Crash in nsHtml5TreeOperation::~nsHtml5TreeOperation()::TreeOperationMatcher::operator()(opCreateMathMLElement const&) [clone .isra.0]

Similar reports
Problem #644027
Component
firefox
Last affected version
0:136.0.2-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-12-13
Last occurrence
2026-04-07
Unique reports
5
Quality
-36

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Fedora 41 5 / 5
Operating system Count
Fedora 41 5
Fedora 40 1
Architecture Count
x86_64 6
Related packages Count
firefox 6
 0:135.0.1-1.fc41 3
 0:134.0.2-1.fc41 1
 0:136.0.2-1.fc41 1
 0:132.0.1-1.fc40 1
urw-base35-nimbus-roman-fonts 1
 0:20200910-20.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
nsHtml5TreeOperation::~nsHtml5TreeOperation()::TreeOperationMatcher::operator()(opCreateMathMLElement const&) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x2c3d385
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
2
nsHtml5AutoFlush::~nsHtml5AutoFlush() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2a4faa6
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
3
nsHtml5TreeOpExecutor::RunFlushLoop()
/usr/lib64/firefox/libxul.so 0x2a4a563
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
4
nsHtml5ExecutorReflusher::Run()
/usr/lib64/firefox/libxul.so 0x30c8e68
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
5
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2800f54
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
6
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x28007e2
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
7
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x27fdee8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
8
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cc1022
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
9
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c501c8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
10
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cc08fd
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
11
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2cc0794
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
12
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2cbfc5b
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
13
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c501c8
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
14
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2c42be0
Build id: 25136cb907d5901ae26a5eec8f6b871054f1290f 		-
15
main
/usr/lib64/firefox/firefox 0x43687
Build id: 7b8736680d7e71f02ca2abb17c3551195a09a8d2 		-
16
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
17
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
18
_start
/usr/lib64/firefox/firefox 0x40815
Build id: 7b8736680d7e71f02ca2abb17c3551195a09a8d2 		-