Crash in bool FinalizeTypedArenas<js::BaseScript>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&) [clone .constprop.0]

Similar reports
Problem #644596
Component
firefox
Last affected version
0:125.0-1.fc38
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-04-17
Last occurrence
2025-06-24
Unique reports
1
Quality
-56

Graphs

Statistics

Operating system Unique / Total count
Fedora 38 3 / 3
Fedora 39 1 / 1
Operating system Count
Fedora 38 3
Fedora 39 1
Architecture Count
x86_64 4
Related packages Count
firefox 3
 0:125.0-1.fc38 2
 0:124.0.1-2.fc38 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
bool FinalizeTypedArenas<js::BaseScript>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x27a0f0f
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
2
js::gc::GCRuntime::finalizeAllocKind(JS::GCContext*, js::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2c65480
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
3
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2c65210
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
4
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2c4bdf4
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
5
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2c6504e
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
6
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2c4bdf4
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
7
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2c4bb6e
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
8
js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x277adff
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
9
js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2c23978
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
10
js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2c22df4
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
11
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2e4f0cd
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
12
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2df1b34
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
13
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2de6658
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
14
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2de643b
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
15
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x260d6d3
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
16
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x260cb6b
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
17
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x260b1e8
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
18
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2a58ac1
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x29f2c3b
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
20
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2a589ed
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
21
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2a58886
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
22
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2a581dd
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x29f2c3b
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
24
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29e3ade
Build id: c69bbb67578fb9b622aae059642e8e88f6f1d21b 		-
25
main
/usr/lib64/firefox/firefox 0x54598
Build id: 665045c7f0d7d1b1f09d71a0f597b587d7640683 		-
26
__libc_start_call_main
/lib64/libc.so.6 0x27b8a
Build id: 70e92bb237883be3065a6afc9f0696aef2d068bf 		-
27
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27c4b
Build id: 70e92bb237883be3065a6afc9f0696aef2d068bf 		-
28
_start
/usr/lib64/firefox/firefox 0x518c5
Build id: 665045c7f0d7d1b1f09d71a0f597b587d7640683 		-