Crash in core::ptr::drop_in_place$LT$smallvec..SmallVec$LT$$u5b$style..invalidation..element..invalidation_map..Dependency$u3b$$u20$1$u5d$$GT$$GT$::h12aae25ecbfe1d58

Similar reports
Problem #801960
Component
firefox
Last affected version
0:146.0-3.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-12-18
Last occurrence
2026-01-22
Unique reports
6
Quality
-66

Statistics

Operating system Unique / Total count
Fedora 42 6 / 8
Operating system Count
Fedora 42 8
Architecture Count
x86_64 8
Related packages Count
firefox 8
 0:146.0-3.fc42 8

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
core::ptr::drop_in_place$LT$smallvec..SmallVec$LT$$u5b$style..invalidation..element..invalidation_map..Dependency$u3b$$u20$1$u5d$$GT$$GT$::h12aae25ecbfe1d58
/usr/lib64/firefox/libxul.so 0x54827a4
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
2
style::invalidation::element::invalidation_map::InvalidationMap::clear::hb638a3848897f477
/usr/lib64/firefox/libxul.so 0x5481c5d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
3
style::stylist::CascadeData::clear::hcc38231ecccffaa1
/usr/lib64/firefox/libxul.so 0x549fa86
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
4
Servo_StyleSet_FlushStyleSheets
/usr/lib64/firefox/libxul.so 0x49948fb
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
5
mozilla::ServoStyleSet::UpdateStylist()
/usr/lib64/firefox/libxul.so 0x325ca48
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
6
mozilla::PresShell::Destroy()
/usr/lib64/firefox/libxul.so 0x395b15b
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
7
nsDocumentViewer::DestroyPresShell()
/usr/lib64/firefox/libxul.so 0x395aa8a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
8
nsDocumentViewer::Destroy()
/usr/lib64/firefox/libxul.so 0x395a778
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
9
nsDocShell::DestroyDocumentViewer()
/usr/lib64/firefox/libxul.so 0x3afa710
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
10
nsDocShell::Destroy() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x3afa204
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
11
nsWebBrowser::SetDocShell(nsDocShell*)
/usr/lib64/firefox/libxul.so 0x38b5a52
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
12
nsWebBrowser::InternalDestroy()
/usr/lib64/firefox/libxul.so 0x3af9def
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
13
nsWebBrowser::Destroy()
/usr/lib64/firefox/libxul.so 0x3af9dca
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
14
mozilla::dom::BrowserChild::DestroyWindow()
/usr/lib64/firefox/libxul.so 0x2247f87
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
15
mozilla::dom::BrowserChild::RecvDestroy()
/usr/lib64/firefox/libxul.so 0x2248370
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
16
mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2268a09
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
17
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x226e87f
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
18
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x30efb02
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
19
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x30ef169
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
20
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x3100d1d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
21
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x310051a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
22
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2eba3c0
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
23
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x31b1181
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
24
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34f1ab3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
25
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b147d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
26
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b0eb4
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
27
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc51226
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
28
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34f1ab3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
29
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29ff3ce
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
30
main
/usr/lib64/firefox/firefox 0x40283
Build id: 7faaa58a26584c4a148345e3cd5e9eec958b6754 		-
31
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
32
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
33
_start
/usr/lib64/firefox/firefox 0x3da15
Build id: 7faaa58a26584c4a148345e3cd5e9eec958b6754 		-