Crash in js::jit::SetPropIRGenerator::tryAttachStub()

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:147.0.1-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-07-14
Last occurrence
2026-07-14
Unique reports
1
Quality
-92

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:147.0.1-2.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::SetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x30f7b1b
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
2
js::jit::DoSetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::Value*, JS::Handle<JS::Value>, JS::Handle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x30f7156
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
3
anonymous function
/usr/lib64/firefox/libxul.so 0x302067e6601b -
4
anonymous function
/usr/lib64/firefox/libxul.so 0x302067f470b1 -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x30206803dca2 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x302067f5d11e -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x302067e633dd -
8
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x30e9f64
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
9
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x308222a
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
10
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x308128b
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
11
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x3090853
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
12
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x30e96ea
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
13
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x30e92e9
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
14
anonymous function
/usr/lib64/firefox/libxul.so 0x302067e63c95 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x302067f65bb3 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x302067ef48fe -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x30206803c75b -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x302067ef4334 -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x302067ef4d1e -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x302067ef6ccc -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x302067e633dd -
22
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x30e9f64
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
23
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x30812ba
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
24
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x3090853
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
25
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x30a1665
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
26
PromiseReactionJob(JSContext*, JS::Handle<JSObject*>) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31c9316
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
27
mozilla::RunMicroTask(JSContext*, JS::MutableHandle<mozilla::MustConsumeMicroTask>) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31bdf0f
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
28
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x31bd0a1
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
29
mozilla::dom::CallSetup::~CallSetup()
/usr/lib64/firefox/libxul.so 0x31c04a1
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
30
nsRefreshDriver::RunVideoAndFrameRequestCallbacks(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x334b20c
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
31
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x327cbdc
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
32
mozilla::detail::RunnableFunction<nsRefreshDriver::EnsureTimerStarted(nsRefreshDriver::EnsureTimerStartedFlags)::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3ff81a1
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
33
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x31c32de
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
34
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x31c2bab
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2f74e18
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
36
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3279982
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
37
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x35d0023
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
38
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x388303d
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
39
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3882bc4
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
40
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc8f60c
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
41
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x35d0023
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
42
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2a964ef
Build id: 65b77c16fd3adc0e6c961fec8fb97430de53e8fc 		-
43
main
/usr/lib64/firefox/firefox 0x3e783
Build id: d41ed3eff6daf1f79cd6b1f00da42cc6e6712b27 		-
44
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1 		-
45
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 92b5376d35bb29c098175948cf3e7cbcae3aeae1 		-
46
_start
/usr/lib64/firefox/firefox 0x3bfd5
Build id: d41ed3eff6daf1f79cd6b1f00da42cc6e6712b27 		-