Crash in mozilla::dom::AbstractRange::MarkDescendants(nsINode&)

Similar reports
Problem #804906
Component
firefox
Last affected version
0:146.0-3.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-12-16
Last occurrence
2026-01-17
Unique reports
5
Quality
-90

Statistics

Operating system Unique / Total count
Fedora 42 5 / 5
Operating system Count
Fedora 42 5
Architecture Count
x86_64 5
Related packages Count
firefox 5
 0:146.0-3.fc42 5

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::AbstractRange::MarkDescendants(nsINode&)
/usr/lib64/firefox/libxul.so 0x3956e54
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
2
mozilla::dom::AbstractRange::RegisterClosestCommonInclusiveAncestor(nsINode*)
/usr/lib64/firefox/libxul.so 0x3956d94
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
3
mozilla::dom::Selection::StyledRanges::MaybeAddRangeAndTruncateOverlaps(nsRange*, mozilla::Maybe<unsigned long>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x46e652
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
4
mozilla::dom::Selection::AddRangesForSelectableNodes(nsRange*, mozilla::Maybe<unsigned long>*, mozilla::dom::Selection::DispatchSelectstartEvent) [clone .cold]
/usr/lib64/firefox/libxul.so 0x46dcca
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
5
mozilla::dom::Selection::AddRangeAndSelectFramesAndNotifyListenersInternal(nsRange&, mozilla::dom::Document*, mozilla::ErrorResult&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x474f8d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
6
mozilla::dom::Selection::SetStartAndEndInternal(mozilla::dom::Selection::InLimiter, mozilla::RangeBoundaryBase<nsINode*, nsIContent*> const&, mozilla::RangeBoundaryBase<nsINode*, nsIContent*> const&, nsDirection, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x395a9b6
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
7
mozilla::dom::Selection::SelectAllChildren(nsINode&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x114bf47
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
8
.LTHUNK308.lto_priv.8
/usr/lib64/firefox/libxul.so 0x25c2ad8
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
9
nsSelectionCommand::DoCommand(nsTSubstring<char> const&, nsICommandParams*, nsISupports*)
/usr/lib64/firefox/libxul.so 0x115ee43
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
10
nsBaseCommandController::DoCommand(char const*)
/usr/lib64/firefox/libxul.so 0x19ad9a5
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
11
mozilla::KeyEventHandler::ExecuteHandler(mozilla::dom::EventTarget*, mozilla::dom::Event*)
/usr/lib64/firefox/libxul.so 0x1a21b91
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
12
mozilla::GlobalKeyListener::WalkHandlersAndExecute(mozilla::GlobalKeyListener::Purpose, mozilla::dom::KeyboardEvent*, unsigned int, mozilla::IgnoreModifierState const&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x1a21e31
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
13
mozilla::GlobalKeyListener::WalkHandlersInternal(mozilla::GlobalKeyListener::Purpose, mozilla::dom::KeyboardEvent*)
/usr/lib64/firefox/libxul.so 0x1a21fb9
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
14
mozilla::GlobalKeyListener::HandleEvent(mozilla::dom::Event*)
/usr/lib64/firefox/libxul.so 0x1a221e3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
15
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool) [clone .cold]
/usr/lib64/firefox/libxul.so 0x250fee
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
16
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x318ce7e
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
17
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x31764b1
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
18
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x3176020
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
19
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x224240
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
20
mozilla::PresShell::EventHandler::HandleEventWithCurrentEventInfo(mozilla::WidgetEvent*, nsEventStatus*, bool, nsIContent*)
/usr/lib64/firefox/libxul.so 0x25fa25f
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
21
mozilla::PresShell::EventHandler::HandleEvent(AutoWeakFrame&, mozilla::WidgetGUIEvent*, bool, nsEventStatus*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x260c09b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
22
mozilla::PresShell::HandleEvent(nsIFrame*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x260cdc8
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
23
nsViewManager::DispatchEvent(mozilla::WidgetGUIEvent*, nsView*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x23ea407
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
24
nsView::HandleEvent(mozilla::WidgetGUIEvent*, bool)
/usr/lib64/firefox/libxul.so 0x23ea4b7
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
25
mozilla::widget::PuppetWidget::DispatchEvent(mozilla::WidgetGUIEvent*, nsEventStatus&)
/usr/lib64/firefox/libxul.so 0x240d73a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
26
mozilla::layers::APZCCallbackHelper::DispatchWidgetEvent(mozilla::WidgetGUIEvent&)
/usr/lib64/firefox/libxul.so 0xe20f01
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
27
mozilla::dom::BrowserChild::RecvRealKeyEvent(mozilla::WidgetKeyboardEvent const&, nsID const&)
/usr/lib64/firefox/libxul.so 0x224d7e7
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
28
mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2265d7b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
29
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x226e87f
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
30
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x30efb02
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
31
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x30ef169
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
32
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x3100d1d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
33
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x310051a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
34
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2eba3c0
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
35
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x31b1181
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
36
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34f1ab3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
37
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b147d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
38
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b0eb4
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
39
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc51226
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
40
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34f1ab3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
41
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29ff3ce
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
42
main
/usr/lib64/firefox/firefox 0x40283
Build id: 7faaa58a26584c4a148345e3cd5e9eec958b6754 		-
43
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
44
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
45
_start
/usr/lib64/firefox/firefox 0x3da15
Build id: 7faaa58a26584c4a148345e3cd5e9eec958b6754 		-