Crash in mozilla::dom::AbstractRange::MarkDescendants(nsINode&)

Similar reports
Problem #783401
Component
firefox
Last affected version
0:146.0-3.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-12-23
Last occurrence
2026-01-04
Unique reports
3
Quality
-92

Statistics

Operating system Unique / Total count
Fedora 42 3 / 3
Operating system Count
Fedora 42 3
Architecture Count
x86_64 3
Related packages Count
firefox 3
 0:146.0-3.fc42 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::AbstractRange::MarkDescendants(nsINode&)
/usr/lib64/firefox/libxul.so 0x3956e54
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
2
mozilla::dom::AbstractRange::RegisterClosestCommonInclusiveAncestor(nsINode*)
/usr/lib64/firefox/libxul.so 0x3956d94
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
3
mozilla::dom::Selection::StyledRanges::MaybeAddRangeAndTruncateOverlaps(nsRange*, mozilla::Maybe<unsigned long>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x46e652
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
4
mozilla::dom::Selection::AddRangesForSelectableNodes(nsRange*, mozilla::Maybe<unsigned long>*, mozilla::dom::Selection::DispatchSelectstartEvent) [clone .cold]
/usr/lib64/firefox/libxul.so 0x46dcca
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
5
mozilla::dom::Selection::SetAnchorFocusToRange(nsRange*)
/usr/lib64/firefox/libxul.so 0x11153f8
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
6
mozilla::dom::Selection::Extend(nsINode&, unsigned int, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x114b2d3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
7
mozilla::dom::Selection::Extend(nsINode*, unsigned int) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x114b40f
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
8
nsFrameSelection::TakeFocus(nsIContent&, unsigned int, unsigned int, mozilla::CaretAssociationHint, nsFrameSelection::FocusMode)
/usr/lib64/firefox/libxul.so 0x262a7a4
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
9
nsFrameSelection::HandleClick(nsIContent*, unsigned int, unsigned int, nsFrameSelection::FocusMode, mozilla::CaretAssociationHint)
/usr/lib64/firefox/libxul.so 0x262b4d4
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
10
nsFrameSelection::HandleDrag(nsIFrame*, nsPoint const&)
/usr/lib64/firefox/libxul.so 0x262b7fc
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
11
nsIFrame::HandleDrag(nsPresContext*, mozilla::WidgetGUIEvent*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x262c22d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
12
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x225ae3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
13
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0x224240
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
14
mozilla::PresShell::EventHandler::HandleEventWithCurrentEventInfo(mozilla::WidgetEvent*, nsEventStatus*, bool, nsIContent*)
/usr/lib64/firefox/libxul.so 0x25fa25f
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
15
mozilla::PresShell::EventHandler::HandleEvent(AutoWeakFrame&, mozilla::WidgetGUIEvent*, bool, nsEventStatus*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x260bc6a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
16
mozilla::PresShell::HandleEvent(nsIFrame*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x260cdc8
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
17
nsViewManager::DispatchEvent(mozilla::WidgetGUIEvent*, nsView*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x23ea407
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
18
nsView::HandleEvent(mozilla::WidgetGUIEvent*, bool)
/usr/lib64/firefox/libxul.so 0x23ea4b7
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
19
mozilla::widget::PuppetWidget::DispatchEvent(mozilla::WidgetGUIEvent*, nsEventStatus&)
/usr/lib64/firefox/libxul.so 0x240d73a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
20
mozilla::layers::APZCCallbackHelper::DispatchWidgetEvent(mozilla::WidgetGUIEvent&)
/usr/lib64/firefox/libxul.so 0xe20f01
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
21
mozilla::dom::BrowserChild::HandleRealMouseButtonEvent(mozilla::WidgetMouseEvent const&, mozilla::layers::ScrollableLayerGuid const&, unsigned long const&)
/usr/lib64/firefox/libxul.so 0x224accd
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
22
mozilla::dom::BrowserChild::ProcessPendingCoalescedMouseDataAndDispatchEvents()
/usr/lib64/firefox/libxul.so 0x224ae39
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
23
nsRefreshDriver::TickObserverArray(unsigned int, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x32570c2
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
24
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x3256a6f
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
25
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x38c354e
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
26
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread()
/usr/lib64/firefox/libxul.so 0x38c2c51
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
27
mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
/usr/lib64/firefox/libxul.so 0x221e474
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
28
mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x22aa39a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
29
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x226e87f
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
30
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x30efb02
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
31
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x30ef169
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
32
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x3100d1d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
33
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x310051a
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
34
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31004d9
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2eba875
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
36
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x31b1243
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
37
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34f1ab3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
38
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b147d
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
39
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37b0eb4
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
40
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc51226
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
41
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34f1ab3
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
42
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29ff3ce
Build id: 5502c0106b10d1ab7fa4951825b403cc9ae483aa 		-
43
main
/usr/lib64/firefox/firefox 0x40283
Build id: 7faaa58a26584c4a148345e3cd5e9eec958b6754 		-
44
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
45
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 48c4b9b1efb1df15da8e787f489128bf31893317 		-
46
_start
/usr/lib64/firefox/firefox 0x3da15
Build id: 7faaa58a26584c4a148345e3cd5e9eec958b6754 		-