Crash in js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-24
Last occurrence
2026-09-24
Unique reports
1
Quality
-116

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Operating system Count
Fedora 41 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:145.0-2.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x5581c80
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
bool js::frontend::ListNode::accept<FoldVisitor>(FoldVisitor&)
/usr/lib64/firefox/libxul.so 0x5580b2f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
/usr/lib64/firefox/libxul.so 0x558118b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
bool js::frontend::ListNode::accept<FoldVisitor>(FoldVisitor&)
/usr/lib64/firefox/libxul.so 0x5580b2f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
/usr/lib64/firefox/libxul.so 0x558118b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x5580c83
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x5580c6f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
bool js::frontend::ListNode::accept<FoldVisitor>(FoldVisitor&)
/usr/lib64/firefox/libxul.so 0x5580b2f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x5580c23
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x5580d6a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
bool js::frontend::ListNode::accept<FoldVisitor>(FoldVisitor&)
/usr/lib64/firefox/libxul.so 0x5580b2f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x5580c23
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x5580d6a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
js::frontend::FoldConstants(js::FrontendContext*, js::frontend::ParserAtomsTable&, mozilla::Vector<js::frontend::BigIntStencil, 0ul, js::SystemAllocPolicy>&, js::frontend::ParseNode**, js::frontend::FullParseHandler*)
/usr/lib64/firefox/libxul.so 0x5581d57
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
js::frontend::Parser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::standaloneLazyFunction(js::frontend::CompilationInput&, unsigned int, bool, js::GeneratorKind, js::FunctionAsyncKind)
/usr/lib64/firefox/libxul.so 0x551e753
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
bool CompileLazyFunctionToStencilMaybeInstantiate<mozilla::Utf8Unit>(JSContext*, js::FrontendContext*, js::LifoAlloc&, js::frontend::CompilationInput&, js::frontend::ScopeBindingCache*, mozilla::Utf8Unit const*, unsigned long, js::frontend::InitialStencilAndDelazifications*, js::frontend::CompilationStencil const**)
/usr/lib64/firefox/libxul.so 0x556a3eb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
js::frontend::DelazifyCanonicalScriptedFunction(JSContext*, js::FrontendContext*, JS::Handle<JSFunction*>)
/usr/lib64/firefox/libxul.so 0x556d1fe
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
JSFunction::delazifyLazilyInterpretedFunction(JSContext*, JS::Handle<JSFunction*>)
/usr/lib64/firefox/libxul.so 0x518ab4f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
JSFunction::delazifyLazilyInterpretedFunction(JSContext*, JS::Handle<JSFunction*>)
/usr/lib64/firefox/libxul.so 0x518aba0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d2eb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d5ad
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
js::fun_call(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x51a442a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d11d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c2e5e0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c3cbe7
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
js::Execute(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x5c3f51a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
27
JS_ExecuteScript(JSContext*, JS::Handle<JSScript*>)
/usr/lib64/firefox/libxul.so 0x51299b2
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
28
mozilla::dom::ScriptLoader::EvaluateScript(nsIGlobalObject*, JS::loader::ScriptLoadRequest*)
/usr/lib64/firefox/libxul.so 0x40c6a9a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
29
mozilla::dom::ScriptLoader::EvaluateScriptElement(JS::loader::ScriptLoadRequest*) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x40c708b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
30
mozilla::dom::ScriptLoader::ProcessRequest(JS::loader::ScriptLoadRequest*)
/usr/lib64/firefox/libxul.so 0x40c77b3
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
31
mozilla::dom::ScriptLoader::ProcessPendingRequests(bool)
/usr/lib64/firefox/libxul.so 0x40c9c94
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
32
mozilla::dom::ScriptLoader::OnStreamComplete(nsIIncrementalStreamLoader*, JS::loader::ScriptLoadRequest*, nsresult, nsresult, mozilla::dom::SRICheckDataVerifier*)
/usr/lib64/firefox/libxul.so 0x40ca1ca
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
33
mozilla::dom::ScriptLoadHandler::OnStreamComplete(nsIIncrementalStreamLoader*, nsISupports*, nsresult, unsigned int, unsigned char const*)
/usr/lib64/firefox/libxul.so 0x40ca59b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
34
nsIncrementalStreamLoader::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x679937
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
35
mozilla::net::nsHTTPCompressConv::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x91b586
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
36
mozilla::net::HttpChannelChild::DoOnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0xa68527
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
37
mozilla::net::HttpChannelChild::OnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&)
/usr/lib64/firefox/libxul.so 0xa68d0f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
38
std::_Function_handler<void (), mozilla::net::HttpChannelChild::ProcessOnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&, nsTArray<mozilla::net::ConsoleReportCollected>&&, bool, mozilla::TimeStamp const&)::{lambda()#3}>::_M_invoke(std::_Any_data const&)
/usr/lib64/firefox/libxul.so 0xa691df
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
39
mozilla::net::ChannelEventQueue::FlushQueue()
/usr/lib64/firefox/libxul.so 0xbc4076
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
40
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0xbc49cb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
41
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f588f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
42
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f600b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
43
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
44
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
45
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
46
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
47
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
48
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
49
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
50
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
51
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
52
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
53
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
54
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
55
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
56
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
57
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-