Crash in js::jit::IRGenerator::emitCalleeGuard(js::jit::ObjOperandId, JSFunction*)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:143.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-10-05
Last occurrence
2026-10-05
Unique reports
1
Quality
-98

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:143.0.3-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::IRGenerator::emitCalleeGuard(js::jit::ObjOperandId, JSFunction*)
/usr/lib64/firefox/libxul.so 0x2f367d5
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
2
js::jit::CallIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x2f352f3
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
3
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2f340ac
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
4
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d66718c4 -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d6677426 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d67e90c6 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d66f5687 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d67d993a -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d6847398 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d68e93f6 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d666f4e6 -
12
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2f396ea
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
13
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2eceac9
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
14
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ee02bb
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
15
js::fun_apply(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2fc12aa
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
16
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d6675ae5 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d68f534a -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x32d6d666f4e6 -
19
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2f396ea
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
20
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2eceb57
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
21
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ee02bb
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
22
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3014e97
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
23
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ee0195
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
24
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x300afe3
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
25
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x3009233
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
26
mozilla::dom::ScriptLoader::EvaluateScript(nsIGlobalObject*, JS::loader::ScriptLoadRequest*)
/usr/lib64/firefox/libxul.so 0x233ba68
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
27
mozilla::dom::ScriptLoader::ProcessRequest(JS::loader::ScriptLoadRequest*)
/usr/lib64/firefox/libxul.so 0x233bff0
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
28
mozilla::dom::ScriptLoader::ProcessPendingRequests(bool) [clone .cold]
/usr/lib64/firefox/libxul.so 0x33650b
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
29
mozilla::dom::ScriptLoadHandler::OnStreamComplete(nsIIncrementalStreamLoader*, nsISupports*, nsresult, unsigned int, unsigned char const*)
/usr/lib64/firefox/libxul.so 0x233de69
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
30
nsIncrementalStreamLoader::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0x35f1372
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
31
mozilla::net::nsHTTPCompressConv::OnStopRequest(nsIRequest*, nsresult)
/usr/lib64/firefox/libxul.so 0xac3bbb
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
32
mozilla::net::HttpChannelChild::OnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&)
/usr/lib64/firefox/libxul.so 0xb70803
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
33
std::_Function_handler<void (), mozilla::net::HttpChannelChild::ProcessOnStopRequest(nsresult const&, mozilla::net::ResourceTimingStructArgs const&, mozilla::net::nsHttpHeaderArray const&, nsTArray<mozilla::net::ConsoleReportCollected>&&, bool, mozilla::TimeStamp const&)::{lambda()#3}>::_M_invoke(std::_Any_data const&)
/usr/lib64/firefox/libxul.so 0xb709e6
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
34
mozilla::net::ChannelEventQueue::MaybeFlushQueue()
/usr/lib64/firefox/libxul.so 0xb0f68e
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
35
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0xb89249
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
36
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x300ea5e
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
37
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x300e319
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
38
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2dc47a0
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
39
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x30cce31
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
40
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34354a3
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
41
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36f569d
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
42
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36f4706
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
43
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc31b46
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
44
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34354a3
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
45
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2910ee3
Build id: e0e8184b9817a9a627006609a3cd2dd1061c94d8 		-
46
main
/usr/lib64/firefox/firefox 0x3fa79
Build id: 625980512ccbb04e78d8d2a778bac347a30d7435 		-
47
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
48
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
49
_start
/usr/lib64/firefox/firefox 0x3d0c5
Build id: 625980512ccbb04e78d8d2a778bac347a30d7435 		-