Crash in js::jit::CallDOMGetter(JSContext*, JSJitInfo const*, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:137.0-2.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-10
Last occurrence
2026-09-10
Unique reports
1
Quality
-176

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Operating system Count
Fedora 40 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:137.0-2.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::CallDOMGetter(JSContext*, JSJitInfo const*, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2ddb5cd
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
2
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68b99c0c -
3
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68fb0eca -
4
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68fb0d36 -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68b984e6 -
6
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
7
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b902f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
8
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
9
js::CallGetter(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2bb3e35
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
10
js::jit::GetElemMaybeCached(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, js::MegamorphicCacheEntry*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2c26e51
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
11
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68b9b603 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68fa999d -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68fb102c -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a6928605e -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a6909d120 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f8e953 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f9f4f1 -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f8e415 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f8dc23 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f8d8a3 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68b982d5 -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68ef2da7 -
26
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f9fa03 -
27
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
28
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f9f818 -
29
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
30
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f9f671 -
31
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f9f4f1 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f892b5 -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
34
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f88daa -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
36
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f9f284 -
37
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
38
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f9ee60 -
39
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
40
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f8a8a0 -
41
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f8a4cd -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a6909d120 -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
45
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f898fb -
46
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f89592 -
47
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f892b5 -
48
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
49
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f88daa -
50
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
51
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f88a41 -
52
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68b982d5 -
53
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693d1834 -
54
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68f883d3 -
55
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693ceacd -
56
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a69497f06 -
57
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a693d1834 -
58
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a69497d05 -
59
anonymous function
/usr/lib64/firefox/libxul.so 0x1f7a68b984e6 -
60
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
61
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b90389
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
62
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
63
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2ce2fbc
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
64
mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2e1cbe0
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
65
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2d866e6
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
66
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2d85c46
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
67
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2d74f74
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
68
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x28bae1
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
69
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2d73b69
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
70
nsINode::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x336271b
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
71
nsContentUtils::DispatchEvent(mozilla::dom::Document*, mozilla::dom::EventTarget*, nsTSubstring<char16_t> const&, mozilla::CanBubble, mozilla::Cancelable, mozilla::Composed, mozilla::Trusted, bool*, mozilla::ChromeOnlyDispatch) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x336d9c8
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
72
nsContentUtils::DispatchTrustedEvent(mozilla::dom::Document*, mozilla::dom::EventTarget*, nsTSubstring<char16_t> const&, mozilla::CanBubble, mozilla::Cancelable, mozilla::Composed, bool*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x336d930
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
73
mozilla::dom::nsMediaEventRunner::DispatchEvent(nsTSubstring<char16_t> const&)
/usr/lib64/firefox/libxul.so 0x191ec99
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
74
mozilla::dom::nsTimeupdateRunner::Run()
/usr/lib64/firefox/libxul.so 0x191ed18
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
75
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ce6879
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
76
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ce6142
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
77
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2a7cd70
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
78
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2db3802
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
79
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
80
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x331843d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
81
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x33176c0
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
82
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb04615
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
83
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
84
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x22d46f3
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
85
main
/usr/lib64/firefox/firefox 0x49517
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-
86
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
87
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
88
_start
/usr/lib64/firefox/firefox 0x464a5
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-