Crash in js::jit::AssemblerX86Shared::bind(js::jit::Label*) [clone .cold]

Similar reports
Problem #596992
Component
firefox
Last affected version
0:122.0-5.fc39
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-11-07
Last occurrence
2026-09-02
Unique reports
9
Quality
-74

Graphs

Statistics

Operating system Unique / Total count
Fedora 38 1 / 1
Fedora 39 9 / 9
Operating system Count
Fedora 39 9
Fedora 38 1
Architecture Count
x86_64 10
Related packages Count
firefox 10
 0:119.0-2.fc39 6
 0:119.0.1-1.fc39 1
 0:119.0-2.fc38 1
 0:120.0.1-1.fc39 1
 0:122.0-5.fc39 1
google-noto-serif-vf-fonts 1
 0:20230201-2.fc38 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::AssemblerX86Shared::bind(js::jit::Label*) [clone .cold]
/usr/lib64/firefox/libxul.so 0xcf393
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
2
js::jit::BaselineCompiler::compile() [clone .cold]
/usr/lib64/firefox/libxul.so 0x164dc2
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
3
js::jit::BaselineCompile(JSContext*, JSScript*, bool)
/usr/lib64/firefox/libxul.so 0x2677bf5
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
4
js::jit::BaselineCompileFromBaselineInterpreter(JSContext*, js::jit::BaselineFrame*, unsigned char**)
/usr/lib64/firefox/libxul.so 0x2a2ed88
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x1b1b57f26718 -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x1b1b57f30c95 -
7
anonymous function
/usr/lib64/firefox/libxul.so 0x1b1b57f254e9 -
8
js::Interpret(JSContext*, js::RunState&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x13501f
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
9
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2626adb
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
10
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x262aba8
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
11
js::fun_call(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2a78822
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
12
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x262aca9
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
13
js::Interpret(JSContext*, js::RunState&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x12d78f
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
14
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2626b6c
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
15
js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x29d860b
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
16
JS_ExecuteScript(JSContext*, JS::Handle<JSScript*>)
/usr/lib64/firefox/libxul.so 0x29fe0f4
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
17
mozilla::dom::JSExecutionContext::ExecScript()
/usr/lib64/firefox/libxul.so 0x2cccd82
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
18
mozilla::dom::ScriptLoader::EvaluateScript(nsIGlobalObject*, JS::loader::ScriptLoadRequest*)
/usr/lib64/firefox/libxul.so 0x2cbc11e
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
19
mozilla::dom::ScriptLoader::ProcessRequest(JS::loader::ScriptLoadRequest*)
/usr/lib64/firefox/libxul.so 0x2cb7d50
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
20
mozilla::dom::ScriptElement::MaybeProcessScript() [clone .cold]
/usr/lib64/firefox/libxul.so 0x2dbb50
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
21
nsIScriptElement::AttemptToExecute()
/usr/lib64/firefox/libxul.so 0x2c51d85
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
22
nsHtml5TreeOpExecutor::RunScript(nsIContent*, bool)
/usr/lib64/firefox/libxul.so 0x2c51b1f
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
23
nsHtml5TreeOpExecutor::RunFlushLoop()
/usr/lib64/firefox/libxul.so 0x2bf083f
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
24
nsHtml5ExecutorReflusher::Run()
/usr/lib64/firefox/libxul.so 0x2cdc44c
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
25
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x258e2d4
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
26
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x258db42
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
27
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x258be73
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
28
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28efa42
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
29
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288c59b
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
30
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x28ef95d
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
31
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28ef2c9
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
32
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288c59b
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
33
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x287de49
Build id: 1026b7463267714db936afbe1abf897460f3bf58
-
34
main
/usr/lib64/firefox/firefox 0x4d5d8
Build id: f7fcdbddf059fbc678c7c9375abda52bab4abb31
-
35
__libc_start_call_main
/lib64/libc.so.6 0x27b8a
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24
-
36
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27c4b
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24
-
37
_start
/usr/lib64/firefox/firefox 0x4b9a5
Build id: f7fcdbddf059fbc678c7c9375abda52bab4abb31
-