Crash in js::jit::SetPropIRGenerator::tryAttachStub()

Similar reports
Problem #636648
Component
firefox
Last affected version
0:137.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-11-09
Last occurrence
2025-04-15
Unique reports
2
Quality
-150

Graphs

Statistics

Operating system Unique / Total count
Fedora 38 1 / 1
Fedora 41 2 / 2
Operating system Count
Fedora 41 2
Fedora 38 1
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:119.0-2.fc38 1
 0:137.0-2.fc41 1
 0:135.0-1.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
js::jit::SetPropIRGenerator::tryAttachStub()
/usr/lib64/firefox/libxul.so 0x26697d1
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
2
js::jit::DoSetPropFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, JS::Value*, JS::Handle<JS::Value>, JS::Handle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a1ad6c
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
3
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315acaee -
4
anonymous function
/usr/lib64/firefox/libxul.so 0x261d316e27b6 -
5
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315a94e9 -
6
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x265075a
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
7
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2626a70
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
8
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x262aba8
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
9
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a14b1d
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
10
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315ac17c -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315b1fa6 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315b4106 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315a94e9 -
14
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x265075a
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
15
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2626a70
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
16
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x262aba8
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
17
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a21a9a
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
18
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2a216dd
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
19
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315a9e98 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x261d318402e5 -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x261d3169a6f4 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315a94e9 -
23
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x265075a
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
24
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2626a70
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
25
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x262aba8
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
26
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a14b1d
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
27
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315ac17c -
28
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315b1fa6 -
29
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315b4106 -
30
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315a94e9 -
31
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x265075a
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
32
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2626a70
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
33
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x262aba8
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
34
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a21a9a
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
35
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2a216dd
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
36
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315a9e98 -
37
anonymous function
/usr/lib64/firefox/libxul.so 0x261d318402e5 -
38
anonymous function
/usr/lib64/firefox/libxul.so 0x261d316986e6 -
39
anonymous function
/usr/lib64/firefox/libxul.so 0x261d31698401 -
40
anonymous function
/usr/lib64/firefox/libxul.so 0x261d31697d3e -
41
anonymous function
/usr/lib64/firefox/libxul.so 0x261d31841f8e -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x261d3169776c -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x261d31698401 -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x261d31699e55 -
45
anonymous function
/usr/lib64/firefox/libxul.so 0x261d315a94e9 -
46
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x265075a
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
47
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2626b09
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
48
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x262aba8
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
49
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x263711c
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
50
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2b502b3
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
51
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x262aca9
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
52
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x268a3d2
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
53
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x25e412d
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
54
mozilla::dom::CallbackObject::CallSetup::~CallSetup()
/usr/lib64/firefox/libxul.so 0x268afdf
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
55
void mozilla::dom::Function::Call<nsCOMPtr<nsIGlobalObject> >(nsCOMPtr<nsIGlobalObject> const&, nsTArray<JS::Value> const&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x2e8e631
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
56
mozilla::dom::CallbackTimeoutHandler::Call(char const*)
/usr/lib64/firefox/libxul.so 0x2e8e464
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
57
mozilla::dom::TimeoutManager::RunTimeout(mozilla::TimeStamp const&, mozilla::TimeStamp const&, bool)
/usr/lib64/firefox/libxul.so 0x2d247ee
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
58
mozilla::dom::TimeoutExecutor::MaybeExecute()
/usr/lib64/firefox/libxul.so 0x2d24364
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
59
.LTHUNK55.lto_priv.16
/usr/lib64/firefox/libxul.so 0x2d9d990
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
60
nsTimerEvent::Run()
/usr/lib64/firefox/libxul.so 0x292c15e
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
61
mozilla::ThrottledEventQueue::Inner::Executor::Run()
/usr/lib64/firefox/libxul.so 0x2d23d55
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
62
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x258e2d4
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
63
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x258db42
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
64
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x290ae19
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
65
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x258bee5
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
66
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28efb86
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
67
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288c59b
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
68
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x28ef95d
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
69
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28ef2c9
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
70
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288c59b
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
71
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x287de49
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
72
main
/usr/lib64/firefox/firefox 0x4d5d8
Build id: f7fcdbddf059fbc678c7c9375abda52bab4abb31 		-
73
__libc_start_call_main
/lib64/libc.so.6 0x27b8a
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24 		-
74
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27c4b
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24 		-
75
_start
/usr/lib64/firefox/firefox 0x4b9a5
Build id: f7fcdbddf059fbc678c7c9375abda52bab4abb31 		-