Crash in js::jit::GetPropIRGenerator::tryAttachProxyElement(JS::Handle<JSObject*>, js::jit::ObjOperandId)

Similar reports
Problem #529898
Component
firefox
Last affected version
0:131.0.2-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2022-10-31
Last occurrence
2026-09-06
Unique reports
1
Quality
-154

Graphs

Statistics

Operating system Unique / Total count
Fedora 35 1 / 1
Fedora 36 4 / 4
Fedora 37 4 / 4
Show more… (2)
Fedora 38 1 / 1
Fedora 41 1 / 1
Operating system Count
Fedora 36 4
Fedora 37 4
Fedora 35 1
Show more… (2)
Fedora 38 1
Fedora 41 1
Architecture Count
x86_64 11
Related packages Count
firefox 2
 0:131.0.2-1.fc41 1
 0:107.0.1-1.fc35 1
dejavu-sans-fonts 1
 0:2.37-17.fc35 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachProxyElement(JS::Handle<JSObject*>, js::jit::ObjOperandId)
/usr/lib64/firefox/libxul.so 0x52f6202
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
2
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x5333e7d
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
3
void js::jit::TryAttachStub<js::jit::GetPropIRGenerator, js::jit::CacheKind, JS::Handle<JS::Value>&, JS::Handle<JS::Value>&>(char const*, JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, js::jit::CacheKind&&, JS::Handle<JS::Value>&, JS::Handle<JS::Value>&) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x51c3afa
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
4
js::jit::DoGetElemFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x51cce7c
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5eb99749 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0cbe11 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
26
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f0c80e5 -
27
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f150290 -
28
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f560a94 -
29
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5ebe9f40 -
30
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f1bc6dd -
31
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f4e5ad6 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f1f3de1 -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f4a893a -
34
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5edcb5c2 -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5ebe9f40 -
36
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5ed32325 -
37
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f4e0b4e -
38
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5ebe9f40 -
39
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5edf0dd1 -
40
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5f1f3de1 -
41
anonymous function
/usr/lib64/firefox/libxul.so 0x55f5eb934ee -
42
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x53b0824
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
43
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x556ba68
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
44
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x556bf25
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
45
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x556c3c0
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
46
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x4d41303
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
47
mozilla::dom::FrameRequestCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, double, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1c851b0
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
48
nsRefreshDriver::RunFrameRequestCallbacks(mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x39c6789
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
49
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x39c8c97
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
50
mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x39c9ae1
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
51
mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x39c9bc8
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
52
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x39c9e67
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
53
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&)
/usr/lib64/firefox/libxul.so 0x39ca930
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
54
mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
/usr/lib64/firefox/libxul.so 0x330f6a1
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
55
mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x342c840
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
56
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3401a44
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
57
mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x13412e0
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
58
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x134818b
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
59
mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)
/usr/lib64/firefox/libxul.so 0x134889b
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
60
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x13489f6
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
61
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xcbc5e4
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
62
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xcbcd9d
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
63
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xcbd073
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
64
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#2}>::Run()
/usr/lib64/firefox/libxul.so 0xcbd109
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
65
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xcbd789
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
66
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xca9b3f
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
67
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x1336470
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
68
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12f4572
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
69
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x378a47c
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
70
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4c14c86
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
71
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12f4572
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
72
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4c15193
Build id: 12e8dbf2e281595e26413c3f1a67f05932b927fa 		-
73
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x106ea
Build id: 12107c8a732ff000935fddc46816d00734924ef8 		-
74
main
/usr/lib64/firefox/firefox 0xfdbb
Build id: 12107c8a732ff000935fddc46816d00734924ef8 		-
75
__libc_start_call_main
/lib64/libc.so.6 0x29510
Build id: 85c438f4ff93e21675ff174371c9c583dca00b2c 		-
76
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x295c9
Build id: 85c438f4ff93e21675ff174371c9c583dca00b2c 		-
77
_start
/usr/lib64/firefox/firefox 0x10125
Build id: 12107c8a732ff000935fddc46816d00734924ef8 		-