Crash in nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayInfallibleAllocator>::ClearAndRetainStorage()

Similar reports
Problem #618244
Component
firefox
Last affected version
0:136.0.3-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-02-17
Last occurrence
2026-03-17
Unique reports
2
Quality
-98

Statistics

Operating system Unique / Total count
Fedora 42 2 / 2
Operating system Count
Fedora 42 2
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:136.0.3-1.fc42 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayInfallibleAllocator>::ClearAndRetainStorage()
/usr/lib64/firefox/libxul.so 0x2ede2f3
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
2
nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayFallibleAllocator>::~nsTArray_Impl() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x34380f5
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
3
mozilla::dom::MultipartBlobImpl::InitializeBlob(mozilla::dom::Sequence<mozilla::dom::OwningArrayBufferViewOrArrayBufferOrBlobOrUTF8String> const&, nsTSubstring<char16_t> const&, bool, mozilla::RTPCallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x34367da
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
4
mozilla::dom::Blob_Binding::_constructor(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3435aeb
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
5
InternalConstruct(JSContext*, js::AnyConstructArgs const&, js::CallReason) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x29da38e
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
6
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2efc8c8
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
7
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x29cac3b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
8
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x29ce349
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
9
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2f3c207
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
10
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2f3be99
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
11
anonymous function
/usr/lib64/firefox/libxul.so 0x245a68e6ed75 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x245a69cc65a9 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x245a69f00d01 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x245a6a0bde15 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x245a68e6e4e6 -
16
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2a065af
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
17
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x29cac69
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
18
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x29ce349
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
19
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x29d4a29
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
20
PromiseReactionJob(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x30443a6
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
21
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x29ce45b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
22
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a6e357
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
23
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x29ac836
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
24
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2adf7fb
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
25
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2aca152
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
26
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x29bc05f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
27
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) [clone .cold]
/usr/lib64/firefox/libxul.so 0xb8f4d
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
28
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x29baf01
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
29
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2edf36c
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
30
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x31d409d
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
31
mozilla::dom::IDBTransaction::FireCompleteOrAbortEvents(nsresult)
/usr/lib64/firefox/libxul.so 0x31efb33
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
32
mozilla::dom::indexedDB::PBackgroundIDBTransactionChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3207c84
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
33
mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2fb8c8b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
34
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x2919a37
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
35
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2df428b
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
36
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x29168f7
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
37
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x29161dc
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
38
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2914d37
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
39
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2def862
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
40
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2d7b62f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
41
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2def78d
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
42
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x2def553
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
43
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2dee494
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
44
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2d7b62f
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
45
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2d6bea5
Build id: 45e479ca0d5cf310dc7adbc3ccbfbbb03a404d38 		-
46
main
/usr/lib64/firefox/firefox 0x3fa77
Build id: 3405c3a516529ae99d2c30e01e2a90f18eb27c3c 		-
47
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: 0a6f11930e8ccbc4fe862685a0cc984228f888c7 		-
48
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: 0a6f11930e8ccbc4fe862685a0cc984228f888c7 		-
49
_start
/usr/lib64/firefox/firefox 0x3cb55
Build id: 3405c3a516529ae99d2c30e01e2a90f18eb27c3c 		-