Crash in mozilla::dom::AbstractRange::RegisterSelection(mozilla::dom::Selection&)

Similar reports
Problem #783401
Component
firefox
Last affected version
0:145.0.1-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-08-24
Last occurrence
2026-06-30
Unique reports
17
Quality
-90

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 3 / 3
Fedora 42 17 / 26
Operating system Count
Fedora 42 26
Fedora 41 3
Architecture Count
x86_64 29
Related packages Count
firefox 29
 0:145.0.1-1.fc42 8
 0:142.0-1.fc42 6
 0:143.0.3-1.fc42 4
 0:144.0-3.fc42 4
 0:142.0.1-1.fc42 2
 0:143.0.4-1.fc41 2
 0:142.0.1-1.fc41 1
 0:143.0.4-1.fc42 1
 0:144.0.2-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::AbstractRange::RegisterSelection(mozilla::dom::Selection&)
/usr/lib64/firefox/libxul.so 0x31b3e0e
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
2
mozilla::dom::Selection::StyledRanges::MaybeAddRangeAndTruncateOverlaps(nsRange*, mozilla::Maybe<unsigned long>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x4719c4
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
3
mozilla::dom::Selection::AddRangesForSelectableNodes(nsRange*, mozilla::Maybe<unsigned long>*, mozilla::dom::Selection::DispatchSelectstartEvent) [clone .cold]
/usr/lib64/firefox/libxul.so 0x471011
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
4
mozilla::dom::Selection::SetAnchorFocusToRange(nsRange*)
/usr/lib64/firefox/libxul.so 0x10f3ab4
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
5
mozilla::dom::Selection::Extend(nsINode&, unsigned int, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x110cab1
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
6
mozilla::dom::Selection::Extend(nsINode*, unsigned int) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x110cbed
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
7
nsFrameSelection::TakeFocus(nsIContent&, unsigned int, unsigned int, mozilla::CaretAssociationHint, nsFrameSelection::FocusMode)
/usr/lib64/firefox/libxul.so 0x257f386
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
8
nsFrameSelection::HandleClick(nsIContent*, unsigned int, unsigned int, nsFrameSelection::FocusMode, mozilla::CaretAssociationHint)
/usr/lib64/firefox/libxul.so 0x25800aa
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
9
nsFrameSelection::HandleDrag(nsIFrame*, nsPoint const&)
/usr/lib64/firefox/libxul.so 0x25803d2
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
10
nsIFrame::HandleDrag(nsPresContext*, mozilla::WidgetGUIEvent*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2581711
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
11
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x22ee24
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
12
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x22ce34
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
13
mozilla::PresShell::EventHandler::HandleEventWithCurrentEventInfo(mozilla::WidgetEvent*, nsEventStatus*, bool, nsIContent*)
/usr/lib64/firefox/libxul.so 0x2511d98
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
14
mozilla::PresShell::EventHandler::HandleEvent(AutoWeakFrame&, mozilla::WidgetGUIEvent*, bool, nsEventStatus*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x2514301
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
15
mozilla::PresShell::HandleEvent(nsIFrame*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2514a86
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
16
nsViewManager::DispatchEvent(mozilla::WidgetGUIEvent*, nsView*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2329478
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
17
nsView::HandleEvent(mozilla::WidgetGUIEvent*, bool)
/usr/lib64/firefox/libxul.so 0x2329529
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
18
mozilla::widget::PuppetWidget::DispatchEvent(mozilla::WidgetGUIEvent*, nsEventStatus&)
/usr/lib64/firefox/libxul.so 0x23ca33a
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
19
mozilla::layers::APZCCallbackHelper::DispatchWidgetEvent(mozilla::WidgetGUIEvent&)
/usr/lib64/firefox/libxul.so 0xe0f64f
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
20
mozilla::dom::BrowserChild::HandleRealMouseButtonEvent(mozilla::WidgetMouseEvent const&, mozilla::layers::ScrollableLayerGuid const&, unsigned long const&)
/usr/lib64/firefox/libxul.so 0x21a93ca
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
21
mozilla::dom::BrowserChild::ProcessPendingCoalescedMouseDataAndDispatchEvents()
/usr/lib64/firefox/libxul.so 0x21a9529
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
22
nsRefreshDriver::TickObserverArray(unsigned int, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x30fb07f
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
23
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x30f86a7
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
24
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x3793c07
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
25
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread()
/usr/lib64/firefox/libxul.so 0x3793401
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
26
mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
/usr/lib64/firefox/libxul.so 0x21610c8
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
27
mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2204f9c
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
28
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x21c39bf
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
29
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x2fa0a41
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
30
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2fa0439
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
31
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2fb1ae1
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
32
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2fb12eb
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
33
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2fb1269
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
34
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2d6cb1d
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
35
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x307a183
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
36
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x33e5a53
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
37
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36b230d
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
38
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36b1226
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
39
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc44ba0
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
40
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x33e5a53
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
41
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x28cbdfe
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
42
main
/usr/lib64/firefox/firefox 0x3f239
Build id: 3feef9f7e40272102e086312320050a6c61db5ae 		-
43
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 126a08bf502f4950b215dc773e52df8dcf50c393 		-
44
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 126a08bf502f4950b215dc773e52df8dcf50c393 		-
45
_start
/usr/lib64/firefox/firefox 0x3c885
Build id: 3feef9f7e40272102e086312320050a6c61db5ae 		-