Crash in nsRegion::RectIterator::Next()

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:151.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-07-16
Last occurrence
2026-07-16
Unique reports
1
Quality
-138

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:151.0-2.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
nsRegion::RectIterator::Next()
/usr/lib64/firefox/libxul.so 0x39b4e83
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
2
nsRegion::Or(nsRegion const&, nsRegion const&)
/usr/lib64/firefox/libxul.so 0xd66b36
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
3
mozilla::gfx::FilterSupport::ComputeSourceNeededRegions(mozilla::gfx::FilterDescription const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> const&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits>&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits>&, mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits>&)
/usr/lib64/firefox/libxul.so 0xd6ada1
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
4
mozilla::FilterInstance::ComputeNeededBoxes()
/usr/lib64/firefox/libxul.so 0x263e637
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
5
mozilla::SVGIntegrationUtils::GetRequiredSourceForInvalidArea(nsIFrame*, nsRect const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x5027d6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
6
nsIFrame::BuildDisplayListForStackingContext(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayList*, bool*)
/usr/lib64/firefox/libxul.so 0x32ea9e0
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
7
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f1c26
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
8
nsContainerFrame::BuildDisplayListForNonBlockChildren(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x39afcd4
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
9
nsInlineFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x25c5592
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
10
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
11
DisplayLine(mozilla::nsDisplayListBuilder*, GenericLineListIterator<nsLineLink, false>&, bool, mozilla::nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&, bool&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x39ae564
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
12
nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32f3edc
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
13
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
14
mozilla::ScrollContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32fe3cf
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
15
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f0b07
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
16
nsFlexContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x4e4bc3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
17
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f0b07
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
18
nsGridContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x4ede8d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
19
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
20
mozilla::ScrollContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32fe3cf
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
21
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f0b07
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
22
nsFlexContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x4e4bc3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
23
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f0b07
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
24
nsFlexContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x4e4bc3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
25
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
26
DisplayLine(mozilla::nsDisplayListBuilder*, GenericLineListIterator<nsLineLink, false>&, bool, mozilla::nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&, bool&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x39ae564
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
27
nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32f419d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
28
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
29
mozilla::ScrollContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32fe3cf
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
30
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f0b07
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
31
nsGridContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x4ede8d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
32
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
33
mozilla::ScrollContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32fe3cf
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
34
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
35
DisplayLine(mozilla::nsDisplayListBuilder*, GenericLineListIterator<nsLineLink, false>&, bool, mozilla::nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&, bool&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x39ae564
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
36
nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32f405f
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
37
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
38
nsCanvasFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32f3905
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
39
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
40
mozilla::ScrollContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32fe3cf
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
41
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x32f11ee
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
42
mozilla::ViewportFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x32efdd9
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
43
nsIFrame::BuildDisplayListForStackingContext(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayList*, bool*)
/usr/lib64/firefox/libxul.so 0x32e99c0
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
44
nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, mozilla::nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags)
/usr/lib64/firefox/libxul.so 0x39ac0b8
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
45
mozilla::PresShell::PaintInternal(nsIFrame*, mozilla::WindowRenderer*, mozilla::PaintInternalFlags)
/usr/lib64/firefox/libxul.so 0x32e3928
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
46
mozilla::PresShell::PaintSynchronously()
/usr/lib64/firefox/libxul.so 0x325996c
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
47
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x314f954
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
48
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x37a9e6b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
49
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread()
/usr/lib64/firefox/libxul.so 0x37a9435
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
50
mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
/usr/lib64/firefox/libxul.so 0x21b4b58
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
51
mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x225101a
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
52
mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3740a67
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
53
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x3086167
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
54
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x3085bd6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
55
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x308044c
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
56
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x307f43b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
57
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x307f3f9
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
58
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2e4388d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
59
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x314aad6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
60
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
61
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37a005d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
62
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x379eb83
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
63
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xbe03d4
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
64
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
65
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29c9651
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
66
main
/usr/lib64/firefox/firefox 0x41003
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58
-
67
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53
-
68
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53
-
69
_start
/usr/lib64/firefox/firefox 0x3ead5
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58
-