Crash in js::NativeObject::setDenseInitializedLengthInternal(unsigned int)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:137.0-2.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-20
Last occurrence
2026-09-20
Unique reports
1
Quality
-176

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Operating system Count
Fedora 40 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:137.0-2.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::NativeObject::setDenseInitializedLengthInternal(unsigned int)
/usr/lib64/firefox/libxul.so 0x2baf902
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
2
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b92c52
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
3
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9035b
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
4
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
5
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2c0067c
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
6
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2c0036a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
7
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a02d75 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a70da6 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a852c8 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88ad528e -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88b6b78c -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a024e6 -
13
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
14
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9165a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
15
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9035b
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
16
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
17
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2c0067c
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
18
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2c0036a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
19
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a02d75 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a70da6 -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a852c8 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88ad528e -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88af6afc -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a024e6 -
25
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
26
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9165a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
27
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9035b
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
28
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
29
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2c0067c
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
30
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2c0036a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
31
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a02d75 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88cbf562 -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a0c2f9 -
34
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a4174d -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a0c2f9 -
36
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a024e6 -
37
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
38
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9165a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
39
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9035b
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
40
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
41
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2bfba6f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
42
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a047e4 -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a0a116 -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88ccb53c -
45
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a32f43 -
46
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88ccc8f5 -
47
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a32e8d -
48
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88cf288e -
49
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a024e6 -
50
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
51
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9165a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
52
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b9035b
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
53
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
54
js::BoundFunctionObject::call(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2c6aded
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
55
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba1662
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
56
js::fun_apply(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x319552d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
57
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88aa23dc -
58
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88ad1686 -
59
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88ae0269 -
60
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a38c20 -
61
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88ad307f -
62
anonymous function
/usr/lib64/firefox/libxul.so 0x68a88a024e6 -
63
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2c00c2d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
64
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2b90389
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
65
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ba149a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
66
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2ce2fbc
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
67
mozilla::JSEventHandler::HandleEvent(mozilla::dom::Event*)
/usr/lib64/firefox/libxul.so 0x32cca8a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
68
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2d873b4
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
69
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2d85c46
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
70
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2d74f74
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
71
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x28bae1
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
72
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x32ad73a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
73
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&)
/usr/lib64/firefox/libxul.so 0x2d739bf
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
74
mozilla::dom::PostMessageRunnable::Run()
/usr/lib64/firefox/libxul.so 0x1d42746
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
75
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ce6879
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
76
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ce6142
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
77
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2a7cd70
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
78
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2db3802
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
79
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
80
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x331843d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
81
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x33176c0
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
82
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb04615
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
83
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
84
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x22d46f3
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
85
main
/usr/lib64/firefox/firefox 0x49517
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-
86
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
87
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
88
_start
/usr/lib64/firefox/firefox 0x464a5
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-