Crash in js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:140.0-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-07-20
Last occurrence
2025-07-20
Unique reports
1
Quality
-64

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:140.0-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x2d5b523
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
2
js::frontend::RewritingParseNodeVisitor<FoldVisitor>::visit(js::frontend::ParseNode*&)
/usr/lib64/firefox/libxul.so 0x2d5c675
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
3
/usr/lib64/firefox/libxul.so 0x2d5b6e4
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
4
/usr/lib64/firefox/libxul.so 0x2d5b971
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
5
/usr/lib64/firefox/libxul.so 0x2d5b627
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
6
/usr/lib64/firefox/libxul.so 0x2d5b661
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
7
ScriptCompiler<char16_t>::compile(JSContext*, js::frontend::SharedContext*)
/usr/lib64/firefox/libxul.so 0x3572813
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
8
bool CompileGlobalScriptToStencilAndMaybeInstantiate<char16_t>(JSContext*, js::FrontendContext*, js::LifoAlloc&, js::frontend::CompilationInput&, js::frontend::ScopeBindingCache*, JS::SourceText<char16_t>&, js::ScopeKind, mozilla::Vector<js::frontend::ExtraBindingInfo, 0ul, js::SystemAllocPolicy>*, js::frontend::CompilationStencil**, js::frontend::InitialStencilAndDelazifications**, js::frontend::CompilationGCOutput*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x35711e6
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
9
already_AddRefed<js::frontend::InitialStencilAndDelazifications> CompileGlobalScriptToStencilImpl<char16_t>(JSContext*, JS::ReadOnlyCompileOptions const&, JS::SourceText<char16_t>&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2957c58
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
10
mozilla::dom::ScriptLoader::InstantiateClassicScriptFromMaybeEncodedSource(JSContext*, JS::CompileOptions&, JS::loader::ScriptLoadRequest*, JS::MutableHandle<JSScript*>, RefPtr<js::frontend::InitialStencilAndDelazifications>&, JS::Handle<JS::Value>, JS::Handle<JSScript*>, mozilla::ErrorResult&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x2268430
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
11
mozilla::dom::ScriptLoader::ProcessRequest(JS::loader::ScriptLoadRequest*)
/usr/lib64/firefox/libxul.so 0x226a599
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
12
mozilla::dom::ScriptElement::MaybeProcessScript() [clone .cold]
/usr/lib64/firefox/libxul.so 0x319127
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
13
nsIScriptElement::AttemptToExecute()
/usr/lib64/firefox/libxul.so 0xd17cfd
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
14
nsHtml5TreeOpExecutor::RunScript(nsIContent*, bool)
/usr/lib64/firefox/libxul.so 0xd18e0b
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
15
nsHtml5TreeOpExecutor::RunFlushLoop() [clone .cold]
/usr/lib64/firefox/libxul.so 0x6d78d3
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
16
nsHtml5ExecutorReflusher::Run()
/usr/lib64/firefox/libxul.so 0xd73b4b
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
17
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2f6bed0
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2f6b77b
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
19
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2ccd2d7
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
20
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3054a51
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3387793
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
22
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x362255d
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
23
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3621c45
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
24
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc3db3e
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
25
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3387793
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
26
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2822bf1
Build id: e05cc4497f447f15384cc774e4d53040a74e5653 		-
27
main
/usr/lib64/firefox/firefox 0x3e997
Build id: a0a7245b7061891bb338531538c1f24bee477655 		-
28
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: c4b06a608071b2c9852fae62ca3b69cdc22cd022 		-
29
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: c4b06a608071b2c9852fae62ca3b69cdc22cd022 		-
30
_start
/usr/lib64/firefox/firefox 0x3b9b5
Build id: a0a7245b7061891bb338531538c1f24bee477655 		-