Crash in js::BlockLexicalEnvironmentObject::create(JSContext*, JS::Handle<js::LexicalScope*>, JS::Handle<JSObject*>, js::gc::InitialHeap)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:95.0.2-2.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-02-14
Last occurrence
2026-02-14
Unique reports
1
Quality
-82

Statistics

Operating system Unique / Total count
Fedora 35 1 / 1
Operating system Count
Fedora 35 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:95.0.2-2.fc35 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::BlockLexicalEnvironmentObject::create(JSContext*, JS::Handle<js::LexicalScope*>, JS::Handle<JSObject*>, js::gc::InitialHeap)
/usr/lib64/firefox/libxul.so 0x2c8df87
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
2
js::BlockLexicalEnvironmentObject::createForFrame(JSContext*, JS::Handle<js::LexicalScope*>, js::AbstractFramePtr)
/usr/lib64/firefox/libxul.so 0x2c8defd
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
3
js::jit::PushLexicalEnv(JSContext*, js::jit::BaselineFrame*, JS::Handle<js::LexicalScope*>)
/usr/lib64/firefox/libxul.so 0x2cff7a7
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
4
anonymous function
/usr/lib64/firefox/libxul.so 0x333f865ef2be -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x333f865ea317 -
6
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2d1f836
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
7
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c6c971
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
8
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c6c1e6
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
9
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c7750c
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
10
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c77bca
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
11
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2c8c537
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
12
mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x33b8d08
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
13
void mozilla::dom::EventListener::HandleEvent<mozilla::dom::EventTarget*>(mozilla::dom::EventTarget* const&, mozilla::dom::Event&, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*)
/usr/lib64/firefox/libxul.so 0x345e5b8
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
14
mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener*, mozilla::dom::Event*, mozilla::dom::EventTarget*)
/usr/lib64/firefox/libxul.so 0x2bcc757
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
15
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2bcc17d
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
16
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2bca044
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
17
mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2bc7ae4
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
18
mozilla::EventDispatcher::DispatchDOMEvent(nsISupports*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2bc6f0d
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
19
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x3451ff0
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
20
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&)
/usr/lib64/firefox/libxul.so 0x345cd8f
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
21
mozilla::dom::ipc::SharedMap::Update(mozilla::ipc::FileDescriptor const&, unsigned long, nsTArray<RefPtr<mozilla::dom::BlobImpl> >&&, nsTArray<nsTString<char> >&&)
/usr/lib64/firefox/libxul.so 0x36cea20
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
22
mozilla::dom::ContentChild::RecvUpdateSharedData(mozilla::ipc::FileDescriptor const&, unsigned int const&, nsTArray<mozilla::dom::IPCBlob>&&, nsTArray<nsTString<char> >&&)
/usr/lib64/firefox/libxul.so 0x36a2042
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
23
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2f845ed
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
24
mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&)
/usr/lib64/firefox/libxul.so 0x2b6939f
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
25
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2b69081
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
26
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2b4cd20
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
27
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2b4c708
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
28
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#2}>::Run()
/usr/lib64/firefox/libxul.so 0x2db0bd9
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
29
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2b4bb17
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
30
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2b4b150
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
31
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2b68ec0
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
32
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2f3029c
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
33
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x377a1ed
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
34
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3b7adbb
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
35
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2f3029c
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
36
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3b7aaf0
Build id: 91ee847e58990e1737ef635c229283b6e388fffb 		-
37
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x5262f
Build id: b6377b003c834896a8fae3563263a8c58fcd0a82 		-
38
main
/usr/lib64/firefox/firefox 0x43ea5
Build id: b6377b003c834896a8fae3563263a8c58fcd0a82 		-
39
__libc_start_call_main
/lib64/libc.so.6 0x2d560
Build id: 644dac2c66a6e0b32674f0ec71e7431bd0c06a63 		-
40
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2d60c
Build id: 644dac2c66a6e0b32674f0ec71e7431bd0c06a63 		-
41
_start
/usr/lib64/firefox/firefox 0x52235
Build id: b6377b003c834896a8fae3563263a8c58fcd0a82 		-