Crash in nsTArrayInfallibleAllocator::ResultType nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayInfallibleAllocator>::AssignInternal<nsTArrayInfallibleAllocator, RefPtr<mozilla::dom::BlobImpl> >(RefPtr<mozilla::dom::BlobImpl> const*, unsigned long)

Similar reports
Problem #618244
Component
firefox
Last affected version
0:143.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-02-22
Last occurrence
2025-10-06
Unique reports
3
Quality
-106

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Fedora 42 3 / 3
Operating system Count
Fedora 42 3
Fedora 41 1
Architecture Count
x86_64 4
Related packages Count
firefox 4
 0:143.0.3-1.fc42 1
 0:143.0-1.fc42 1
 0:135.0.1-1.fc41 1
 0:141.0.2-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
nsTArrayInfallibleAllocator::ResultType nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayInfallibleAllocator>::AssignInternal<nsTArrayInfallibleAllocator, RefPtr<mozilla::dom::BlobImpl> >(RefPtr<mozilla::dom::BlobImpl> const*, unsigned long)
/usr/lib64/firefox/libxul.so 0x2ebb966
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
2
mozilla::dom::MultipartBlobImpl::InitializeBlob(mozilla::dom::Sequence<mozilla::dom::OwningArrayBufferViewOrArrayBufferOrBlobOrUTF8String> const&, nsTSubstring<char16_t> const&, bool, mozilla::RTPCallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x33b9b25
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
3
mozilla::dom::Blob_Binding::_constructor(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x33b7cfd
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
4
InternalConstruct(JSContext*, js::AnyConstructArgs const&, js::CallReason) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x29216d1
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
5
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2e3a81c
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
6
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x291193b
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
7
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2915056
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
8
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2e7aac5
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
9
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2e7a75a
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
10
anonymous function
/usr/lib64/firefox/libxul.so 0x25e168782d75 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x25e168862900 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x25e16878c31a -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x25e1687822d5 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x25e1687c8ab4 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x25e16878c31a -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x25e169658499 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x25e1697e5a11 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x25e16956a7b5 -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x25e1687824e6 -
20
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x294d5ef
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
21
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2911969
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
22
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2915056
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
23
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x291c14c
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
24
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2f7d5a5
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
25
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2915163
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
26
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x29b365c
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
27
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x28f3505
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
28
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2a2636b
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
29
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2a15212
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
30
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x290284f
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
31
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0xbf27a
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
32
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x29017e1
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
33
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2e1d3bc
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
34
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x31097d1
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
35
mozilla::dom::IDBTransaction::FireCompleteOrAbortEvents(nsresult)
/usr/lib64/firefox/libxul.so 0x311ff62
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
36
mozilla::dom::indexedDB::PBackgroundIDBTransactionChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3139937
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
37
mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2ef686b
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
38
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x285f170
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
39
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2d48917
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
40
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x285d084
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
41
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x285c91e
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
42
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x285a7c6
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
43
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2d43b42
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
44
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cd2c38
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
45
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2d438bd
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
46
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2d43624
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
47
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2d41ecb
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
48
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cd2c38
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
49
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2cc37ba
Build id: 89ea1ec2431fdc53b8efb90eba08d6ee54f1fa50 		-
50
main
/usr/lib64/firefox/firefox 0x41277
Build id: 3ac1a6958615c1a7b806f3236963eefa8aace55c 		-
51
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
52
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
53
_start
/usr/lib64/firefox/firefox 0x3e415
Build id: 3ac1a6958615c1a7b806f3236963eefa8aace55c 		-