Crash in js::NativeObject::allocDictionarySlot(JSContext*, JS::Handle<js::NativeObject*>, unsigned int*)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:120.0.1-1.fc37
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-10-02
Last occurrence
2026-10-02
Unique reports
1
Quality
-76

Statistics

Operating system Unique / Total count
Fedora 37 1 / 1
Operating system Count
Fedora 37 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:120.0.1-1.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::NativeObject::allocDictionarySlot(JSContext*, JS::Handle<js::NativeObject*>, unsigned int*)
/usr/lib64/firefox/libxul.so 0x265f052
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
2
js::NativeObject::addProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::PropertyKey>, js::PropertyFlags, unsigned int*)
/usr/lib64/firefox/libxul.so 0x260d33d
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
3
bool js::jit::TryAddOrSetPlainObjectProperty<true>(JSContext*, JS::Handle<js::PlainObject*>, JS::PropertyKey, JS::Handle<JS::Value>, bool*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x278b986
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
4
bool js::jit::SetPropertyMegamorphic<true>(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, JS::Handle<JS::Value>, bool)
/usr/lib64/firefox/libxul.so 0x2e95156
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x30c19310703 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x30c1bbed813 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x30c1bbaf5dc -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x30c1bbea3fd -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x30c1930a4e6 -
10
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2685e65
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
11
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x263e1d0
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
12
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x263d038
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
13
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x264b7a9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
14
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x26a573a
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
15
mozilla::dom::FrameRequestCallback::Call(double, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x354e67d
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
16
mozilla::dom::FrameRequestCallback::Call(double, char const*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x354e730
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
17
nsRefreshDriver::TickObserverArray(unsigned int, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x2713cce
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
18
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick) [clone .cold]
/usr/lib64/firefox/libxul.so 0x201423
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
19
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x2b726f0
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
20
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread()
/usr/lib64/firefox/libxul.so 0x2b71c60
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
21
mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
/usr/lib64/firefox/libxul.so 0x2b717ad
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
22
mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2b7141e
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
23
mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2aa4883
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
24
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x259a1a6
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
25
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2926b3e
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
26
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2599297
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
27
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2598a7e
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
28
nsThread::ProcessNextEvent(bool, bool*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x9a4ca
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
29
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x292555a
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
30
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x28c0cab
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
31
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x292537d
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
32
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x292496d
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
33
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x28c0cab
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
34
XRE_InitChildProcess(int, char**, XREChildData const*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x28b11c9
Build id: 2b908a9effe4869a55942e63a1dbe8836a30916e 		-
35
main
/usr/lib64/firefox/firefox 0x52f98
Build id: 24369d7658ec9e4b1d749d399e9542214dcbdaf8 		-
36
__libc_start_call_main
/lib64/libc.so.6 0x27550
Build id: 0dc6d3e329f8bf5e8c1de63c4c9d560fb9953ade 		-
37
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27609
Build id: 0dc6d3e329f8bf5e8c1de63c4c9d560fb9953ade 		-
38
_start
/usr/lib64/firefox/firefox 0x50a75
Build id: 24369d7658ec9e4b1d749d399e9542214dcbdaf8 		-