Crash in js::jit::CodeGeneratorShared::encodeAllocation(js::jit::LSnapshot*, js::jit::MDefinition*, unsigned int*)

Similar reports
Problem #293870
Component
firefox
Last affected version
0:104.0.1-1.fc36
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-07-27
Last occurrence
2024-09-25
Unique reports
2
Quality
-38

Statistics

Operating system Unique / Total count
Fedora 36 2 / 2
Operating system Count
Fedora 36 2
Architecture Count
x86_64 2
Related packages Count
firefox 1
 0:104.0.1-1.fc36 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::CodeGeneratorShared::encodeAllocation(js::jit::LSnapshot*, js::jit::MDefinition*, unsigned int*)
/usr/lib64/firefox/libxul.so 0x2d3795b
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
2
js::jit::CodeGeneratorShared::encode(js::jit::LSnapshot*)
/usr/lib64/firefox/libxul.so 0x2d37840
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
3
void js::jit::CodeGeneratorX86Shared::bailout<js::jit::BailoutLabel>(js::jit::BailoutLabel const&, js::jit::LSnapshot*)
/usr/lib64/firefox/libxul.so 0x3ec5af3
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
4
js::jit::CodeGeneratorX86Shared::bailoutFrom(js::jit::Label*, js::jit::LSnapshot*)
/usr/lib64/firefox/libxul.so 0x3ec5aa4
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
5
js::jit::CodeGenerator::visitUnbox(js::jit::LUnbox*)
/usr/lib64/firefox/libxul.so 0x3ebf4f7
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
6
js::jit::CodeGenerator::generateBody()
/usr/lib64/firefox/libxul.so 0x3f076bc
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
7
js::jit::CodeGenerator::generate()
/usr/lib64/firefox/libxul.so 0x3f07456
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
8
js::jit::GenerateCode(js::jit::MIRGenerator*, js::jit::LIRGraph*)
/usr/lib64/firefox/libxul.so 0x3f3638b
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
9
js::jit::IonCompileTask::runTask()
/usr/lib64/firefox/libxul.so 0x3f40293
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
10
js::jit::IonCompileTask::runHelperThreadTask(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3f40201
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
11
js::GlobalHelperThreadState::runTaskLocked(js::HelperThreadTask*, js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3cba37b
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
12
js::GlobalHelperThreadState::runOneTask(js::AutoLockHelperThreadState&)
/usr/lib64/firefox/libxul.so 0x3cba10d
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
13
JS::RunHelperThreadTask()
/usr/lib64/firefox/libxul.so 0x3cba0ba
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
14
HelperThreadTaskHandler::Run()
/usr/lib64/firefox/libxul.so 0x2fd96ba
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
15
mozilla::TaskController::RunPoolThread()
/usr/lib64/firefox/libxul.so 0x2dbfde4
Build id: eec68b0217098b3327b324ec0390abb8ac480cff 		-
16
_pt_root
/lib64/libnspr4.so 0x2c413
Build id: 98f94ddf59984aec246bf5a21a3bb1a1264908a4 		-
17
set_alt_signal_stack_and_start(PthreadCreateParams*)
/usr/lib64/firefox/firefox 0x72456
Build id: 905bd33a9056ab1a62db94ca607ea7b90f8b603b 		-
18
start_thread
/lib64/libc.so.6 0x8ce2d
Build id: 6f5ce514a9e7f51e0247a527c3a41ed981c04458 		-
19
__clone3
/lib64/libc.so.6 0x1121b0
Build id: 6f5ce514a9e7f51e0247a527c3a41ed981c04458 		-