Crash in js::jit::GetPropIRGenerator::tryAttachTypedArrayElement(JS::Handle<JSObject*>, js::jit::ObjOperandId)

Similar reports
Problem #819901
Component
firefox
Last affected version
0:147.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-02-26
Last occurrence
2026-02-26
Unique reports
3
Quality
-102

Statistics

Operating system Unique / Total count
Fedora 42 3 / 3
Operating system Count
Fedora 42 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:147.0.3-1.fc42 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachTypedArrayElement(JS::Handle<JSObject*>, js::jit::ObjOperandId)
/usr/lib64/firefox/libxul.so 0x5ba7820
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
2
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x5bd48cf
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
3
void js::jit::TryAttachStub<js::jit::GetPropIRGenerator, js::jit::CacheKind, JS::Handle<JS::Value>&, JS::Rooted<JS::Value>&, JS::Handle<JS::Value>&>(char const*, JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, js::jit::CacheKind&&, JS::Handle<JS::Value>&, JS::Rooted<JS::Value>&, JS::Handle<JS::Value>&) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x59e3bc4
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
4
js::jit::DoGetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x59e9d35
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x239f0165ab70 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01661ccf -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01d32b6b -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01738c1c -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01849eb3 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01ea15f3 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x239f018181d4 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01b8863b -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01b76bf6 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01f6d62e -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x239f01b4ae4e -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x239f016583dd -
17
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x5ca7ca8
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
18
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5fa63ef
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
19
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5fa6a6d
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
20
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5fa6ec5
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
21
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x543cda9
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
22
mozilla::dom::EventHandlerNonNull::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2748afc
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
23
mozilla::JSEventHandler::HandleEvent(mozilla::dom::Event*)
/usr/lib64/firefox/libxul.so 0x2e5258d
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
24
mozilla::EventListenerManager::HandleEventSingleListener(mozilla::EventListenerManager::Listener*, nsAtom*, mozilla::WidgetEvent*, mozilla::dom::Event*, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2e5ef85
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
25
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2e5f6c1
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
26
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2e5ffab
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
27
mozilla::EventTargetChainItem::HandleEvent(mozilla::EventChainPostVisitor&, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2e60860
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
28
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2e60f43
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
29
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2e630af
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
30
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2e637ec
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
31
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2e09dce
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
32
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&)
/usr/lib64/firefox/libxul.so 0x2e433dc
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
33
mozilla::dom::PostMessageRunnable::DispatchMessage() const
/usr/lib64/firefox/libxul.so 0x41997b0
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
34
mozilla::dom::PostMessageRunnable::Run()
/usr/lib64/firefox/libxul.so 0x41999a4
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
35
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x572bc3
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
36
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x57319b
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
37
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x5733fd
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
38
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x573516
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
39
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5952be
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
40
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x5956a1
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
41
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xdca21a
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
42
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xd78dd4
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
43
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x452629c
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
44
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x462cbfb
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
45
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x52d5cc1
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
46
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xd78dd4
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
47
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x52d6850
Build id: 9d739d4ac8d68ae8c6d4d14d3773fa3680dcf621 		-
48
main
/usr/lib64/firefox/firefox 0x2014
Build id: 88d8a8a4088758c190ae4007aa00f7d3e9b66416 		-
49
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1 		-
50
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1 		-
51
_start
/usr/lib64/firefox/firefox 0x2625
Build id: 88d8a8a4088758c190ae4007aa00f7d3e9b66416 		-