Crash in mozilla::dom::AbstractRange::RegisterSelection(mozilla::dom::Selection&)

Similar reports
Problem #798016
Component
firefox
Last affected version
0:145.0.1-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-08-24
Last occurrence
2025-12-14
Unique reports
4
Quality
-52

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Fedora 42 4 / 4
Operating system Count
Fedora 42 4
Fedora 41 1
Architecture Count
x86_64 5
Related packages Count
firefox 5
 0:142.0-1.fc42 1
 0:143.0-1.fc42 1
 0:145.0.1-1.fc42 1
 0:143.0.4-1.fc41 1
 0:144.0-3.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::AbstractRange::RegisterSelection(mozilla::dom::Selection&)
/usr/lib64/firefox/libxul.so 0x31b3e0e
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
2
mozilla::dom::Selection::StyledRanges::MaybeAddRangeAndTruncateOverlaps(nsRange*, mozilla::Maybe<unsigned long>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x4719c4
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
3
mozilla::dom::Selection::AddRangesForSelectableNodes(nsRange*, mozilla::Maybe<unsigned long>*, mozilla::dom::Selection::DispatchSelectstartEvent) [clone .cold]
/usr/lib64/firefox/libxul.so 0x471011
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
4
mozilla::dom::Selection::SetAnchorFocusToRange(nsRange*)
/usr/lib64/firefox/libxul.so 0x10f3ab4
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
5
mozilla::dom::Selection::Extend(nsINode&, unsigned int, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x110cab1
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
6
mozilla::dom::Selection::Extend(nsINode*, unsigned int) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x110cbed
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
7
nsFrameSelection::TakeFocus(nsIContent&, unsigned int, unsigned int, mozilla::CaretAssociationHint, nsFrameSelection::FocusMode)
/usr/lib64/firefox/libxul.so 0x257f386
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
8
nsFrameSelection::HandleClick(nsIContent*, unsigned int, unsigned int, nsFrameSelection::FocusMode, mozilla::CaretAssociationHint)
/usr/lib64/firefox/libxul.so 0x25800aa
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
9
nsFrameSelection::HandleDrag(nsIFrame*, nsPoint const&)
/usr/lib64/firefox/libxul.so 0x25803d2
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
10
AutoScroller::Notify(nsITimer*)
/usr/lib64/firefox/libxul.so 0x10f3494
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
11
nsTimerEvent::Run()
/usr/lib64/firefox/libxul.so 0x3020c32
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
12
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2fb1ae1
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
13
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2fb12eb
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
14
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2fb1269
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
15
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2d6cb1d
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
16
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x307a183
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
17
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x33e5a53
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
18
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36b230d
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
19
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x36b1226
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
20
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc44ba0
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
21
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x33e5a53
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
22
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x28cbdfe
Build id: 0ebcde8a052f41a20cfcf5eebe2249535be119c6 		-
23
main
/usr/lib64/firefox/firefox 0x3f239
Build id: 3feef9f7e40272102e086312320050a6c61db5ae 		-
24
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 126a08bf502f4950b215dc773e52df8dcf50c393 		-
25
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 126a08bf502f4950b215dc773e52df8dcf50c393 		-
26
_start
/usr/lib64/firefox/firefox 0x3c885
Build id: 3feef9f7e40272102e086312320050a6c61db5ae 		-