Crash in mozilla::gfx::DrawTargetRecording::CreateSimilarDrawTarget(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::SurfaceFormat) const

Similar reports
Problem #824396
Component
firefox
Last affected version
0:115.12.0-1.el7.centos
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-05-23
Last occurrence
2026-05-30
Unique reports
1
Quality
-76

Statistics

Operating system Unique / Total count
CentOS 7 1 / 8
Operating system Count
CentOS 7 8
Architecture Count
x86_64 8
Related packages Count
libXrender 8
 0:0.9.10-1.el7 8
nss-softokn-freebl 8
 0:3.90.0-6.el7_9 8
pixman 8
 0:0.34.0-1.el7 8
Show more… (73)
pango 8
 0:1.42.4-4.el7_7 8
fribidi 8
 0:1.0.2-1.el7_7.1 8
lz4 8
 0:1.8.3-1.el7 8
at-spi2-core 8
 0:2.28.0-1.el7 8
pcre 8
 0:8.32-17.el7 8
libglvnd-egl 8
 1:1.0.1-0.8.git5baa1e5.el7 8
libXfixes 8
 0:5.0.3-1.el7 8
fontconfig 8
 0:2.13.0-4.3.el7 8
nss-util 8
 0:3.90.0-1.el7_9 8
libcap 8
 0:2.22-11.el7 8
freetype 8
 0:2.8-14.el7_9.1 8
systemd-libs 8
 0:219-78.el7_9.9 8
liberation-narrow-fonts 8
 1:1.07.2-16.el7 8
libxkbcommon 8
 0:0.7.1-3.el7 8
libselinux 8
 0:2.5-15.el7 8
graphite2 8
 0:1.3.10-1.el7_3 8
libgpg-error 8
 0:1.12-3.el7 8
gdk-pixbuf2 8
 0:2.36.12-3.el7 8
libXtst 8
 0:1.2.3-1.el7 8
libwayland-client 8
 0:1.15.0-1.el7 8
libuuid 8
 0:2.23.2-65.el7_9.1 8
glib2 8
 0:2.56.1-9.el7_9 8
libXcursor 8
 0:1.1.15-1.el7 8
bzip2-libs 8
 0:1.0.6-13.el7 8
glibc 8
 0:2.17-326.el7_9.3 8
libXau 8
 0:1.0.8-2.1.el7 8
nss-softokn 8
 0:3.90.0-6.el7_9 8
libXinerama 8
 0:1.1.3-2.1.el7 8
glibc-common 8
 0:2.17-326.el7_9.3 8
gtk3 8
 0:3.22.30-8.el7_9 8
cairo 8
 0:1.15.12-4.el7 8
libwayland-cursor 8
 0:1.15.0-1.el7 8
libglvnd 8
 1:1.0.1-0.8.git5baa1e5.el7 8
xz-libs 8
 0:5.2.2-2.el7_9 8
elfutils-libelf 8
 0:0.176-5.el7 8
alsa-lib 8
 0:1.1.8-1.el7 8
libXcomposite 8
 0:0.4.4-4.1.el7 8
libattr 8
 0:2.4.46-13.el7 8
at-spi2-atk 8
 0:2.26.2-1.el7 8
firefox 8
 0:115.12.0-1.el7.centos 8
liberation-sans-fonts 8
 1:1.07.2-16.el7 8
nss 8
 0:3.90.0-2.el7_9 8
dbus-glib 8
 0:0.100-7.el7 8
zlib 8
 0:1.2.7-21.el7_9 8
paratype-pt-sans-fonts 8
 0:20101909-3.el7 8
libXext 8
 0:1.3.3-3.el7 8
libstdc++ 8
 0:4.8.5-44.el7 8
libglvnd-glx 8
 1:1.0.1-0.8.git5baa1e5.el7 8
libxcb 8
 0:1.13-1.el7 8
elfutils-libs 8
 0:0.176-5.el7 8
libgcc 8
 0:4.8.5-44.el7 8
libXrandr 8
 0:1.5.1-2.el7 8
libmount 8
 0:2.23.2-65.el7_9.1 8
libepoxy 8
 0:1.5.2-1.el7 8
libwayland-egl 8
 0:1.15.0-1.el7 8
libpng 8
 2:1.5.13-8.el7 8
libblkid 8
 0:2.23.2-65.el7_9.1 8
dejavu-serif-fonts 8
 0:2.33-6.el7 8
dejavu-sans-fonts 8
 0:2.33-6.el7 8
libXdamage 8
 0:1.1.4-4.1.el7 8
atk 8
 0:2.28.1-2.el7 8
cairo-gobject 8
 0:1.15.12-4.el7 8
libgcrypt 8
 0:1.5.3-14.el7 8
libthai 8
 0:0.1.14-9.el7 8
harfbuzz 8
 0:1.7.5-2.el7 8
sqlite 8
 0:3.7.17-8.el7_7.1 8
libffi 8
 0:3.0.13-19.el7 8
dbus-libs 8
 1:1.10.24-15.el7 8
nspr 8
 0:4.35.0-1.el7_9 8
libX11 8
 0:1.6.7-5.el7_9 8
libXi 8
 0:1.7.9-1.el7 8
dejavu-sans-mono-fonts 8
 0:2.33-6.el7 8
expat 8
 0:2.1.0-15.el7_9 8

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::gfx::DrawTargetRecording::CreateSimilarDrawTarget(mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::SurfaceFormat) const
/usr/lib64/firefox/libxul.so 0x1678e90
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
2
mozilla::nsImageRenderer::Draw(nsPresContext*, gfxContext&, nsRect const&, nsRect const&, nsRect const&, nsPoint const&, nsSize const&, mozilla::gfx::IntRectTyped<mozilla::CSSPixel> const&, float)
/usr/lib64/firefox/libxul.so 0x3f8e8f7
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
3
mozilla::nsImageRenderer::DrawLayer(nsPresContext*, gfxContext&, nsRect const&, nsRect const&, nsPoint const&, nsRect const&, nsSize const&, float)
/usr/lib64/firefox/libxul.so 0x3f8f54b
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
4
nsCSSRendering::PaintStyleImageLayerWithSC(nsCSSRendering::PaintBGParams const&, gfxContext&, mozilla::ComputedStyle const*, nsStyleBorder const&)
/usr/lib64/firefox/libxul.so 0x3f8a046
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
5
mozilla::PaintMaskSurface(mozilla::SVGIntegrationUtils::PaintFramesParams const&, mozilla::gfx::DrawTarget*, float, mozilla::ComputedStyle const*, nsTArray<mozilla::SVGMaskFrame*> const&, nsPoint const&)
/usr/lib64/firefox/libxul.so 0x3ea4888
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
6
void mozilla::PaintMaskAndClipPathInternal<std::function<void ()> >(mozilla::SVGIntegrationUtils::PaintFramesParams const&, std::function<void ()> const&)
/usr/lib64/firefox/libxul.so 0x3eb1470
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
7
mozilla::nsDisplayMasksAndClipPaths::PaintWithContentsPaintCallback(mozilla::nsDisplayListBuilder*, gfxContext*, std::function<void ()> const&)
/usr/lib64/firefox/libxul.so 0x3f85a37
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
8
mozilla::nsDisplayMasksAndClipPaths::Paint(mozilla::nsDisplayListBuilder*, gfxContext*)
/usr/lib64/firefox/libxul.so 0x3f85b9c
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
9
mozilla::nsDisplayList::Paint(mozilla::nsDisplayListBuilder*, gfxContext*, int)
/usr/lib64/firefox/libxul.so 0x3f434ec
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
10
mozilla::nsDisplayList::Paint(mozilla::nsDisplayListBuilder*, gfxContext*, int)
/usr/lib64/firefox/libxul.so 0x3f434ec
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
11
mozilla::nsDisplayTransform::Paint(mozilla::nsDisplayListBuilder*, gfxContext*, mozilla::Maybe<mozilla::gfx::PolygonTyped<mozilla::gfx::UnknownUnits> > const&)
/usr/lib64/firefox/libxul.so 0x3f797cc
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
12
mozilla::nsDisplayTransform::Paint(mozilla::nsDisplayListBuilder*, gfxContext*)
/usr/lib64/firefox/libxul.so 0x3f79ed9
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
13
mozilla::nsDisplayList::Paint(mozilla::nsDisplayListBuilder*, gfxContext*, int)
/usr/lib64/firefox/libxul.so 0x3f434ec
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
14
mozilla::nsDisplayList::PaintRoot(mozilla::nsDisplayListBuilder*, gfxContext*, unsigned int, mozilla::Maybe<double>)
/usr/lib64/firefox/libxul.so 0x3f8ac77
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
15
nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, mozilla::nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags)
/usr/lib64/firefox/libxul.so 0x3cf919c
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
16
mozilla::PresShell::RenderDocument(nsRect const&, mozilla::RenderDocumentFlags, unsigned int, gfxContext*)
/usr/lib64/firefox/libxul.so 0x3c6413c
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
17
mozilla::gfx::PaintFragment::Record(mozilla::dom::BrowsingContext*, mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> > const&, float, unsigned int, mozilla::gfx::CrossProcessPaintFlags)
/usr/lib64/firefox/libxul.so 0x194bb0f
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
18
mozilla::dom::WindowGlobalChild::RecvDrawSnapshot(mozilla::Maybe<mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> > const&, float const&, unsigned int const&, unsigned int const&, std::function<void (mozilla::gfx::PaintFragment&&)>&&)
/usr/lib64/firefox/libxul.so 0x3548eb1
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
19
mozilla::dom::PWindowGlobalChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x362e442
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
20
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x35f0cb6
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
21
mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x138fed0
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
22
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x1398fcd
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
23
mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)
/usr/lib64/firefox/libxul.so 0x13998e3
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
24
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x1399a57
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
25
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc65f23
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
26
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc67d19
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
27
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xc67f5b
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
28
_ZN7mozilla6detail16RunnableFunctionIZNS_14TaskControllerC4EvEUlvE0_E3RunEv
/usr/lib64/firefox/libxul.so 0xc68105
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
29
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xc8d238
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
30
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc789eb
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
31
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x1385e90
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
32
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1334c65
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
33
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x39bd708
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
34
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4d1d77f
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
35
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1334c65
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
36
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4d1dd8b
Build id: ed0acdc6d204b99d2e18df05f2e8253927cffffa
-
37
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x15cb7
Build id: e87f7ed54804d41d7bb1ce51656511149eaa0342
-
38
main
/usr/lib64/firefox/firefox 0x153c8
Build id: e87f7ed54804d41d7bb1ce51656511149eaa0342
-