Crash in js::gc::TraceCycleCollectorChildren(JS::CallbackTracer*, js::Shape*)

Similar reports
Problem #657361
Component
firefox
Last affected version
0:123.0-1.fc39
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-02-25
Last occurrence
2024-03-03
Unique reports
2
Quality
-66

Statistics

Operating system Unique / Total count
Fedora 39 2 / 3
Operating system Count
Fedora 39 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:123.0-1.fc39 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::TraceCycleCollectorChildren(JS::CallbackTracer*, js::Shape*)
/usr/lib64/firefox/libxul.so 0x49cf994
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
2
TraversalTracer::onChild(JS::GCCellPtr, char const*)
/usr/lib64/firefox/libxul.so 0x1df4ad
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
3
bool TraceTaggedPtrEdge<JS::Value>(JSTracer*, JS::Value*, char const*)
/usr/lib64/firefox/libxul.so 0x49ab5c6
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
4
JSObject::traceChildren(JSTracer*)
/usr/lib64/firefox/libxul.so 0x45ffb8f
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
5
JS::TraceChildren(JSTracer*, JS::GCCellPtr)
/usr/lib64/firefox/libxul.so 0x49d84bb
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
6
mozilla::CycleCollectedJSRuntime::TraverseGCThing(mozilla::CycleCollectedJSRuntime::TraverseSelect, JS::GCCellPtr, nsCycleCollectionTraversalCallback&)
/usr/lib64/firefox/libxul.so 0x1e9f23
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
7
mozilla::JSGCThingParticipant::TraverseNative(void*, nsCycleCollectionTraversalCallback&)
/usr/lib64/firefox/libxul.so 0x1e9f9e
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
8
CCGraphBuilder::BuildGraph(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x1fe423
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
9
nsCycleCollector::MarkRoots(js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x1fe559
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
10
nsCycleCollector::Collect(mozilla::CCReason, ccIsManual, js::SliceBudget&, nsICycleCollectorListener*, bool)
/usr/lib64/firefox/libxul.so 0x204281
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
11
nsCycleCollector_collectSlice(js::SliceBudget&, mozilla::CCReason, bool)
/usr/lib64/firefox/libxul.so 0x204c29
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
12
nsJSContext::RunCycleCollectorSlice(mozilla::CCReason, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x135b2f5
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
13
mozilla::CCGCScheduler::CCRunnerFired(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x135b4a5
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
14
mozilla::IdleTaskRunner::Run() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x27c7dc
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
15
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x27c8d2
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x289e9a
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
17
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x28a4ab
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x28a55b
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
19
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x28a646
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2a6f9f
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
21
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x29958f
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
22
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x99f42a
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x9570a2
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
24
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x317b98c
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
25
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3223172
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
26
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x443d2f1
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
27
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x9570a2
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
28
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x443d8fd
Build id: 6d9fdc8ae51aece725a0dd3003c52dafb3a7b50e 		-
29
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0xd40a
Build id: fbd3d0d751ba672bbef41f980dbf304b2f536005 		-
30
main
/usr/lib64/firefox/firefox 0xca6f
Build id: fbd3d0d751ba672bbef41f980dbf304b2f536005 		-
31
__libc_start_call_main
/lib64/libc.so.6 0x2814a
Build id: 7ea8d85df0e89b90c63ac7ed2b3578b2e7728756 		-
32
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2820b
Build id: 7ea8d85df0e89b90c63ac7ed2b3578b2e7728756 		-
33
_start
/usr/lib64/firefox/firefox 0xce35
Build id: fbd3d0d751ba672bbef41f980dbf304b2f536005 		-