Crash in huge_dalloc(void*, arena_t*) [clone .lto_priv.0] [clone .cold]

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:139.0.4-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-06-09
Last occurrence
2026-06-09
Unique reports
1
Quality
-46

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Operating system Count
Fedora 41 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:139.0.4-1.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
huge_dalloc(void*, arena_t*) [clone .lto_priv.0] [clone .cold]
/usr/lib64/firefox/firefox 0x94c0
Build id: 21045a2e4ba1452267f2d321afe53874cf7bcd2d 		-
2
free
/usr/lib64/firefox/firefox 0x36944
Build id: 21045a2e4ba1452267f2d321afe53874cf7bcd2d 		-
3
SkPath::~SkPath()
/usr/lib64/firefox/libxul.so 0x304a804
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
4
mozilla::detail::RefCounted<mozilla::gfx::Path, (mozilla::detail::RefCountAtomicity)0>::Release() const
/usr/lib64/firefox/libxul.so 0x304b5e5
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
5
mozilla::dom::SVGGeometryElement::~SVGGeometryElement() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31c5943
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
6
mozilla::dom::FragmentOrElement::cycleCollection::DeleteCycleCollectable(void*)
/usr/lib64/firefox/libxul.so 0x31a2e6e
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
7
void nsPurpleBuffer::VisitEntries<SnowWhiteKiller>(SnowWhiteKiller&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x316d0f3
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
8
AsyncFreeSnowWhite::Run()
/usr/lib64/firefox/libxul.so 0x38bb8aa
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
9
IdleRunnableWrapper::Run()
/usr/lib64/firefox/libxul.so 0x3661556
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
10
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2e4352f
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
11
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2e43160
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
12
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2bc3126
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
13
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2f16172
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
14
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3211e1c
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
15
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x34bfd5d
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
16
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x34bee60
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
17
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb80a23
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
18
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3211e1c
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
19
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x23ab71b
Build id: df12154a2f280ce2326147ac7118e7f370831d70 		-
20
main
/usr/lib64/firefox/firefox 0x3efa7
Build id: 21045a2e4ba1452267f2d321afe53874cf7bcd2d 		-
21
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: b840d32d15506ed2f29610c7f512d9084f2d7d69 		-
22
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: b840d32d15506ed2f29610c7f512d9084f2d7d69 		-
23
_start
/usr/lib64/firefox/firefox 0x3c015
Build id: 21045a2e4ba1452267f2d321afe53874cf7bcd2d 		-