Crash in js::TenuringTracer::moveToTenuredSlow(JSObject*)

Note: Executable of this report does not come from a package.
Similar reports
Problem #292434
Component
firefox
Last affected version
N/A
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-02-16
Last occurrence
2022-02-16
Unique reports
1
Quality
-18

Statistics

Operating system Unique / Total count
Fedora 34 1 / 1
Operating system Count
Fedora 34 1
Architecture Count
x86_64 1

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
js::TenuringTracer::moveToTenuredSlow(JSObject*)
/usr/lib64/firefox/libxul.so 0x2df6e1d
Build id: da2af4f5f8c5f6050347dd8ba324ba38d229fd62 		-
2
js::TenuringTracer::collectToObjectFixedPoint()
/usr/lib64/firefox/libxul.so 0x2df9d39
Build id: da2af4f5f8c5f6050347dd8ba324ba38d229fd62 		-
3
js::Nursery::doCollection(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3e6cadd
Build id: da2af4f5f8c5f6050347dd8ba324ba38d229fd62 		-
4
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3e6c600
Build id: da2af4f5f8c5f6050347dd8ba324ba38d229fd62 		-
5
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3e5f6c2
Build id: da2af4f5f8c5f6050347dd8ba324ba38d229fd62 		-
6
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3e5f585
Build id: da2af4f5f8c5f6050347dd8ba324ba38d229fd62 		-
7
JSString* js::AllocateStringImpl<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x3e5da17
Build id: da2af4f5f8c5f6050347dd8ba324ba38d229fd62 		-
8
JSString* js::ConcatStrings<(js::AllowGC)1>(JSContext*, js::MaybeRooted<JSString*, (js::AllowGC)1>::HandleType, js::MaybeRooted<JSString*, (js::AllowGC)1>::HandleType, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x3d74d64
Build id: da2af4f5f8c5f6050347dd8ba324ba38d229fd62 		-
9
anonymous function
/home/faf/unknown filename 0x1553241495d2 -