Crash in free

Similar reports
Problem #800796
Component
firefox
Last affected version
0:144.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-10-16
Last occurrence
2026-07-04
Unique reports
26
Quality
-208

Graphs

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Fedora 42 26 / 27
Operating system Count
Fedora 42 27
Fedora 41 1
Architecture Count
x86_64 28
Related packages Count
firefox 28
 0:144.0-2.fc42 27
 0:144.0-2.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
free
/usr/lib64/firefox/firefox 0x366f3
Build id: 45e4b3241d1e90f1e87a5746e665500d574f6e52 		-
2
nsTArray_Impl<std::unique_ptr<float [], std::default_delete<float []> >, nsTArrayInfallibleAllocator>::DestructRange(unsigned long, unsigned long)
/usr/lib64/firefox/libxul.so 0x367f280
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
3
nsPipeEvents::~nsPipeEvents() [clone .cold]
/usr/lib64/firefox/libxul.so 0x18da23
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
4
nsPipe::OnInputStreamException(nsPipeInputStream*, nsresult)
/usr/lib64/firefox/libxul.so 0x30d6899
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
5
nsPipeInputStream::CloseWithStatus(nsresult)
/usr/lib64/firefox/libxul.so 0x36830e6
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
6
mozilla::dom::InputToReadableStreamAlgorithms::ReleaseObjects()
/usr/lib64/firefox/libxul.so 0x22e6050
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
7
mozilla::dom::NonAsyncInputToReadableStreamAlgorithms::ReleaseObjects()
/usr/lib64/firefox/libxul.so 0x22e60a6
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
8
mozilla::dom::streams_abstract::ReadableByteStreamControllerError(mozilla::dom::ReadableByteStreamController*, JS::Handle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x22d86e7
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
9
mozilla::dom::(anonymous namespace)::AbortStream(JSContext*, mozilla::dom::ReadableStream*, mozilla::ErrorResult&, JS::Handle<JS::Value>) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x19e5c70
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
10
.LTHUNK427.lto_priv.0
/usr/lib64/firefox/libxul.so 0x19f24cf
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
11
mozilla::dom::AbortSignalImpl::RunAbortSteps() [clone .cold]
/usr/lib64/firefox/libxul.so 0x6a2560
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
12
.LTHUNK212.lto_priv.19
/usr/lib64/firefox/libxul.so 0x3ad23c4
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
13
mozilla::dom::AbortSignal::SignalAbortWithDependents() [clone .cold]
/usr/lib64/firefox/libxul.so 0x6a238e
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
14
mozilla::dom::AbortController_Binding::abort(JSContext*, JS::Handle<JSObject*>, void*, JSJitMethodCallArgs const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3ad2175
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
15
bool mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2fba84d
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
16
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f929d5
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
17
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f81cdd
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
18
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f8139b
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
19
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f92afb
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
20
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fe6517
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
21
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3abd08c4 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3abd6546 -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3abd8988 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3abce4e6 -
25
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2fec21a
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
26
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f8132d
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
27
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f92afb
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
28
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2febd2a
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
29
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2feb9f9
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
30
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3abced75 -
31
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
32
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b03233e -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac603fe -
34
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd402d -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac30705 -
36
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd3280 -
37
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
38
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd2c5c -
39
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b01d48a -
40
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
41
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd3033 -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b01d48a -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd2c5c -
45
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b01d48a -
46
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
47
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd3033 -
48
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b01d48a -
49
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
50
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd3033 -
51
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b01d48a -
52
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
53
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd3033 -
54
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b01d48a -
55
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
56
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd2c5c -
57
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b01d48a -
58
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
59
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd2c5c -
60
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b01d48a -
61
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac1db05 -
62
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd2364 -
63
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b1ab976 -
64
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b1ab976 -
65
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b1ab976 -
66
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b1ab976 -
67
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac603fe -
68
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd1a96 -
69
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac30705 -
70
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3afd1416 -
71
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3b9903fb -
72
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3abd8988 -
73
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3ac603fe -
74
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3abd8988 -
75
anonymous function
/usr/lib64/firefox/libxul.so 0x292f3abce4e6 -
76
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2fec21a
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
77
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f813c7
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
78
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f92afb
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
79
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x30c4445
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
80
mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x3241708
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
81
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool) [clone .cold]
/usr/lib64/firefox/libxul.so 0x24f5f8
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
82
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x315cc1e
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
83
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x3147bdf
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
84
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x233c0e
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
85
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x37515f0
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
86
mozilla::DOMEventTargetHelper::DispatchTrustedEvent(mozilla::dom::Event*)
/usr/lib64/firefox/libxul.so 0x3b6280f
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
87
mozilla::DOMEventTargetHelper::DispatchTrustedEvent(nsTSubstring<char16_t> const&)
/usr/lib64/firefox/libxul.so 0x3b627c0
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
88
mozilla::AsyncEventRunner<mozilla::dom::SourceBuffer>::Run()
/usr/lib64/firefox/libxul.so 0x1cce111
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
89
mozilla::AutoTaskDispatcher::TaskGroupRunnable::Run()
/usr/lib64/firefox/libxul.so 0x905026
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
90
mozilla::XPCOMThreadWrapper::Runner::Run()
/usr/lib64/firefox/libxul.so 0x90701b
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
91
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x30c832d
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
92
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x30c7c0b
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
93
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2e73577
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
94
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3186911
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
95
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ebd33
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
96
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37a887d
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
97
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37a7f86
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
98
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc5b6c2
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
99
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ebd33
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
100
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29b874d
Build id: 3fe9cbf204ad14bf431b10cd700626507bf1682e 		-
101
main
/usr/lib64/firefox/firefox 0x3f783
Build id: 45e4b3241d1e90f1e87a5746e665500d574f6e52 		-
102
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
103
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
104
_start
/usr/lib64/firefox/firefox 0x3cd85
Build id: 45e4b3241d1e90f1e87a5746e665500d574f6e52 		-