Crash in JS::DeletePolicy<js::detail::BumpChunk>::operator()(js::detail::BumpChunk const*) [clone .isra.0]

Similar reports
Problem #698197
Component
firefox
Last affected version
0:135.0.1-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-11-06
Last occurrence
2025-04-01
Unique reports
8
Quality
-48

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 2 / 3
Fedora 41 8 / 9
Operating system Count
Fedora 41 9
Fedora 40 3
Architecture Count
x86_64 12
Related packages Count
firefox 12
 0:132.0.1-2.fc41 4
 0:132.0-2.fc40 2
 0:135.0.1-1.fc41 2
 0:132.0-2.fc41 1
 0:133.0-2.fc41 1
 0:135.0-1.fc41 1
 0:135.0-1.fc40 1
google-noto-serif-vf-fonts 1
 0:20240701-2.fc41 1
liberation-sans-fonts 1
 1:2.1.5-12.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
JS::DeletePolicy<js::detail::BumpChunk>::operator()(js::detail::BumpChunk const*) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x3966e95
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
2
JS::Zone::forceDiscardJitCode(JS::GCContext*, JS::Zone::DiscardOptions const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x18c7bd
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
3
js::gc::GCRuntime::endPreparePhase(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2917df9
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
4
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x2914b02
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
5
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e70f18
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
6
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e700f6
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
7
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3163be1
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
8
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2fe12ec
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
9
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2fe03b4
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
10
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2fe02bb
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
11
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2792967
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
12
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2791d78
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
13
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x278eb69
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
14
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c526b2
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
15
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2be1838
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
16
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c51f9d
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
17
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2c51e34
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
18
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c512fb
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2be1838
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
20
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2bd41ca
Build id: 5031f732a5c88c140ef31ed6b1ba9b9b5a15586a
-
21
main
/usr/lib64/firefox/firefox 0x3a927
Build id: 288affcd320e8ee1b438e9a66bcfb6f6984cb5f3
-
22
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: 948d229348b56bdcf4e0a96d5ccd8fb175f617f0
-
23
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: 948d229348b56bdcf4e0a96d5ccd8fb175f617f0
-
24
_start
/usr/lib64/firefox/firefox 0x37ad5
Build id: 288affcd320e8ee1b438e9a66bcfb6f6984cb5f3
-