Crash in js::jit::GetPropIRGenerator::tryAttachObjectLength(JS::Handle<JSObject*>, js::jit::ObjOperandId, JS::Handle<JS::PropertyKey>)

Similar reports
Problem #551710
Component
firefox
Last affected version
0:131.0.2-1.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-04-22
Last occurrence
2026-08-27
Unique reports
2
Quality
-306

Graphs

Statistics

Operating system Unique / Total count
Fedora 36 1 / 1
Fedora 37 1 / 1
Fedora 38 5 / 5
Fedora 40 2 / 2
Operating system Count
Fedora 38 5
Fedora 40 2
Fedora 36 1
Fedora 37 1
Architecture Count
x86_64 9
Related packages Count
firefox 3
 0:131.0.2-1.fc40 2
 0:112.0.1-1.fc36 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::GetPropIRGenerator::tryAttachObjectLength(JS::Handle<JSObject*>, js::jit::ObjOperandId, JS::Handle<JS::PropertyKey>)
/usr/lib64/firefox/libxul.so 0x5622566
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
2
js::jit::GetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x56590a6
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
3
void js::jit::TryAttachStub<js::jit::GetPropIRGenerator, js::jit::CacheKind, JS::MutableHandle<JS::Value>&, JS::Rooted<JS::Value>&>(char const*, JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, js::jit::CacheKind&&, JS::MutableHandle<JS::Value>&, JS::Rooted<JS::Value>&) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x54da6d0
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
4
js::jit::DoGetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::MutableHandle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x54ded6b
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916db1e08 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916db4e20 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731dc7f -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab2d5 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731f0e5 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731eddf -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e52b -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916faba03 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab2d5 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725340b -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731f1ef -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731eddf -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e52b -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e88d -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e88d -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e88d -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e88d -
26
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
27
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916faba03 -
28
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab2d5 -
29
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725340b -
30
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731f1ef -
31
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731eddf -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e52b -
34
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e88d -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
36
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916faba03 -
37
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab2d5 -
38
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725340b -
39
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731f1ef -
40
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
41
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731eddf -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e52b -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916faba03 -
45
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab2d5 -
46
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725340b -
47
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731f1ef -
48
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
49
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731eddf -
50
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e52b -
51
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
52
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916faba03 -
53
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab2d5 -
54
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725340b -
55
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731f1ef -
56
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
57
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731eddf -
58
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731e52b -
59
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
60
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731b5b9 -
61
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
62
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731b5b9 -
63
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
64
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731b5b9 -
65
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
66
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916faba03 -
67
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab2d5 -
68
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725340b -
69
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916db5a80 -
70
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
71
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916db5a80 -
72
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
73
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731b298 -
74
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
75
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731b5b9 -
76
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
77
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731b5b9 -
78
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
79
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731b5b9 -
80
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
81
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916faba03 -
82
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab2d5 -
83
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725340b -
84
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916db5a80 -
85
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917253cd5 -
86
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916db5a80 -
87
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
88
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91731b298 -
89
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91725240e -
90
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916db5a80 -
91
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917251a84 -
92
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916f3327e -
93
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916f919d2 -
94
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916facf28 -
95
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916f919d2 -
96
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf9170d6071 -
97
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf91706c65b -
98
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf9170d5a16 -
99
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917061ec1 -
100
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917083354 -
101
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf917087572 -
102
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab4ee -
103
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x56daf61
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
104
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x58ba439
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
105
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x58ba905
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
106
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x58bad7d
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
107
js::fun_call(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x50ac3de
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
108
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf9172a8331 -
109
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf9172606ca -
110
anonymous function
/usr/lib64/firefox/libxul.so 0x3bf916dab4ee -
111
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x56daf61
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
112
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x58ba4b8
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
113
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x58ba905
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
114
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x58bad7d
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
115
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x512d3c6
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
116
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x515893d
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
117
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x58baad0
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
118
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x58bad7d
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
119
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x503a373
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
120
mozilla::dom::PromiseJobCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x20b977a
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
121
mozilla::dom::PromiseJobCallback::Call(mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*)
/usr/lib64/firefox/libxul.so 0xc85604
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
122
mozilla::PromiseJobRunnable::Run(mozilla::AutoSlowOperation&)
/usr/lib64/firefox/libxul.so 0xc85781
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
123
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0xc92579
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
124
mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener*, mozilla::dom::Event*, mozilla::dom::EventTarget*)
/usr/lib64/firefox/libxul.so 0x2afa5ef
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
125
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2afdde0
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
126
mozilla::EventTargetChainItem::HandleEvent(mozilla::EventChainPostVisitor&, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2afe6ae
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
127
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2afec20
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
128
mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2b0076f
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
129
mozilla::EventDispatcher::DispatchDOMEvent(nsISupports*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2b00f0a
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
130
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2ab9bf0
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
131
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2ae8baf
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
132
mozilla::dom::WebSocket::CreateAndDispatchSimpleEvent(nsTSubstring<char16_t> const&)
/usr/lib64/firefox/libxul.so 0x394312e
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
133
mozilla::dom::WebSocketImpl::OnStart(nsISupports*)
/usr/lib64/firefox/libxul.so 0x3947c23
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
134
mozilla::net::WebSocketChannelChild::OnStart(nsTSubstring<char> const&, nsTSubstring<char> const&, nsTSubstring<char16_t> const&, bool const&, unsigned long const&)
/usr/lib64/firefox/libxul.so 0x1299322
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
135
mozilla::net::WrappedWebSocketEvent::Run()
/usr/lib64/firefox/libxul.so 0x128b959
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
136
mozilla::SchedulerGroup::Runnable::Run()
/usr/lib64/firefox/libxul.so 0xd1b01f
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
137
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xd20fc5
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
138
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xd22e0d
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
139
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xd2303b
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
140
mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0xd23126
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
141
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xd472c2
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
142
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xd330df
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
143
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x1412d2a
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
144
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x13cdbf2
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
145
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3a8ed2c
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
146
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4f0afe6
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
147
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x13cdbf2
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
148
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4f0b611
Build id: b11e5fce3adc2e1742f921954b7726fd6440a4cb 		-
149
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x1068a
Build id: ea963b6e72d70d7482933152207a6de560af8e94 		-
150
main
/usr/lib64/firefox/firefox 0xfd2b
Build id: ea963b6e72d70d7482933152207a6de560af8e94 		-
151
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
152
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
153
_start
/usr/lib64/firefox/firefox 0x100c5
Build id: ea963b6e72d70d7482933152207a6de560af8e94 		-