Crash in bool js::GCMarker::markAndTraversePrivateGCThing<2u>(JSObject*, js::gc::TenuredCell*)

Similar reports
Problem #698197
Component
firefox
Last affected version
0:136.0.2-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-03-24
Last occurrence
2025-04-16
Unique reports
2
Quality
-60

Statistics

Operating system Unique / Total count
Fedora 41 2 / 5
Operating system Count
Fedora 41 5
Architecture Count
x86_64 5
Related packages Count
firefox 5
 0:136.0.2-1.fc41 5

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
bool js::GCMarker::markAndTraversePrivateGCThing<2u>(JSObject*, js::gc::TenuredCell*)
/usr/lib64/firefox/libxul.so 0x2c848a8
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
2
js::gc::ParallelMarkTask::run(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x35b532c
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
3
js::GCParallelTask::runTask(JS::GCContext*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x2f1cef5
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
4
js::GCParallelTask::runFromMainThread(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x2f55ccd
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
5
js::gc::ParallelMarker::markOneColor(js::gc::MarkColor, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x35b453d
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
6
js::gc::GCRuntime::markUntilBudgetExhausted(JS::SliceBudget&, js::gc::GCRuntime::ParallelMarking, js::gc::ShouldReportMarkTime)
/usr/lib64/firefox/libxul.so 0x2f76623
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
7
js::gc::GCRuntime::markGray(JS::GCContext*, JS::SliceBudget&)
/usr/lib64/firefox/libxul.so 0x2f7b939
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
8
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2f78212
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
9
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x2f77d80
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
10
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x29e2866
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
11
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2f52cc9
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
12
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2f51d06
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
13
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x327c6a1
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
14
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x30d94c6
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
15
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x2f216d4
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
16
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x2f2160b
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
17
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x285e32f
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x285d7a7
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
19
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x285b5ee
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
20
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2d3ce52
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cc8e78
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
22
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2d3cd7d
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
23
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2d3cc04
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
24
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2d3b7db
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
25
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cc8e78
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
26
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2cb993a
Build id: dc03e5fc4eec97610c6c5d3096a8cc979e5ba40c 		-
27
main
/usr/lib64/firefox/firefox 0x41d87
Build id: eaa2456d2261bfc93ab0114f0bd17382db67b6cd 		-
28
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: f83d43b9b4b0ed5c2bd0a1613bf33e08ee054c93 		-
29
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: f83d43b9b4b0ed5c2bd0a1613bf33e08ee054c93 		-
30
_start
/usr/lib64/firefox/firefox 0x3ea75
Build id: eaa2456d2261bfc93ab0114f0bd17382db67b6cd 		-