Crash in mozilla::dom::EventTarget::NonVirtualRelease()

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-06-15
Last occurrence
2026-06-15
Unique reports
1
Quality
-172

Statistics

Operating system Unique / Total count
Fedora 41 1 / 1
Operating system Count
Fedora 41 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:145.0-2.fc41 1
google-noto-sans-cjk-vf-fonts 1
 1:2.004-8.fc41 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::EventTarget::NonVirtualRelease()
/usr/lib64/firefox/libxul.so 0x2c4d494
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
non-virtual thunk to nsContentList::ContentWillBeRemoved(nsIContent*, ContentRemoveInfo const&)
/usr/lib64/firefox/libxul.so 0x1aea84e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
mozilla::dom::MutationObservers::NotifyContentWillBeRemoved(nsINode*, nsIContent*, ContentRemoveInfo const&)
/usr/lib64/firefox/libxul.so 0x1a6bafb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
nsINode::RemoveChildNode(nsIContent*, bool, BatchRemovalState const*, nsINode*, MutationEffectOnScript)
/usr/lib64/firefox/libxul.so 0x1b1f819
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
nsINode::RemoveChildInternal(nsINode&, MutationEffectOnScript, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x1b1db16
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
mozilla::dom::Node_Binding::removeChild(JSContext*, JS::Handle<JSObject*>, void*, JSJitMethodCallArgs const&)
/usr/lib64/firefox/libxul.so 0x1ec0d86
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
bool mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x26adf7f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d11d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c2e5e0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c3cc4b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d230
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d5ad
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x57b7735
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x57b7a8f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf826c75 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf87e2f3 -
17
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf87bcbe -
18
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf881ec7 -
19
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf877b30 -
20
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf8263dd -
21
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x5948d9d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c2f4ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c3cc4b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d230
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x56add91
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf8287c4 -
27
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf82e436 -
28
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf830881 -
29
anonymous function
/usr/lib64/firefox/libxul.so 0xb5eaf8263dd -
30
js::jit::EnterBaselineInterpreterAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*)
/usr/lib64/firefox/libxul.so 0x582afe7
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
31
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c3ca4e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
32
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x5c3cbe7
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
33
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d230
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
34
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x5c3d5ad
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
35
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x5135661
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
36
mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2590924
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
37
mozilla::EventListenerManager::HandleEventSingleListener(mozilla::EventListenerManager::Listener*, nsAtom*, mozilla::WidgetEvent*, mozilla::dom::Event*, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2c69bb6
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
38
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x2c6a0bd
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
39
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x2c6aa6a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
40
mozilla::EventTargetChainItem::HandleEvent(mozilla::EventChainPostVisitor&, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2c6b313
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
41
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2c6b983
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
42
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2c6daff
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
43
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x2c6e22a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
44
mozilla::PresShell::HandleDOMEventWithTarget(nsIContent*, mozilla::dom::Event*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x45c4eac
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
45
mozilla::dom::HTMLFormElement::MaybeSubmit(mozilla::dom::Element*)
/usr/lib64/firefox/libxul.so 0x2e031ec
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
46
mozilla::dom::HTMLInputElement::ActivationBehavior(mozilla::EventChainPostVisitor&)
/usr/lib64/firefox/libxul.so 0x2e03a03
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
47
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2c6cb4e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
48
mozilla::PresShell::HandleDOMEventWithTarget(nsIContent*, mozilla::WidgetEvent*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x45c4d9d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
49
mozilla::dom::HTMLInputElement::MaybeSubmitForm(nsPresContext*)
/usr/lib64/firefox/libxul.so 0x2e03535
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
50
mozilla::dom::HTMLInputElement::PostHandleEvent(mozilla::EventChainPostVisitor&)
/usr/lib64/firefox/libxul.so 0x2e0a074
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
51
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2c6b9b1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
52
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x2c6bc6e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
53
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x2c6daff
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
54
mozilla::PresShell::EventHandler::DispatchEventToDOM(mozilla::WidgetEvent*, nsEventStatus*, nsPresShellEventCB*)
/usr/lib64/firefox/libxul.so 0x45e72ee
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
55
mozilla::PresShell::EventHandler::DispatchEvent(mozilla::EventStateManager*, mozilla::WidgetEvent*, bool, nsEventStatus*, nsIContent*)
/usr/lib64/firefox/libxul.so 0x45e76bb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
56
mozilla::PresShell::EventHandler::HandleEventWithCurrentEventInfo(mozilla::WidgetEvent*, nsEventStatus*, bool, nsIContent*)
/usr/lib64/firefox/libxul.so 0x45e890a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
57
mozilla::PresShell::EventHandler::HandleEventAtFocusedContent(mozilla::WidgetGUIEvent*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x45eb176
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
58
mozilla::PresShell::HandleEvent(nsIFrame*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x45eab0c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
59
nsViewManager::DispatchEvent(mozilla::WidgetGUIEvent*, nsView*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x42249ca
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
60
nsView::HandleEvent(mozilla::WidgetGUIEvent*, bool)
/usr/lib64/firefox/libxul.so 0x4224b78
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
61
mozilla::widget::PuppetWidget::DispatchEvent(mozilla::WidgetGUIEvent*, nsEventStatus&)
/usr/lib64/firefox/libxul.so 0x427327c
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
62
mozilla::layers::APZCCallbackHelper::DispatchWidgetEvent(mozilla::WidgetGUIEvent&)
/usr/lib64/firefox/libxul.so 0x12546a0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
63
mozilla::dom::BrowserChild::RecvRealKeyEvent(mozilla::WidgetKeyboardEvent const&, nsID const&)
/usr/lib64/firefox/libxul.so 0x3d1a421
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
64
mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3df907a
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
65
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3e02acc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
66
mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
/usr/lib64/firefox/libxul.so 0xd24beb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
67
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0xd33604
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
68
mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)
/usr/lib64/firefox/libxul.so 0xd33f94
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
69
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0xd34166
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
70
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f588f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
71
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f600b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
72
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
73
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
74
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
75
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
76
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
77
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
78
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
79
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
80
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
81
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
82
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
83
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
84
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
85
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
86
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-