Crash in js::jit::GetPropIRGenerator::tryAttachTypedArrayElement(JS::Handle<JSObject*>, js::jit::ObjOperandId)

Similar reports
Problem #805703
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-12-29
Last occurrence
2026-01-11
Unique reports
2
Quality
-98

Statistics

Operating system Unique / Total count
Fedora 41 2 / 2
Operating system Count
Fedora 41 2
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:145.0-2.fc41 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachTypedArrayElement(JS::Handle<JSObject*>, js::jit::ObjOperandId)
/usr/lib64/firefox/libxul.so 0x5850b11
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x5879182
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
js::jit::IonGetPropertyIC::update(JSContext*, JS::Handle<JSScript*>, js::jit::IonGetPropertyIC*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x595f3e1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3a8b167 -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3f8e9a9 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3f27f83 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3d994fa -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3fb312e -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3fb2d12 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3eaf5a1 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3f6a8e1 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3da13dd -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x1839a3a873dd -
14
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x5948d9d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c3cbc9
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d230
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d5ad
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x5135661
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
mozilla::dom::FrameRequestCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, double, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1b9f98c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
nsRefreshDriver::RunFrameRequestCallbacks(nsTArray<RefPtr<mozilla::dom::Document> > const&, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x459c6e3
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
nsRefreshDriver::RunVideoAndFrameRequestCallbacks(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x459cdad
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x459ea4e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x45a04a9
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x45a07b0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread()
/usr/lib64/firefox/libxul.so 0x45a0ff5
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
/usr/lib64/firefox/libxul.so 0x3cfa371
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
27
mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3e4b9ec
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
28
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3e02acc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
29
mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
/usr/lib64/firefox/libxul.so 0xd24beb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
30
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0xd33604
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
31
mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)
/usr/lib64/firefox/libxul.so 0xd33f94
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
32
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0xd34166
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
33
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f588f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
34
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f600b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
35
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
36
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6399
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
37
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
38
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
39
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19ef0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
40
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
41
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
42
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
43
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
44
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
45
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
46
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
47
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
48
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
49
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-