Crash in js::jit::BaselineCacheIRCompiler::compile() [clone .cold]

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:136.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-07-16
Last occurrence
2026-07-16
Unique reports
1
Quality
-102

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:136.0.3-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::BaselineCacheIRCompiler::compile() [clone .cold]
/usr/lib64/firefox/libxul.so 0xe2750
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
2
LookupOrCompileStub(JSContext*, js::jit::CacheKind, js::jit::CacheIRWriter const&, js::jit::CacheIRStubInfo*&, js::jit::JitCode*&, char const*, bool, js::jit::JitZone*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x29f2b3e
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
3
js::jit::AttachBaselineCacheIRStub(JSContext*, js::jit::CacheIRWriter const&, js::jit::CacheKind, JSScript*, js::jit::ICScript*, js::jit::ICFallbackStub*, char const*)
/usr/lib64/firefox/libxul.so 0x29f177b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
4
js::jit::DoGetNameFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2f53dce
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x30c6bb195ad0 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x30c6bb19e643 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x30c6bb1934e6 -
8
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2a065af
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
9
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x29cabd0
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
10
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x29ce349
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
11
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2f3c207
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
12
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2f3be99
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
13
anonymous function
/usr/lib64/firefox/libxul.so 0x30c6bb193d75 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x30c6bb1b63c3 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x30c6bb19d39d -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x30c6bb1934e6 -
17
js::jit::EnterBaselineInterpreterAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f289bc
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
18
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f07f5f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
19
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x29cacd8
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
20
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x29ce349
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
21
mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2b41e27
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
22
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2adee02
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
23
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2aca152
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
24
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x29bb8b9
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
25
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0xb8f4d
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
26
mozilla::PresShell::EventHandler::HandleEventWithCurrentEventInfo(mozilla::WidgetEvent*, nsEventStatus*, bool, nsIContent*)
/usr/lib64/firefox/libxul.so 0x32d1d1b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
27
mozilla::PresShell::HandleEvent(nsIFrame*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x32be7c0
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
28
nsViewManager::DispatchEvent(mozilla::WidgetGUIEvent*, nsView*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x31346a7
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
29
nsView::HandleEvent(mozilla::WidgetGUIEvent*, bool)
/usr/lib64/firefox/libxul.so 0x3134596
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
30
mozilla::widget::PuppetWidget::DispatchEvent(mozilla::WidgetGUIEvent*, nsEventStatus&)
/usr/lib64/firefox/libxul.so 0x313452f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
31
mozilla::layers::APZCCallbackHelper::DispatchWidgetEvent(mozilla::WidgetGUIEvent&)
/usr/lib64/firefox/libxul.so 0x31344ab
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
32
mozilla::dom::BrowserChild::RecvRealKeyEvent(mozilla::WidgetKeyboardEvent const&, nsID const&)
/usr/lib64/firefox/libxul.so 0x1f9bc7c
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
33
mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x1a633f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
34
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2ebce05
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
35
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x2919a37
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
36
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2df428b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
37
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x29168f7
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
38
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x29161dc
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
39
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2df56d9
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
40
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x291513a
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
41
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2def9a6
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
42
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2d7b62f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
43
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2def78d
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
44
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2def553
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
45
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2dee494
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
46
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2d7b62f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
47
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2d6bea5
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38
-
48
main
/usr/lib64/firefox/firefox 0x3fa77
Build id: 3405c3a516529ae99d2c30e01e2a90f18eb27c3c
-
49
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: 0a6f11930e8ccbc4fe862685a0cc984228f888c7
-
50
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: 0a6f11930e8ccbc4fe862685a0cc984228f888c7
-
51
_start
/usr/lib64/firefox/firefox 0x3cb55
Build id: 3405c3a516529ae99d2c30e01e2a90f18eb27c3c
-