Crash in js::jit::CodeGenerator::link(JSContext*)

Similar reports
Problem #740330
Component
firefox
Last affected version
0:136.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-03-04
Last occurrence
2026-01-14
Unique reports
2
Quality
-152

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Fedora 42 2 / 2
Operating system Count
Fedora 42 2
Fedora 41 1
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:136.0.3-1.fc42 2
 0:135.0.1-1.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::CodeGenerator::link(JSContext*)
/usr/lib64/firefox/libxul.so 0x2a88e71
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
2
LinkCodeGen(JSContext*, js::jit::CodeGenerator*, JS::Handle<JSScript*>) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x3060949
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
3
js::jit::LinkIonScript(JSContext*, JS::Handle<JSScript*>)
/usr/lib64/firefox/libxul.so 0x30608b2
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
4
js::jit::LazyLinkTopActivation(JSContext*, js::jit::LazyLinkExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x306078a
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16e9b09d25 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb535a7d -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb22d37c -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb22c4a1 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb51796e -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb4d5347 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb26fe86 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb534135 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb41ba9c -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb404866 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb16ac84 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb2dd4ff -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb39940f -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb673a3a -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb175e50 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb2d9aec -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb5dc3db -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb3cf60b -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16ebb17745 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb2aedd4 -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16ebb18ecb -
26
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb2ac04e -
27
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb2abcd0 -
28
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb2ab629 -
29
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16e9b094e6 -
30
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x294d5ef
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
31
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x29118cf
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
32
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2915056
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
33
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2e78a10
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
34
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16e9b0b7a4 -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16e9b11066 -
36
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16eb2ab0e8 -
37
anonymous function
/usr/lib64/firefox/libxul.so 0x1a16e9b094e6 -
38
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x294d5ef
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
39
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2911969
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
40
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2915056
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
41
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x29b365c
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
42
mozilla::dom::VoidFunction::Call(mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x3638d3e
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
43
QueuedMicrotask::Run(mozilla::AutoSlowOperation&)
/usr/lib64/firefox/libxul.so 0x3638c1a
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
44
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x28f3989
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
45
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2a2636b
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
46
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2a15212
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
47
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x290284f
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
48
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0xbf27a
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
49
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x29017e1
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
50
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2e1d3bc
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
51
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&)
/usr/lib64/firefox/libxul.so 0x2901683
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
52
mozilla::dom::XMLHttpRequestMainThread::FireReadystatechangeEvent() [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x329888b
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
53
mozilla::dom::XMLHttpRequestMainThread::ChangeState(unsigned short, bool)
/usr/lib64/firefox/libxul.so 0x32aa89a
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
54
mozilla::dom::XMLHttpRequestMainThread::ChangeStateToDoneInternal()
/usr/lib64/firefox/libxul.so 0x32c3af4
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
55
mozilla::dom::XMLHttpRequestMainThread::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x32c28f4
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
56
mozilla::net::nsStreamListenerWrapper::OnStopRequest(nsIRequest*, nsresult) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x32c23a5
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
57
nsCORSListenerProxy::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x35b5cd3
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
58
mozilla::net::nsHTTPCompressConv::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x9d3acb
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
59
mozilla::net::HttpChannelChild::OnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&)
/usr/lib64/firefox/libxul.so 0x31dbc3b
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
60
std::_Function_handler<void (), mozilla::net::HttpChannelChild::ProcessOnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&, nsTArray<mozilla::net::ConsoleReportCollected>&&, bool, mozilla::TimeStamp const&)::{lambda()#3}>::_M_invoke(std::_Any_data const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31db7ba
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
61
mozilla::net::ChannelEventQueue::MaybeFlushQueue()
/usr/lib64/firefox/libxul.so 0x30c660f
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
62
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0x30c62a9
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
63
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x285d084
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
64
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x285c91e
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
65
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x285a7c6
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
66
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2d43b42
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
67
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cd2c38
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
68
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2d438bd
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
69
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2d43624
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
70
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2d41ecb
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
71
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cd2c38
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
72
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2cc37ba
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
73
main
/usr/lib64/firefox/firefox 0x41277
Build id: 3ac1a6958615c1a7b806f3236963eefa8aace55c 		-
74
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
75
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
76
_start
/usr/lib64/firefox/firefox 0x3e415
Build id: 3ac1a6958615c1a7b806f3236963eefa8aace55c 		-