Crash in MapSlotsToBitset(js::jit::BitSet&, js::jit::BitSet&, js::jit::CompactBufferWriter&, mozilla::Vector<js::jit::SafepointSlotEntry, 0ul, js::jit::JitAllocPolicy> const&)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:93.0-2.fc35
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-10-06
Last occurrence
2026-10-06
Unique reports
1
Quality
-182

Statistics

Operating system Unique / Total count
Fedora 35 1 / 1
Operating system Count
Fedora 35 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:93.0-2.fc35 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
MapSlotsToBitset(js::jit::BitSet&, js::jit::BitSet&, js::jit::CompactBufferWriter&, mozilla::Vector<js::jit::SafepointSlotEntry, 0ul, js::jit::JitAllocPolicy> const&)
/usr/lib64/firefox/libxul.so 0x2cc108c
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
2
js::jit::SafepointWriter::encode(js::jit::LSafepoint*)
/usr/lib64/firefox/libxul.so 0x2cc0f52
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
3
js::jit::CodeGeneratorShared::encodeSafepoints()
/usr/lib64/firefox/libxul.so 0x3d1329e
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
4
js::jit::CodeGenerator::link(JSContext*, js::jit::WarpSnapshot const*)
/usr/lib64/firefox/libxul.so 0x3d5d4a7
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
5
js::jit::LinkIonScript(JSContext*, JS::Handle<JSScript*>)
/usr/lib64/firefox/libxul.so 0x3d83934
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
6
js::jit::LazyLinkTopActivation(JSContext*, js::jit::LazyLinkExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x3d837ff
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
7
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cabdb4 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x7f935446f018 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cab56f -
10
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2cb52e1
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
11
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c02b62
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
12
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c0235b
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
13
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c0d4ac
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
14
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2c9382e
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
15
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cadde8 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x7f934762fbc0 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d6af05 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9348fe11a8 -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d91695 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9353f30080 -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d91695 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9355d47078 -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cab56f -
24
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2cb52e1
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
25
Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c02b62
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
26
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c0235b
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
27
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c0d4ac
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
28
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c0db8a
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
29
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2c9b74c
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
30
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2c9b318
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
31
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cabdf4 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9348f6d138 -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d95f21 -
34
anonymous function
/usr/lib64/firefox/libxul.so 0x7f935882f160 -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cce199 -
36
anonymous function
/usr/lib64/firefox/libxul.so 0x7f93475571a0 -
37
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d91695 -
38
anonymous function
/usr/lib64/firefox/libxul.so 0x7f935882f0a0 -
39
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cce199 -
40
anonymous function
/usr/lib64/firefox/libxul.so 0x7f93475571a0 -
41
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d91695 -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9347bdc018 -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d91695 -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9347bf4288 -
45
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cd99e6 -
46
anonymous function
/usr/lib64/firefox/libxul.so 0x7f93685b6138 -
47
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d91695 -
48
anonymous function
/usr/lib64/firefox/libxul.so 0x7f93685b1018 -
49
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d95f21 -
50
anonymous function
/usr/lib64/firefox/libxul.so 0x7f93656d3108 -
51
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d95f21 -
52
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9365606048 -
53
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68ef5eb5 -
54
anonymous function
/usr/lib64/firefox/libxul.so 0x7f935d072048 -
55
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68ef5eb5 -
56
anonymous function
/usr/lib64/firefox/libxul.so 0x7f935b4820a8 -
57
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d91695 -
58
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9355d04088 -
59
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68d91695 -
60
anonymous function
/usr/lib64/firefox/libxul.so 0x7f9355cd2018 -
61
anonymous function
/usr/lib64/firefox/libxul.so 0x3cef68cab56f -
62
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2cb52e1
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
63
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c0237f
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
64
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c0d4ac
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
65
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c0db8a
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
66
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2c23f9a
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
67
mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x33224f8
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
68
void mozilla::dom::EventListener::HandleEvent<mozilla::dom::EventTarget*>(mozilla::dom::EventTarget* const&, mozilla::dom::Event&, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*)
/usr/lib64/firefox/libxul.so 0x33d8588
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
69
mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener*, mozilla::dom::Event*, mozilla::dom::EventTarget*)
/usr/lib64/firefox/libxul.so 0x2b66ef7
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
70
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2b66628
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
71
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2b64814
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
72
mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2b622a1
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
73
mozilla::dom::PostMessageEvent::Dispatch(nsGlobalWindowInner*, mozilla::dom::Event*)
/usr/lib64/firefox/libxul.so 0x3229a82
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
74
mozilla::dom::PostMessageEvent::Run()
/usr/lib64/firefox/libxul.so 0x3229916
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
75
mozilla::SchedulerGroup::Runnable::Run()
/usr/lib64/firefox/libxul.so 0x2d3875e
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
76
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ae65e0
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
77
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ae5fd8
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
78
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x2d4b906
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
79
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2ae5307
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
80
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x2ae4970
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
81
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2b01fda
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
82
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2ec58cc
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
83
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36efebd
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
84
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x3ac416b
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
85
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2ec58cc
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
86
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x3ac3ea0
Build id: 6f3836f493101f0d5869c9524d84a5529e0c758a 		-
87
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x5220f
Build id: 89e053247b49a9c58cadc625fb1e8df6a4690efd 		-
88
main
/usr/lib64/firefox/firefox 0x43d45
Build id: 89e053247b49a9c58cadc625fb1e8df6a4690efd 		-
89
__libc_start_call_main
/lib64/libc.so.6 0x2d560
Build id: f891252f9069edee265f92cfb9a163880999588b 		-
90
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2d60c
Build id: f891252f9069edee265f92cfb9a163880999588b 		-
91
_start
/usr/lib64/firefox/firefox 0x51e15
Build id: 89e053247b49a9c58cadc625fb1e8df6a4690efd 		-