Crash in js::jit::GetPropIRGenerator::tryAttachStub()

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:151.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-08-27
Last occurrence
2026-08-27
Unique reports
1
Quality
-92

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
urw-base35-nimbus-roman-fonts 1
 0:20200910-24.fc42 1
google-noto-serif-vf-fonts 1
 0:20250301-1.fc42 1
firefox 1
 0:151.0-2.fc42 1
Show more… (2)
google-noto-naskh-arabic-vf-fonts 1
 0:20250301-1.fc42 1
adwaita-sans-fonts 1
 0:48.2-2.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x2fb9a19
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
2
js::jit::DoGetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fc354b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
3
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e68ddb70 -
4
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e68e4cb3 -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e6982925 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e6921aa8 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e6968200 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e691db6b -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e6962150 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e691db6b -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e69667c6 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e691ef84 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e6964eee -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e68db3be -
15
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
16
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5f7a6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
17
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5e43b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
18
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
19
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fc2b4a
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
20
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2fc2739
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
21
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e68dbc55 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e691db6b -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e68e5838 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e68e61bb -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x1a47e68db3be -
26
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
27
js::RunScript(JSContext*, js::RunState&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x9d638
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
28
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
29
js::CallSelfHostedFunction(JSContext*, JS::Handle<js::PropertyName*>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x3051f80
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
30
AsyncFunctionResume(JSContext*, JS::Handle<js::AsyncFunctionGeneratorObject*>, ResumeKind, JS::Handle<JS::Value>) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3088b1a
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
31
mozilla::MustConsumeMicroTask::RunAndConsumeJSMicroTask(JSContext*)
/usr/lib64/firefox/libxul.so 0x307bc12
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
32
mozilla::RunMicroTask(JSContext*, mozilla::CycleCollectedJSContext*, JS::MutableHandle<mozilla::MustConsumeMicroTask>, bool) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x30761be
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
33
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x30756f7
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
34
XPCJSContext::AfterProcessTask(unsigned int)
/usr/lib64/firefox/libxul.so 0x308234f
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2e43372
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
36
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x314aad6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
37
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
38
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37a005d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
39
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x379eb83
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
40
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xbe03d4
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
41
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
42
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29c9651
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
43
main
/usr/lib64/firefox/firefox 0x41003
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58 		-
44
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53 		-
45
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53 		-
46
_start
/usr/lib64/firefox/firefox 0x3ead5
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58 		-