Crash in js::jit::GetPropIRGenerator::tryAttachTypedArrayElement(JS::Handle<JSObject*>, js::jit::ObjOperandId)

Similar reports
Problem #805703
Component
firefox
Last affected version
0:145.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-11-16
Last occurrence
2026-03-01
Unique reports
1
Quality
-110

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 2 / 2
Fedora 42 1 / 1
Operating system Count
Fedora 41 2
Fedora 42 1
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:145.0-2.fc41 2
 0:145.0-2.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachTypedArrayElement(JS::Handle<JSObject*>, js::jit::ObjOperandId)
/usr/lib64/firefox/libxul.so 0x5a831a3
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
2
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x5aae37f
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
3
void js::jit::TryAttachStub<js::jit::GetPropIRGenerator, js::jit::CacheKind, JS::Handle<JS::Value>&, JS::Handle<JS::Value>&>(char const*, JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, js::jit::CacheKind&&, JS::Handle<JS::Value>&, JS::Handle<JS::Value>&) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x58cbe28
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
4
js::jit::DoGetElemFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x58d62fd
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b18fa974 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b1901c3f -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b1c009ef -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b22bfb79 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b1c1a5e7 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b22ba252 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b21c699d -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b1cb204b -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b22a3ffe -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b1c35f3a -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b225e9a2 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b22bac21 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b225fe63 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x12a6b18f83dd -
19
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x5b7edc8
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
20
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5e7b05f
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
21
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5e7b6cd
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
22
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5e7bb25
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
23
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x5343429
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
24
mozilla::dom::FrameRequestCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, double, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1c7c0c8
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
25
nsRefreshDriver::RunFrameRequestCallbacks(nsTArray<RefPtr<mozilla::dom::Document> > const&, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x478e558
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
26
nsRefreshDriver::RunVideoAndFrameRequestCallbacks(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x478eb0c
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
27
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x4790310
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
28
mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x4791c59
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
29
mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x4791db8
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
30
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x479202a
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
31
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&)
/usr/lib64/firefox/libxul.so 0x4792955
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
32
mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
/usr/lib64/firefox/libxul.so 0x3ebb751
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
33
mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x40111bf
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
34
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3fc785c
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
35
mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
/usr/lib64/firefox/libxul.so 0xdacdbb
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
36
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0xdbbe49
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
37
mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)
/usr/lib64/firefox/libxul.so 0xdbc7bb
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
38
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0xdbc978
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
39
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x55a632
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
40
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x55ab7b
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
41
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x55addd
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
42
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run()
/usr/lib64/firefox/libxul.so 0x55af09
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
43
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x581f2e
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
44
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x582311
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
45
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xda1ac1
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
46
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xd4f264
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
47
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x445604c
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
48
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4552aab
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
49
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x51e0651
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
50
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xd4f264
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
51
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x51e11c0
Build id: fac3664b2aa08b5a0200090926f9a01f4389febb 		-
52
main
/usr/lib64/firefox/firefox 0x1fc4
Build id: d1859048e144b6d7f6ac0620f6bd80e7f73d3b49 		-
53
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
54
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
55
_start
/usr/lib64/firefox/firefox 0x2615
Build id: d1859048e144b6d7f6ac0620f6bd80e7f73d3b49 		-