Crash in js::jit::GetPropIRGenerator::tryAttachStub()

Similar reports
Problem #740330
Component
firefox
Last affected version
0:136.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-02-10
Last occurrence
2025-08-24
Unique reports
1
Quality
-146

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Fedora 41 2 / 2
Fedora 42 1 / 1
Operating system Count
Fedora 41 2
Fedora 40 1
Fedora 42 1
Architecture Count
x86_64 4
Related packages Count
firefox 4
 0:136.0-2.fc41 1
 0:136.0.3-1.fc42 1
 0:135.0-1.fc41 1
 0:135.0-1.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x29490d1
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
2
js::jit::DoGetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::MutableHandle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2e7a92c
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
3
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd7490eae0 -
4
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd749156ba -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd74b44da9 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd74b40cb9 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd7490c4e6 -
8
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x294f1ff
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
9
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2e39a8b
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
10
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x291397b
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
11
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2917046
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
12
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2e7a158
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
13
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2e79dea
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
14
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd7490cd75 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd74c93364 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd74916226 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd7490c4e6 -
18
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x294f1ff
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
19
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x291390f
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
20
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2917046
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
21
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2e780e0
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
22
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd7490e7a4 -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd74914066 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd74916226 -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd7490c4e6 -
26
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x294f1ff
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
27
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2e39a8b
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
28
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x291397b
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
29
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2917046
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
30
js::fun_apply(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2eeac0a
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
31
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd749127c6 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd74c873ca -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x2acd7490c4e6 -
34
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x294f1ff
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
35
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x29139a9
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
36
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2917046
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
37
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x291e241
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
38
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2f77405
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
39
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2917153
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
40
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x29b9b3d
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
41
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x28f522c
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
42
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2a24893
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
43
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2a0f8b2
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
44
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2904277
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
45
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0xbfdac
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
46
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2903401
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
47
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2e1c56c
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
48
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&)
/usr/lib64/firefox/libxul.so 0x29032a3
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
49
mozilla::dom::XMLHttpRequestMainThread::FireReadystatechangeEvent() [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x329ca4b
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
50
mozilla::dom::XMLHttpRequestMainThread::ChangeState(unsigned short, bool)
/usr/lib64/firefox/libxul.so 0x32aceea
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
51
mozilla::dom::XMLHttpRequestMainThread::ChangeStateToDoneInternal()
/usr/lib64/firefox/libxul.so 0x32c53b4
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
52
mozilla::dom::XMLHttpRequestMainThread::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x32c4f54
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
53
mozilla::net::nsStreamListenerWrapper::OnStopRequest(nsIRequest*, nsresult) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x32c4cf5
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
54
nsCORSListenerProxy::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x35b3373
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
55
mozilla::net::nsHTTPCompressConv::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0xa00a85
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
56
mozilla::net::HttpChannelChild::OnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&)
/usr/lib64/firefox/libxul.so 0x31da5ab
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
57
std::_Function_handler<void (), mozilla::net::HttpChannelChild::ProcessOnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&, nsTArray<mozilla::net::ConsoleReportCollected>&&, bool, mozilla::TimeStamp const&)::{lambda()#3}>::_M_invoke(std::_Any_data const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31da17a
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
58
mozilla::net::ChannelEventQueue::MaybeFlushQueue()
/usr/lib64/firefox/libxul.so 0x30bbc0b
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
59
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0x30bba89
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
60
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x285e365
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
61
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x285db0e
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
62
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x285ba56
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
63
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2d438e2
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
64
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cd2118
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
65
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2d4350d
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
66
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2d42c94
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
67
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2d416fb
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
68
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cd2118
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
69
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2cc2c7a
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
70
main
/usr/lib64/firefox/firefox 0x411d7
Build id: d1f99065b03d6df65d04ae9bf5f1fe1774564b8b 		-
71
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
72
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
73
_start
/usr/lib64/firefox/firefox 0x3e355
Build id: d1f99065b03d6df65d04ae9bf5f1fe1774564b8b 		-