Crash in js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&) [clone .cold]

Similar reports
Problem #701651
Component
firefox
Last affected version
0:136.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-12-29
Last occurrence
2026-01-14
Unique reports
2
Quality
-92

Statistics

Operating system Unique / Total count
Fedora 42 2 / 3
Operating system Count
Fedora 42 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:136.0.3-1.fc42 3
openssl-libs 3
 1:3.2.4-3.fc42 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x84e32
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
2
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x296d58a
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
3
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x296d0d0
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
4
/usr/lib64/firefox/libxul.so 0x296da36
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
5
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x296d370
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
6
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x296e47e
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
7
/usr/lib64/firefox/libxul.so 0x296d13e
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
8
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x296d3de
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
9
bool CompileGlobalScriptToStencilAndMaybeInstantiate<mozilla::Utf8Unit>(JSContext*, js::FrontendContext*, js::LifoAlloc&, js::frontend::CompilationInput&, js::frontend::ScopeBindingCache*, JS::SourceText<mozilla::Utf8Unit>&, js::ScopeKind, mozilla::Vector<js::frontend::ExtraBindingInfo, 0ul, js::SystemAllocPolicy>*, js::frontend::CompilationStencil**, js::frontend::InitialStencilAndDelazifications**, js::frontend::CompilationGCOutput*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x2e8b05f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
10
JSScript* CompileGlobalScriptImpl<mozilla::Utf8Unit>(JSContext*, js::FrontendContext*, JS::ReadOnlyCompileOptions const&, JS::SourceText<mozilla::Utf8Unit>&, js::ScopeKind, mozilla::Vector<js::frontend::ExtraBindingInfo, 0ul, js::SystemAllocPolicy>*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x335574b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
11
JSScript* CompileSourceBuffer<mozilla::Utf8Unit>(JSContext*, JS::ReadOnlyCompileOptions const&, JS::SourceText<mozilla::Utf8Unit>&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x33555b1
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
12
mozilla::dom::workerinternals::loader::WorkerScriptLoader::ProcessPendingRequests(JSContext*) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x325cb68
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
13
mozilla::dom::workerinternals::loader::ScriptExecutorRunnable::WorkerRun(JSContext*, mozilla::dom::WorkerPrivate*)
/usr/lib64/firefox/libxul.so 0x3251b36
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
14
mozilla::dom::WorkerThreadRunnable::Run()
/usr/lib64/firefox/libxul.so 0x32286d1
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
15
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x29147c3
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
16
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2914233
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
17
mozilla::dom::AutoSyncLoopHolder::Run()
/usr/lib64/firefox/libxul.so 0x3247f1e
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
18
mozilla::dom::workerinternals::(anonymous namespace)::LoadAllScripts(mozilla::dom::WorkerPrivate*, mozilla::UniquePtr<mozilla::dom::SerializedStackHolder, mozilla::DefaultDelete<mozilla::dom::SerializedStackHolder> >, nsTArray<nsTString<char16_t> > const&, bool, mozilla::dom::WorkerScriptType, mozilla::ErrorResult&, mozilla::Encoding const*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x324462c
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
19
mozilla::dom::WorkerGlobalScope_Binding::importScripts(JSContext*, JS::Handle<JSObject*>, void*, JSJitMethodCallArgs const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x36a8b1c
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
20
bool mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::MaybeGlobalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x327f187
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
21
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x29ce45b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
22
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2efc14f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
23
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x29cacd8
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
24
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2efbab1
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
25
JS_ExecuteScript(JSContext*, JS::Handle<JSScript*>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x30e9dc9
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
26
mozilla::dom::workerinternals::loader::WorkerScriptLoader::ProcessPendingRequests(JSContext*) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x325cbd3
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
27
mozilla::dom::workerinternals::loader::ScriptExecutorRunnable::WorkerRun(JSContext*, mozilla::dom::WorkerPrivate*)
/usr/lib64/firefox/libxul.so 0x3251b36
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
28
mozilla::dom::WorkerThreadRunnable::Run()
/usr/lib64/firefox/libxul.so 0x32286d1
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
29
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x29147c3
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
30
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2914233
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
31
mozilla::dom::AutoSyncLoopHolder::Run()
/usr/lib64/firefox/libxul.so 0x3247f1e
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
32
mozilla::dom::workerinternals::(anonymous namespace)::LoadAllScripts(mozilla::dom::WorkerPrivate*, mozilla::UniquePtr<mozilla::dom::SerializedStackHolder, mozilla::DefaultDelete<mozilla::dom::SerializedStackHolder> >, nsTArray<nsTString<char16_t> > const&, bool, mozilla::dom::WorkerScriptType, mozilla::ErrorResult&, mozilla::Encoding const*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x324462c
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
33
mozilla::dom::(anonymous namespace)::CompileScriptRunnable::WorkerRun(JSContext*, mozilla::dom::WorkerPrivate*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x322890c
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
34
mozilla::dom::WorkerThreadRunnable::Run()
/usr/lib64/firefox/libxul.so 0x32286d1
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x29147c3
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
36
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2914233
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
37
mozilla::dom::workerinternals::(anonymous namespace)::WorkerThreadPrimaryRunnable::Run()
/usr/lib64/firefox/libxul.so 0x3225b8e
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
38
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x29147c3
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
39
mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2def11c
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
40
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2d7b62f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
41
nsThread::ThreadFunc(void*)
/usr/lib64/firefox/libxul.so 0x2dee77e
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
42
_pt_root
/lib64/libnspr4.so 0x22883
Build id: c40898d1e661f3deaeec81f33b410bcc4a313284 		-
43
set_alt_signal_stack_and_start(PthreadCreateParams*)
/usr/lib64/firefox/firefox 0x403d0
Build id: 3405c3a516529ae99d2c30e01e2a90f18eb27c3c 		-
44
start_thread
/lib64/libc.so.6 0x71324
Build id: 0a6f11930e8ccbc4fe862685a0cc984228f888c7 		-
45
__clone
/lib64/libc.so.6 0xf4b24
Build id: 0a6f11930e8ccbc4fe862685a0cc984228f888c7 		-