f986e0722524b53b24ef9d4463a0 		-
25
main
/usr/lib64/firefox/firefox 0x51a58
Build id: c7ca181c7f4e6a281a43b53bb4e0dfa7b934aa68 		-
26
__libc_start_call_main
/lib64/libc.so.6 0x27b8a
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24 		-
27
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27c4b
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24 		-
28
_start
/usr/lib64/firefox/firefox 0x4f5e5
Build id: c7ca181c7f4e6a281a43b53bb4e0dfa7b934aa68 		-