Crash in js::jit::GetPropIRGenerator::tryAttachStub()

Similar reports
Problem #603825
Component
firefox
Last affected version
0:143.0.1-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-02-07
Last occurrence
2026-07-13
Unique reports
2
Quality
-74

Graphs

Statistics

Operating system Unique / Total count
Fedora 37 1 / 1
Fedora 41 3 / 3
Fedora 42 2 / 2
Operating system Count
Fedora 41 3
Fedora 42 2
Fedora 37 1
Architecture Count
x86_64 6
Related packages Count
firefox 6
 0:139.0.4-1.fc42 1
 0:136.0-2.fc41 1
 0:132.0.1-2.fc41 1
 0:134.0.2-1.fc41 1
 0:143.0.1-1.fc42 1
 0:120.0.1-1.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x28e4722
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
2
js::jit::DoGetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::MutableHandle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x28eb22c
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
3
anonymous function
/usr/lib64/firefox/libxul.so 0x14676dd3cae0 -
4
anonymous function
/usr/lib64/firefox/libxul.so 0x14676e8338a8 -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x14676ec26083 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x14676f020bea -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x14676dd7b845 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x14676e82f5d1 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x14676e096f9d -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x14676e80fede -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x14676e8ef1c4 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x14676dd3a4e6 -
13
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x28eab70
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
14
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x28aefc9
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
15
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x28b2ad6
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
16
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2954c9c
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
17
mozilla::dom::Function::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, nsTArray<JS::Value> const&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x32a9372
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
18
void mozilla::dom::Function::Call<nsCOMPtr<nsIGlobalObject> >(nsCOMPtr<nsIGlobalObject> const&, nsTArray<JS::Value> const&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x32a921a
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
19
mozilla::dom::CallbackTimeoutHandler::Call(char const*)
/usr/lib64/firefox/libxul.so 0x32a906f
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
20
mozilla::dom::TimeoutManager::RunTimeout(mozilla::TimeStamp const&, mozilla::TimeStamp const&, bool)
/usr/lib64/firefox/libxul.so 0x3137a8d
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
21
mozilla::dom::TimeoutExecutor::MaybeExecute()
/usr/lib64/firefox/libxul.so 0x3137571
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
22
mozilla::dom::TimeoutExecutor::Run()
/usr/lib64/firefox/libxul.so 0x31370f3
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
23
mozilla::ThrottledEventQueue::Inner::Executor::Run()
/usr/lib64/firefox/libxul.so 0x31296e3
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
24
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x27fc684
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
25
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x27fbf1e
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
26
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x27f9df2
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
27
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cd56c2
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
28
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c65948
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
29
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cd535d
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
30
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cd50c4
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
31
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cd3b9b
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
32
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c65948
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
33
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2c563aa
Build id: 67d6cf80455186fe774e684f4b2a3ecb9ca383e0 		-
34
main
/usr/lib64/firefox/firefox 0x405c7
Build id: c72f1d6aec862485d7f0602332f0216e6987b92c 		-
35
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
36
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
37
_start
/usr/lib64/firefox/firefox 0x3d6d5
Build id: c72f1d6aec862485d7f0602332f0216e6987b92c 		-