Crash in WebCore::StyledMarkupAccumulator::traverseNodesForSerialization(WebCore::Node*, WebCore::Node*, WebCore::StyledMarkupAccumulator::NodeTraversalMode)

Similar reports
Problem #830639
Component
webkit2gtk3
Last affected version
0:2.32.3-2.el8
Executable
/usr/libexec/webkit2gtk-4.0/WebKitWebProcess
Error name
SIGSEGV 11
First occurrence
2026-07-28
Last occurrence
2026-09-14
Unique reports
3
Quality
-60

Statistics

Operating system Unique / Total count
CentOS 8 3 / 3
Operating system Count
CentOS 8 3
Architecture Count
x86_64 3
Related packages Count
keyutils-libs 3
 0:1.5.10-9.el8 3
libXdamage 3
 0:1.1.4-14.el8 3
libepoxy 3
 0:1.5.8-1.el8 3
Show more… (100)
gnutls 3
 0:3.6.16-4.el8 3
glibc-langpack-en 3
 0:2.28-164.el8 3
libpng 3
 2:1.6.34-5.el8 3
libXrandr 3
 0:1.5.2-1.el8 3
libwayland-server 3
 0:1.19.0-1.el8 3
openssl-libs 3
 1:1.1.1k-4.el8 3
libgcc 3
 0:8.5.0-4.el8_5 3
libX11-xcb 3
 0:1.6.8-5.el8 3
gtk3-devel 3
 0:3.22.30-8.el8 3
fontconfig 3
 0:2.13.1-4.el8 3
graphite2 3
 0:1.3.10-10.el8 3
at-spi2-atk 3
 0:2.26.2-1.el8 3
harfbuzz-icu 3
 0:1.7.5-3.el8 3
libselinux 3
 0:2.9-5.el8 3
libdatrie 3
 0:0.2.9-7.el8 3
libtasn1 3
 0:4.13-3.el8 3
atk 3
 0:2.28.1-1.el8 3
lz4-libs 3
 0:1.8.3-3.el8_4 3
libglvnd 3
 1:1.3.2-1.el8 3
cairo 3
 0:1.15.12-3.el8 3
libuuid 3
 0:2.32.1-28.el8 3
dejavu-sans-fonts 3
 0:2.35-7.el8 3
fribidi 3
 0:1.0.4-8.el8 3
libunistring 3
 0:0.9.9-3.el8 3
libXext 3
 0:1.3.4-1.el8 3
libXfixes 3
 0:5.0.3-7.el8 3
libsoup 3
 0:2.62.3-2.el8 3
harfbuzz 3
 0:1.7.5-3.el8 3
libffi 3
 0:3.1-22.el8 3
libidn2 3
 0:2.2.0-1.el8 3
libICE 3
 0:1.0.9-15.el8 3
pcre2 3
 0:10.32-2.el8 3
libwayland-egl 3
 0:1.19.0-1.el8 3
libxml2 3
 0:2.9.7-9.el8_4.2 3
libcom_err 3
 0:1.45.6-2.el8 3
pcre 3
 0:8.42-6.el8 3
gtk3 3
 0:3.22.30-8.el8 3
libXcursor 3
 0:1.1.15-3.el8 3
bzip2-libs 3
 0:1.0.6-26.el8 3
libmount 3
 0:2.32.1-28.el8 3
libthai 3
 0:0.1.27-2.el8 3
libgcrypt 3
 0:1.8.5-6.el8 3
libXrender 3
 0:0.9.10-7.el8 3
libXcomposite 3
 0:0.4.4-14.el8 3
webkit2gtk3 3
 0:2.32.3-2.el8 3
libwebp 3
 0:1.0.0-5.el8 3
orc 3
 0:0.4.28-3.el8 3
openjpeg2 3
 0:2.4.0-4.el8 3
dejavu-sans-mono-fonts 3
 0:2.35-7.el8 3
libwayland-cursor 3
 0:1.19.0-1.el8 3
nettle 3
 0:3.4.1-7.el8 3
enchant2 3
 0:2.2.3-3.el8 3
glibc 3
 0:2.28-164.el8 3
p11-kit 3
 0:0.23.22-1.el8 3
zlib 3
 0:1.2.11-17.el8 3
brotli 3
 0:1.0.6-3.el8 3
woff2 3
 0:1.0.2-5.el8 3
gdk-pixbuf2 3
 0:2.36.12-5.el8 3
libicu 3
 0:60.3-2.el8_1 3
gstreamer1-plugins-base 3
 0:1.16.1-2.el8 3
dbus-libs 3
 1:1.12.8-14.el8 3
glib2 3
 0:2.56.4-156.el8 3
cairo-gobject 3
 0:1.15.12-3.el8 3
pango 3
 0:1.42.4-8.el8 3
libXi 3
 0:1.7.10-1.el8 3
libxcb 3
 0:1.13.1-1.el8 3
libjpeg-turbo 3
 0:1.5.3-12.el8 3
pixman 3
 0:0.38.4-1.el8 3
libsecret 3
 0:0.18.6-1.el8 3
gstreamer1 3
 0:1.16.1-2.el8 3
krb5-libs 3
 0:1.18.2-14.el8 3
libxkbcommon 3
 0:0.9.1-1.el8 3
libglvnd-egl 3
 1:1.3.2-1.el8 3
libgpg-error 3
 0:1.31-1.el8 3
libwayland-client 3
 0:1.19.0-1.el8 3
expat 3
 0:2.2.5-4.el8 3
libXinerama 3
 0:1.1.4-1.el8 3
libglvnd-glx 3
 1:1.3.2-1.el8 3
libglvnd-gles 3
 1:1.3.2-1.el8 3
libSM 3
 0:1.2.3-1.el8 3
google-noto-emoji-fonts 3
 0:20200916-2.el8 3
systemd-libs 3
 0:239-51.el8 3
libcap 3
 0:2.26-5.el8 3
libstdc++ 3
 0:8.5.0-4.el8_5 3
at-spi2-core 3
 0:2.28.0-1.el8 3
gmp 3
 1:6.1.2-10.el8 3
google-noto-emoji-color-fonts 3
 0:20200916-2.el8 3
libXau 3
 0:1.0.9-3.el8 3
libblkid 3
 0:2.32.1-28.el8 3
xz-libs 3
 0:5.2.4-3.el8 3
sqlite-libs 3
 0:3.26.0-15.el8 3
freetype 3
 0:2.9.1-4.el8_3.1 3
libnotify 3
 0:0.7.7-5.el8 3
webkit2gtk3-jsc 3
 0:2.32.3-2.el8 3
hyphen 3
 0:2.8.8-9.el8 3
aspell 3
 12:0.60.6.1-21.el8 3
libXt 3
 0:1.1.5-12.el8 3
libxslt 3
 0:1.1.32-6.el8 3
gvfs-client 3
 0:1.36.2-11.el8 3
libX11 3
 0:1.6.8-5.el8 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
WebCore::StyledMarkupAccumulator::traverseNodesForSerialization(WebCore::Node*, WebCore::Node*, WebCore::StyledMarkupAccumulator::NodeTraversalMode)
/lib64/libwebkit2gtk-4.0.so.37 0x19e3962
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
2
WebCore::StyledMarkupAccumulator::serializeNodes(WebCore::Position const&, WebCore::Position const&)
/lib64/libwebkit2gtk-4.0.so.37 0x19e4345
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
3
WebCore::serializePreservingVisualAppearanceInternal(WebCore::Position const&, WebCore::Position const&, WTF::Vector<WebCore::Node*, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>*, WebCore::ResolveURLs, WebCore::SerializeComposedTree, WebCore::AnnotateForInterchange, WebCore::ConvertBlocksToInlines, WebCore::StandardFontFamilySerializationMode, WebCore::MSOListMode)
/lib64/libwebkit2gtk-4.0.so.37 0x19e4857
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
4
WebCore::serializePreservingVisualAppearance(WebCore::VisibleSelection const&, WebCore::ResolveURLs, WebCore::SerializeComposedTree, WTF::Vector<WebCore::Node*, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>*)
/lib64/libwebkit2gtk-4.0.so.37 0x19e5acd
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
5
WebKit::WebEditorClient::updateGlobalSelection(WebCore::Frame*)
/lib64/libwebkit2gtk-4.0.so.37 0xce80b4
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
6
WebKit::WebEditorClient::respondToChangedSelection(WebCore::Frame*)
/lib64/libwebkit2gtk-4.0.so.37 0xcc9141
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
7
WebCore::Editor::respondToChangedSelection(WebCore::VisibleSelection const&, WTF::OptionSet<WebCore::FrameSelection::SetSelectionOption>)
/lib64/libwebkit2gtk-4.0.so.37 0x196db2a
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
8
WebCore::FrameSelection::setSelectionWithoutUpdatingAppearance(WebCore::VisibleSelection const&, WTF::OptionSet<WebCore::FrameSelection::SetSelectionOption>, WebCore::FrameSelection::CursorAlignOnScroll, WebCore::TextGranularity)
/lib64/libwebkit2gtk-4.0.so.37 0x196df69
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
9
WebCore::FrameSelection::setSelection(WebCore::VisibleSelection const&, WTF::OptionSet<WebCore::FrameSelection::SetSelectionOption>, WebCore::AXTextStateChangeIntent, WebCore::FrameSelection::CursorAlignOnScroll, WebCore::TextGranularity)
/lib64/libwebkit2gtk-4.0.so.37 0x196e180
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
10
WebCore::FrameSelection::setSelectionByMouseIfDifferent(WebCore::VisibleSelection const&, WebCore::TextGranularity, WebCore::FrameSelection::EndPointsAdjustmentMode)
/lib64/libwebkit2gtk-4.0.so.37 0x19712d5
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
11
WebCore::EventHandler::updateSelectionForMouseDrag(WebCore::HitTestResult const&)
/lib64/libwebkit2gtk-4.0.so.37 0x1dc2494
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
12
WebCore::EventHandler::handleMouseDraggedEvent(WebCore::MouseEventWithHitTestResults const&, WebCore::CheckDragHysteresis)
/lib64/libwebkit2gtk-4.0.so.37 0x1ddb1ef
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
13
WebCore::EventHandler::handleMouseMoveEvent(WebCore::PlatformMouseEvent const&, WebCore::HitTestResult*, bool) [clone .part.997]
/lib64/libwebkit2gtk-4.0.so.37 0x1ddb77f
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
14
WebCore::EventHandler::mouseMoved(WebCore::PlatformMouseEvent const&)
/lib64/libwebkit2gtk-4.0.so.37 0x1ddb98c
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
15
WebKit::WebPage::mouseEvent(WebKit::WebMouseEvent const&, WTF::Optional<WebKit::SandboxExtension::HandleArray>&&)
/lib64/libwebkit2gtk-4.0.so.37 0xd0982b
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
16
void IPC::handleMessage<Messages::WebPage::MouseEvent, WebKit::WebPage, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&, WTF::Optional<WebKit::SandboxExtension::HandleArray>&&)>(IPC::Decoder&, WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&, WTF::Optional<WebKit::SandboxExtension::HandleArray>&&))
/lib64/libwebkit2gtk-4.0.so.37 0x7e2131
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
17
WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&, IPC::Decoder&)
/lib64/libwebkit2gtk-4.0.so.37 0x7da624
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
18
IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&)
/lib64/libwebkit2gtk-4.0.so.37 0x92ca38
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
19
WebKit::WebProcess::didReceiveMessage(IPC::Connection&, IPC::Decoder&)
/lib64/libwebkit2gtk-4.0.so.37 0xb9346a
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
20
IPC::Connection::dispatchMessage(IPC::Decoder&)
/lib64/libwebkit2gtk-4.0.so.37 0x924988
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
21
IPC::Connection::dispatchMessage(std::unique_ptr<IPC::Decoder, std::default_delete<IPC::Decoder> >)
/lib64/libwebkit2gtk-4.0.so.37 0x92602d
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
22
IPC::Connection::dispatchOneIncomingMessage()
/lib64/libwebkit2gtk-4.0.so.37 0x926743
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
23
WTF::RunLoop::performWork()
/lib64/libjavascriptcoregtk-4.0.so.18 0x13cf8ef
Build id: f6667471546a56ffb154531fb88b27e5c1352184 		-
24
WTF::RunLoop::RunLoop()::{lambda(void*)#1}::_FUN(void*)
/lib64/libjavascriptcoregtk-4.0.so.18 0x1423c1d
Build id: f6667471546a56ffb154531fb88b27e5c1352184 		-
25
WTF::RunLoop::{lambda(_GSource*, int (*)(void*), void*)#1}::_FUN(_GSource*, int (*)(void*), void*)
/lib64/libjavascriptcoregtk-4.0.so.18 0x1424683
Build id: f6667471546a56ffb154531fb88b27e5c1352184 		-
26
g_main_context_dispatch
/lib64/libglib-2.0.so.0 0x4d95d
Build id: b1d6da79871c6bb7b6e90eb33cd803500a5f7e73 		-
27
g_main_context_iterate.isra.21
/lib64/libglib-2.0.so.0 0x4dd18
Build id: b1d6da79871c6bb7b6e90eb33cd803500a5f7e73 		-
28
g_main_loop_run
/lib64/libglib-2.0.so.0 0x4e042
Build id: b1d6da79871c6bb7b6e90eb33cd803500a5f7e73 		-
29
WTF::RunLoop::run()
/lib64/libjavascriptcoregtk-4.0.so.18 0x1424d80
Build id: f6667471546a56ffb154531fb88b27e5c1352184 		-
30
int WebKit::AuxiliaryProcessMain<WebKit::WebProcessMainGtk>(int, char**)
/lib64/libwebkit2gtk-4.0.so.37 0xd383ab
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-