Crash in mozilla::dom::CallbackObject::FinishSlowJSInitIfMoreThanOneOwner(JSContext*)

Similar reports
Problem #658251
Component
firefox
Last affected version
0:132.0.1-1.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-11-27
Last occurrence
2025-04-16
Unique reports
4
Quality
-62

Statistics

Operating system Unique / Total count
Fedora 40 4 / 9
Operating system Count
Fedora 40 9
Architecture Count
x86_64 9
Related packages Count
firefox 9
 0:132.0.1-1.fc40 9

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::CallbackObject::FinishSlowJSInitIfMoreThanOneOwner(JSContext*)
/usr/lib64/firefox/libxul.so 0x28cb6ba
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
2
mozilla::dom::RootedCallback<mozilla::OwningNonNull<mozilla::dom::binding_detail::FastFunction> >::~RootedCallback() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x319de24
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
3
mozilla::dom::Window_Binding::setTimeout(JSContext*, JS::Handle<JSObject*>, void*, JSJitMethodCallArgs const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x319b009
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
4
bool mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::MaybeCrossOriginObjectThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x3046ed8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
5
anonymous function
/usr/lib64/firefox/libxul.so 0x1a7a4e0845db -
6
anonymous function
/usr/lib64/firefox/libxul.so 0x1a7a4d6f04e6 -
7
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x28e93be
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
8
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x28ad039
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
9
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x28b0a26
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
10
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x294e7ac
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
11
mozilla::dom::Function::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, nsTArray<JS::Value> const&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x327bb12
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
12
void mozilla::dom::Function::Call<nsCOMPtr<nsIGlobalObject> >(nsCOMPtr<nsIGlobalObject> const&, nsTArray<JS::Value> const&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x327b9ba
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
13
mozilla::dom::CallbackTimeoutHandler::Call(char const*)
/usr/lib64/firefox/libxul.so 0x327b80f
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
14
mozilla::dom::TimeoutManager::RunTimeout(mozilla::TimeStamp const&, mozilla::TimeStamp const&, bool)
/usr/lib64/firefox/libxul.so 0x310d2f5
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
15
mozilla::dom::TimeoutExecutor::MaybeExecute()
/usr/lib64/firefox/libxul.so 0x310ce11
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
16
mozilla::dom::TimeoutExecutor::Run()
/usr/lib64/firefox/libxul.so 0x310cd83
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
17
mozilla::ThrottledEventQueue::Inner::Executor::Run()
/usr/lib64/firefox/libxul.so 0x310c523
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
18
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2800f54
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
19
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x28007e2
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x27fdee8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
21
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cc1022
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c501c8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
23
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cc08fd
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
24
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cc0794
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
25
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cbfc5b
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
26
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c501c8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
27
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2c42be0
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
28
main
/usr/lib64/firefox/firefox 0x43687
Build id: 7b8736680d7e71f02ca2abb17c3551195a09a8d2 		-
29
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
30
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
31
_start
/usr/lib64/firefox/firefox 0x40815
Build id: 7b8736680d7e71f02ca2abb17c3551195a09a8d2 		-