Crash in js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::CellPtrEdge<JSObject> >::trace(js::TenuringTracer&)

Similar reports
Problem #292434
Component
firefox
Last affected version
0:97.0-1.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-03-03
Last occurrence
2024-06-30
Unique reports
1
Quality
-18

Graphs

Statistics

Operating system Unique / Total count
Fedora 35 1 / 1
Fedora 36 1 / 1
Operating system Count
Fedora 35 1
Fedora 36 1
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:101.0.1-6.fc36 1
 0:97.0-1.fc35 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::CellPtrEdge<JSObject> >::trace(js::TenuringTracer&)
/usr/lib64/firefox/libxul.so 0x3eec0b5
Build id: 024826f9a174e7ca2206b3d69b107af923f0fa20 		-
2
js::Nursery::traceRoots(js::gc::AutoGCSession&, js::TenuringTracer&)
/usr/lib64/firefox/libxul.so 0x3ed7aeb
Build id: 024826f9a174e7ca2206b3d69b107af923f0fa20 		-
3
js::Nursery::doCollection(JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3ed76cf
Build id: 024826f9a174e7ca2206b3d69b107af923f0fa20 		-
4
js::Nursery::collect(JS::GCOptions, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x2e3260e
Build id: 024826f9a174e7ca2206b3d69b107af923f0fa20 		-
5
js::gc::GCRuntime::collectNursery(JS::GCOptions, JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3ec8fce
Build id: 024826f9a174e7ca2206b3d69b107af923f0fa20 		-
6
js::gc::GCRuntime::minorGC(JS::GCReason, js::gcstats::PhaseKind)
/usr/lib64/firefox/libxul.so 0x3ec8e95
Build id: 024826f9a174e7ca2206b3d69b107af923f0fa20 		-
7
JSString* js::AllocateStringImpl<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x3ec77ae
Build id: 024826f9a174e7ca2206b3d69b107af923f0fa20 		-
8
JSString* js::ConcatStrings<(js::AllowGC)1>(JSContext*, js::MaybeRooted<JSString*, (js::AllowGC)1>::HandleType, js::MaybeRooted<JSString*, (js::AllowGC)1>::HandleType, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x3dd368f
Build id: 024826f9a174e7ca2206b3d69b107af923f0fa20 		-
9
anonymous function
/home/faf/unknown filename 0x36fd9c935e2 -