Crash in js::jit::GetPropIRGenerator::tryAttachStub()

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:141.0.3-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-11-04
Last occurrence
2026-11-04
Unique reports
1
Quality
-112

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Operating system Count
Fedora 41 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:141.0.3-1.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x2df4752
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
2
js::jit::DoGetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::MutableHandle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2dfb968
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
3
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af1a5c50 -
4
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af1acb37 -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af1a34e6 -
6
js::jit::EnterBaselineInterpreterAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2de2d08
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
7
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2da0d5a
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
8
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2d94b9b
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
9
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2da5eda
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
10
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2dfaddc
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
11
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2dfaaca
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
12
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af1a3d75 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af74b978 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af1ad6a3 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af73dc03 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af81e326 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af3ec5d3 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af81dc7a -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af3ed030 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af74b809 -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af3fb4c7 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af7ff539 -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x2472af1a34e6 -
24
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2dfb2b5
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
25
js::RunScript(JSContext*, js::RunState&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x96797
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
26
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2da5eda
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
27
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2ecae9d
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
28
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2da5d92
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
29
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2ec106c
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
30
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x2ebdfc1
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
31
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool) [clone .cold]
/usr/lib64/firefox/libxul.so 0x230bf0
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
32
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2f56446
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
33
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2f44f81
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
34
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x21746f
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
35
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2f43eb9
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
36
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x34ebf7c
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
37
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&)
/usr/lib64/firefox/libxul.so 0x2f43d1b
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
38
mozilla::dom::XMLHttpRequestMainThread::DispatchProgressEvent(mozilla::DOMEventTargetHelper*, mozilla::dom::XMLHttpRequest::ProgressEventType const&, long, long)
/usr/lib64/firefox/libxul.so 0x364203d
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
39
mozilla::dom::XMLHttpRequestMainThread::ChangeStateToDoneInternal()
/usr/lib64/firefox/libxul.so 0x37e4c5b
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
40
mozilla::dom::XMLHttpRequestDoneNotifier::Run()
/usr/lib64/firefox/libxul.so 0x1ebab98
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
41
mozilla::dom::BrowsingContext::DeprioritizedLoadRunner::Run()
/usr/lib64/firefox/libxul.so 0x840a03
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
42
IdleRunnableWrapper::Run()
/usr/lib64/firefox/libxul.so 0x3583104
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
43
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ec50c0
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
44
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ec4d38
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
45
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2c949a8
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
46
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2f78042
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
47
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x32a277c
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
48
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x355c63d
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
49
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x355c131
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
50
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb5edc7
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
51
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x32a277c
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
52
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x245f9da
Build id: 00b6d5fc65b1b0701447b707e7d36427122e0dce 		-
53
main
/usr/lib64/firefox/firefox 0x40899
Build id: 5d5f77baa88075554294afea364e25d7b61c19f4 		-
54
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
55
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
56
_start
/usr/lib64/firefox/firefox 0x3df65
Build id: 5d5f77baa88075554294afea364e25d7b61c19f4 		-