Crash in js::jit::DoGetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::MutableHandle<JS::Value>, JS::MutableHandle<JS::Value>) [clone .cold]

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:139.0-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-24
Last occurrence
2026-09-24
Unique reports
1
Quality
-162

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:139.0-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::DoGetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::MutableHandle<JS::Value>, JS::MutableHandle<JS::Value>) [clone .cold]
/usr/lib64/firefox/libxul.so 0xe2859
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
2
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e045b70 -
3
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6ed05c48 -
4
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e0434e6 -
5
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2e5455e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
6
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ddd973
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
7
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2dee9b3
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
8
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2e4ebe7
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
9
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e0457e4 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e04b116 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6eccdcf4 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e0434e6 -
13
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2e5455e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
14
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ddece4
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
15
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ddd9db
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
16
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2dee9b3
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
17
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2e53f8e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
18
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2e53c89
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
19
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e043d75 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e66c97c -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e808c40 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e0434e6 -
23
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2e5455e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
24
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ddece4
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
25
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ddd9db
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
26
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2dee9b3
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
27
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2e53f8e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
28
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2e53c89
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
29
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e043d75 -
30
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e66c97c -
31
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e808c40 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e323b2d -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e433695 -
34
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e323b2d -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e434f26 -
36
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e0434e6 -
37
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2e5455e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
38
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ddd973
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
39
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2dee9b3
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
40
js::fun_apply(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2ee936a
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
41
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e523b68 -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e3233d4 -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e43329c -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x14ef6e0434e6 -
45
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2e5455e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
46
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ddda09
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
47
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2dee9b3
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
48
js::BoundFunctionObject::call(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2ec5ec0
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
49
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2deeb84
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
50
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2f44045
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
51
mozilla::JSEventHandler::HandleEvent(mozilla::dom::Event*)
/usr/lib64/firefox/libxul.so 0x35e3d3f
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
52
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x3003542
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
53
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x3001c00
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
54
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2feb469
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
55
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x2487d8
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
56
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x35c6778
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
57
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&)
/usr/lib64/firefox/libxul.so 0x2fe9177
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
58
mozilla::dom::XMLHttpRequestMainThread::FireReadystatechangeEvent()
/usr/lib64/firefox/libxul.so 0x3703c1b
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
59
mozilla::dom::XMLHttpRequestMainThread::ChangeStateToDoneInternal()
/usr/lib64/firefox/libxul.so 0x38b8098
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
60
mozilla::dom::XMLHttpRequestMainThread::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x37308a2
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
61
mozilla::net::nsStreamListenerWrapper::OnStopRequest(nsIRequest*, nsresult) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x373062b
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
62
nsCORSListenerProxy::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0xb8ed2f
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
63
mozilla::net::nsHTTPCompressConv::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0xad4ddb
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
64
mozilla::net::HttpChannelChild::OnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&)
/usr/lib64/firefox/libxul.so 0xb7ff31
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
65
std::_Function_handler<void (), mozilla::net::HttpChannelChild::ProcessOnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&, nsTArray<mozilla::net::ConsoleReportCollected>&&, bool, mozilla::TimeStamp const&)::{lambda()#3}>::_M_invoke(std::_Any_data const&)
/usr/lib64/firefox/libxul.so 0xb8010a
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
66
mozilla::net::ChannelEventQueue::MaybeFlushQueue()
/usr/lib64/firefox/libxul.so 0xb5b04c
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
67
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0xbe6017
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
68
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2f4839e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
69
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2f47c4b
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
70
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2cad6bf
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
71
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x30332d1
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
72
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x338f113
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
73
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3630add
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
74
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x362faa5
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
75
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc4d60e
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
76
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x338f113
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
77
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x281c128
Build id: fe6c637c0794d2e16b7130fb82729d6bca407ce4 		-
78
main
/usr/lib64/firefox/firefox 0x3dfa7
Build id: 54e59559f4866c931abf8193afe79e4f74722f2d 		-
79
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
80
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
81
_start
/usr/lib64/firefox/firefox 0x3afc5
Build id: 54e59559f4866c931abf8193afe79e4f74722f2d 		-