Crash in mozilla::dom::AbstractRange::RegisterClosestCommonInclusiveAncestor(nsINode*)

Similar reports
Problem #805295
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-12-23
Last occurrence
2026-09-14
Unique reports
3
Quality
-90

Statistics

Operating system Unique / Total count
Fedora 41 3 / 5
Operating system Count
Fedora 41 5
Architecture Count
x86_64 5
Related packages Count
firefox 5
 0:145.0-2.fc41 5

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::AbstractRange::RegisterClosestCommonInclusiveAncestor(nsINode*)
/usr/lib64/firefox/libxul.so 0x194d885
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
mozilla::dom::Selection::StyledRanges::MaybeAddRangeAndTruncateOverlaps(nsRange*, mozilla::Maybe<unsigned long>*)
/usr/lib64/firefox/libxul.so 0x1ab1640
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
mozilla::dom::Selection::AddRangesForUserSelectableNodes(nsRange*, mozilla::Maybe<unsigned long>*, mozilla::dom::Selection::DispatchSelectstartEvent) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x1ab2910
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
mozilla::dom::Selection::SetAnchorFocusToRange(nsRange*)
/usr/lib64/firefox/libxul.so 0x1ab2edc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
mozilla::dom::Selection::Extend(nsINode&, unsigned int, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1ab7fb8
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
mozilla::dom::Selection::Extend(nsINode*, unsigned int)
/usr/lib64/firefox/libxul.so 0x1ab83f7
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
nsFrameSelection::TakeFocus(nsIContent&, unsigned int, unsigned int, mozilla::CaretAssociationHint, nsFrameSelection::FocusMode)
/usr/lib64/firefox/libxul.so 0x475a244
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
nsFrameSelection::HandleClick(nsIContent*, unsigned int, unsigned int, nsFrameSelection::FocusMode, mozilla::CaretAssociationHint)
/usr/lib64/firefox/libxul.so 0x475bb0c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
nsFrameSelection::HandleDrag(nsIFrame*, nsPoint const&)
/usr/lib64/firefox/libxul.so 0x475bce4
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
nsIFrame::HandleDrag(nsPresContext*, mozilla::WidgetGUIEvent*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x475c002
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2c6ba66
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2c6daff
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
mozilla::PresShell::EventHandler::DispatchEventToDOM(mozilla::WidgetEvent*, nsEventStatus*, nsPresShellEventCB*)
/usr/lib64/firefox/libxul.so 0x45e72ee
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
mozilla::PresShell::EventHandler::DispatchEvent(mozilla::EventStateManager*, mozilla::WidgetEvent*, bool, nsEventStatus*, nsIContent*)
/usr/lib64/firefox/libxul.so 0x45e76bb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
mozilla::PresShell::EventHandler::HandleEventWithCurrentEventInfo(mozilla::WidgetEvent*, nsEventStatus*, bool, nsIContent*)
/usr/lib64/firefox/libxul.so 0x45e890a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
mozilla::PresShell::EventHandler::HandleEventUsingCoordinates(AutoWeakFrame&, mozilla::WidgetGUIEvent*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x45e9b4f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
mozilla::PresShell::HandleEvent(nsIFrame*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x45eab0c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
nsViewManager::DispatchEvent(mozilla::WidgetGUIEvent*, nsView*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x42249ca
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
nsView::HandleEvent(mozilla::WidgetGUIEvent*, bool)
/usr/lib64/firefox/libxul.so 0x4224b78
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
mozilla::widget::PuppetWidget::DispatchEvent(mozilla::WidgetGUIEvent*, nsEventStatus&)
/usr/lib64/firefox/libxul.so 0x427327c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
mozilla::layers::APZCCallbackHelper::DispatchWidgetEvent(mozilla::WidgetGUIEvent&)
/usr/lib64/firefox/libxul.so 0x12546a0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
mozilla::dom::BrowserChild::HandleRealMouseButtonEvent(mozilla::WidgetMouseEvent const&, mozilla::layers::ScrollableLayerGuid const&, unsigned long const&)
/usr/lib64/firefox/libxul.so 0x3d2061a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
mozilla::dom::BrowserChild::ProcessPendingCoalescedMouseDataAndDispatchEvents() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x3d20ccd
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
nsRefreshDriver::TickObserverArray(unsigned int, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x4591be9
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x459d2dd
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x45a04a9
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
27
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x45a07b0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
28
mozilla::detail::RunnableFunction<mozilla::VsyncRefreshDriverTimer::NotifyVsyncOnMainThread(mozilla::VsyncEvent const&)::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x45a129d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
29
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f588f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
30
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f600b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
31
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
32
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
33
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
34
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
35
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
36
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
37
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
38
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
39
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
40
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
41
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
42
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
43
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
44
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
45
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-