Crash in nsTSubstring<char>::Assign(nsTSubstring<char> const&, std::nothrow_t const&) [clone .constprop.0]

Similar reports
Problem #786609
Component
firefox
Last affected version
0:146.0-3.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-10-16
Last occurrence
2026-01-20
Unique reports
3
Quality
-92

Statistics

Operating system Unique / Total count
Fedora 42 3 / 3
Operating system Count
Fedora 42 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:143.0.4-1.fc42 2
 0:146.0-3.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
nsTSubstring<char>::Assign(nsTSubstring<char> const&, std::nothrow_t const&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x2db6ceb
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
2
mozilla::dom::MultipartBlobImpl::InitializeBlob(mozilla::dom::Sequence<mozilla::dom::OwningArrayBufferViewOrArrayBufferOrBlobOrUTF8String> const&, nsTSubstring<char16_t> const&, bool, mozilla::RTPCallerType, mozilla::ErrorResult&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x6b6cd4
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
3
mozilla::dom::Blob_Binding::_constructor(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3a4a72a
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
4
InternalConstruct(JSContext*, js::AnyConstructArgs const&, js::CallReason) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2f0cb8a
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
5
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ee2749
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
6
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ee1763
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
7
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ef2c1b
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
8
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2f4bf33
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
9
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2f4bc29
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
10
anonymous function
/usr/lib64/firefox/libxul.so 0xa8cc70ecd75 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0xa8cc75977c6 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0xa8cc747c2d1 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0xa8cc74fed95 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0xa8cc70ec4e6 -
15
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2f4c4f2
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
16
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2ee1727
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
17
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ef2c1b
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
18
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x302bac7
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
19
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2ef2af5
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
20
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x3022393
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
21
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x30205f3
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
22
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool) [clone .cold]
/usr/lib64/firefox/libxul.so 0x24e13d
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
23
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x30baa7e
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
24
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x30a717f
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
25
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x232b49
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
26
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x36b20d0
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
27
mozilla::dom::IDBTransaction::FireCompleteOrAbortEvents(nsresult)
/usr/lib64/firefox/libxul.so 0x36c6955
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
28
mozilla::dom::indexedDB::PBackgroundIDBTransactionChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x36d8214
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
29
mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x36add90
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
30
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x30153d1
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
31
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x3014df6
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
32
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x302593d
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
33
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x302521b
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
34
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x30251d9
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2dd2875
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
36
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x30e7a07
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
37
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x344e9f3
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
38
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x370a9cd
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
39
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3709946
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
40
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc3e5ee
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
41
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x344e9f3
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
42
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2919b49
Build id: 5be058ec4b9b9d81446091c37d8f2f8504e3b692 		-
43
main
/usr/lib64/firefox/firefox 0x3f8f9
Build id: 2e470537324fcd156ddd2872194099ecc09cff27 		-
44
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
45
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
46
_start
/usr/lib64/firefox/firefox 0x3cf35
Build id: 2e470537324fcd156ddd2872194099ecc09cff27 		-