Crash in js::Nursery::collectToObjectFixedPoint(js::TenuringTracer&)

Similar reports
Problem #292434
Component
firefox
Last affected version
0:95.0.2-2.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2021-11-07
Last occurrence
2025-07-19
Unique reports
3
Quality
-16

Graphs

Statistics

Operating system Unique / Total count
Fedora 33 1 / 1
Fedora 34 2 / 2
Fedora 35 3 / 3
Operating system Count
Fedora 35 3
Fedora 34 2
Fedora 33 1
Architecture Count
x86_64 6
Related packages Count
firefox 5
 0:95.0.2-2.fc35 2
 0:95.0-1.fc34 1
 0:94.0-1.fc33 1
 0:93.0-2.fc34 1
libglvnd 2
 1:1.3.2-2.fc33 1
 1:1.3.3-1.fc33 1
mesa-dri-drivers 2
 0:20.3.5-2.fc33 1
 0:20.3.5-1.fc33 1
Show more… (32)
libglvnd-glx 2
 1:1.3.3-1.fc33 1
 1:1.3.2-2.fc33 1
libxshmfence 1
 0:1.3-7.fc33 1
libxcb 1
 0:1.13.1-5.fc33 1
xvidcore 1
 0:1.3.7-4.fc33 1
libvorbis 1
 1:1.3.7-2.fc33 1
numactl-libs 1
 0:2.0.14-1.fc33 1
libvmaf 1
 0:1.5.1-5.fc33 1
llvm-libs 1
 0:11.0.0-1.fc33 1
vo-amrwbenc 1
 0:0.1.3-13.fc33 1
expat 1
 0:2.4.1-1.fc33 1
speex 1
 0:1.2.0-6.fc33 1
libXxf86vm 1
 0:1.1.4-14.fc33 1
mesa-libglapi 1
 0:20.3.5-2.fc33 1
libgomp 1
 0:10.3.1-1.fc33 1
vulkan-loader 1
 0:1.2.148.1-1.fc33 1
libedit 1
 0:3.1-38.20210714cvs.fc33 1
openjpeg2 1
 0:2.3.1-11.fc33 1
rav1e-libs 1
 0:0.4.0~alpha-0.1.fc33 1
libtheora 1
 1:1.1.1-28.fc33 1
mesa-libGL 1
 0:20.3.5-2.fc33 1
soxr 1
 0:0.1.3-8.fc33 1
x265-libs 1
 0:3.4-3.fc33 1
libdrm 1
 0:2.4.102-2.fc33 1
ocl-icd 1
 0:2.3.0-1.fc33 1
opus 1
 0:1.3.1-6.fc33 1
ncurses-libs 1
 0:6.2-3.20200222.fc33 1
libva 1
 0:2.9.0-1.fc33 1
libogg 1
 2:1.3.4-3.fc33 1
pugixml 1
 0:1.11.4-1.fc33 1
elfutils-libelf 1
 0:0.185-2.fc33 1
glibc 1
 0:2.32-10.fc33 1
x264-libs 1
 0:0.160-2.20200702gitcde9a93.fc33 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::Nursery::collectToObjectFixedPoint(js::TenuringTracer&)
/usr/lib64/firefox/libxul.so 0x2ca9fba
Build id: bd67230b8eddd8b8826fc632f010235a9fb58c20 		-
2
js::Nursery::doCollection(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3cc7587
Build id: bd67230b8eddd8b8826fc632f010235a9fb58c20 		-
3
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3cc7084
Build id: bd67230b8eddd8b8826fc632f010235a9fb58c20 		-
4
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3cb8fb9
Build id: bd67230b8eddd8b8826fc632f010235a9fb58c20 		-
5
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3cb8e1b
Build id: bd67230b8eddd8b8826fc632f010235a9fb58c20 		-
6
JSString* js::AllocateStringImpl<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x3cb7277
Build id: bd67230b8eddd8b8826fc632f010235a9fb58c20 		-
7
JSString* js::ConcatStrings<(js::AllowGC)1>(JSContext*, js::MaybeRooted<JSString*, (js::AllowGC)1>::HandleType, js::MaybeRooted<JSString*, (js::AllowGC)1>::HandleType, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x3bcff64
Build id: bd67230b8eddd8b8826fc632f010235a9fb58c20 		-
8
anonymous function
/home/faf/unknown filename 0x8e91424f542 -