Crash in JSLinearString* JSRope::flattenInternal<(JSRope::UsingBarrier)0, unsigned char>(JSRope*)

Similar reports
Problem #743734
Component
firefox
Last affected version
0:135.0.1-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-06-03
Last occurrence
2025-04-29
Unique reports
1
Quality
-98

Graphs

Statistics

Operating system Unique / Total count
Fedora 38 1 / 1
Fedora 41 1 / 1
Operating system Count
Fedora 38 1
Fedora 41 1
Architecture Count
x86_64 2
Related packages Count
firefox 1
 0:135.0.1-1.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
JSLinearString* JSRope::flattenInternal<(JSRope::UsingBarrier)0, unsigned char>(JSRope*)
/usr/lib64/firefox/libxul.so 0x51a920c
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
2
JSRope::flatten(JSContext*)
/usr/lib64/firefox/libxul.so 0x51a9865
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
3
js::array_join(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x4fcc7b0
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
4
js::jit::ArrayJoin(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSString*>)
/usr/lib64/firefox/libxul.so 0x551a052
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432dcf04f -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432df8c13 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432dee75b -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432df97ff -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432df512d -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432df783c -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432dee75b -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432df9141 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432dee75b -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432e0f58a -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432e1474e -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432dd866d -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x3fe432dce4ee -
18
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x56d1071
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
19
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x58aa639
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
20
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x58aaa9c
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
21
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x58aaf2d
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
22
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x5033e93
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
23
/usr/lib64/firefox/libxul.so 0x25b24c5
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
24
/usr/lib64/firefox/libxul.so 0x2aa4b1c
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
25
/usr/lib64/firefox/libxul.so 0x2ab047c
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
26
/usr/lib64/firefox/libxul.so 0x2ab3e80
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
27
mozilla::EventTargetChainItem::HandleEvent(mozilla::EventChainPostVisitor&, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2ab472e
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
28
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2ab4d40
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
29
mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2ab684f
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
30
mozilla::EventDispatcher::DispatchDOMEvent(nsISupports*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2ab6fda
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
31
/usr/lib64/firefox/libxul.so 0x2a70300
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
32
/usr/lib64/firefox/libxul.so 0x2a9e6cf
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
33
mozilla::dom::MessageEventRunnable::DispatchDOMEvent(JSContext*, mozilla::dom::WorkerPrivate*, mozilla::DOMEventTargetHelper*, bool)
/usr/lib64/firefox/libxul.so 0x36d0002
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
34
mozilla::dom::WorkerRunnable::Run()
/usr/lib64/firefox/libxul.so 0x36eb3e8
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xd308d4
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
36
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xd1d7ef
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
37
mozilla::dom::WorkerPrivate::DoRunLoop(JSContext*)
/usr/lib64/firefox/libxul.so 0x36f2fff
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
38
mozilla::dom::workerinternals::(anonymous namespace)::WorkerThreadPrimaryRunnable::Run()
/usr/lib64/firefox/libxul.so 0x36c8948
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
39
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xd308d4
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
40
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xd1d7ef
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
41
mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x13f1dca
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
42
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x13acbe2
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
43
nsThread::ThreadFunc(void*)
/usr/lib64/firefox/libxul.so 0xd300ea
Build id: 47b270d4eb0f0566f63b482a0185a20b39520e5d 		-
44
_pt_root
/lib64/libnspr4.so 0x2d759
Build id: 64a3eb7023749c27ae28319f7a3f58f51a39a225 		-
45
start_thread
/lib64/libc.so.6 0x8cc57
Build id: 6107835fa7d4725691b2b7f6aaee7abe09f493b2 		-
46
__clone3
/lib64/libc.so.6 0x112a70
Build id: 6107835fa7d4725691b2b7f6aaee7abe09f493b2 		-