Crash in WebCore::StyledMarkupAccumulator::traverseNodesForSerialization(WebCore::Node*, WebCore::Node*, WebCore::StyledMarkupAccumulator::NodeTraversalMode)

Similar reports
Problem #830639
Component
webkit2gtk3
Last affected version
0:2.32.3-2.el8
Executable
/usr/libexec/webkit2gtk-4.0/WebKitWebProcess
Error name
SIGSEGV 11
First occurrence
2026-07-28
Last occurrence
2026-08-26
Unique reports
2
Quality
-60

Statistics

Operating system Unique / Total count
CentOS 8 2 / 2
Operating system Count
CentOS 8 2
Architecture Count
x86_64 2
Related packages Count
libuuid 2
 0:2.32.1-28.el8 2
orc 2
 0:0.4.28-3.el8 2
libglvnd-gles 2
 1:1.3.2-1.el8 2
Show more… (100)
libxslt 2
 0:1.1.32-6.el8 2
nettle 2
 0:3.4.1-7.el8 2
openjpeg2 2
 0:2.4.0-4.el8 2
fribidi 2
 0:1.0.4-8.el8 2
libmount 2
 0:2.32.1-28.el8 2
dbus-libs 2
 1:1.12.8-14.el8 2
aspell 2
 12:0.60.6.1-21.el8 2
libICE 2
 0:1.0.9-15.el8 2
libglvnd 2
 1:1.3.2-1.el8 2
libcap 2
 0:2.26-5.el8 2
libstdc++ 2
 0:8.5.0-4.el8_5 2
pango 2
 0:1.42.4-8.el8 2
google-noto-emoji-color-fonts 2
 0:20200916-2.el8 2
gdk-pixbuf2 2
 0:2.36.12-5.el8 2
libcom_err 2
 0:1.45.6-2.el8 2
freetype 2
 0:2.9.1-4.el8_3.1 2
libXdamage 2
 0:1.1.4-14.el8 2
libsoup 2
 0:2.62.3-2.el8 2
woff2 2
 0:1.0.2-5.el8 2
gstreamer1-plugins-base 2
 0:1.16.1-2.el8 2
libthai 2
 0:0.1.27-2.el8 2
libdatrie 2
 0:0.2.9-7.el8 2
libXi 2
 0:1.7.10-1.el8 2
libxcb 2
 0:1.13.1-1.el8 2
libSM 2
 0:1.2.3-1.el8 2
libxml2 2
 0:2.9.7-9.el8_4.2 2
cairo-gobject 2
 0:1.15.12-3.el8 2
lz4-libs 2
 0:1.8.3-3.el8_4 2
gtk3 2
 0:3.22.30-8.el8 2
libgcc 2
 0:8.5.0-4.el8_5 2
xz-libs 2
 0:5.2.4-3.el8 2
at-spi2-core 2
 0:2.28.0-1.el8 2
zlib 2
 0:1.2.11-17.el8 2
harfbuzz-icu 2
 0:1.7.5-3.el8 2
libunistring 2
 0:0.9.9-3.el8 2
libtasn1 2
 0:4.13-3.el8 2
gnutls 2
 0:3.6.16-4.el8 2
libXinerama 2
 0:1.1.4-1.el8 2
glib2 2
 0:2.56.4-156.el8 2
gvfs-client 2
 0:1.36.2-11.el8 2
libXfixes 2
 0:5.0.3-7.el8 2
libwayland-egl 2
 0:1.19.0-1.el8 2
webkit2gtk3-jsc 2
 0:2.32.3-2.el8 2
harfbuzz 2
 0:1.7.5-3.el8 2
libxkbcommon 2
 0:0.9.1-1.el8 2
libglvnd-glx 2
 1:1.3.2-1.el8 2
libsecret 2
 0:0.18.6-1.el8 2
krb5-libs 2
 0:1.18.2-14.el8 2
keyutils-libs 2
 0:1.5.10-9.el8 2
gtk3-devel 2
 0:3.22.30-8.el8 2
libXext 2
 0:1.3.4-1.el8 2
p11-kit 2
 0:0.23.22-1.el8 2
pcre 2
 0:8.42-6.el8 2
libicu 2
 0:60.3-2.el8_1 2
hyphen 2
 0:2.8.8-9.el8 2
libgcrypt 2
 0:1.8.5-6.el8 2
openssl-libs 2
 1:1.1.1k-4.el8 2
libwayland-client 2
 0:1.19.0-1.el8 2
libpng 2
 2:1.6.34-5.el8 2
libglvnd-egl 2
 1:1.3.2-1.el8 2
graphite2 2
 0:1.3.10-10.el8 2
enchant2 2
 0:2.2.3-3.el8 2
libX11 2
 0:1.6.8-5.el8 2
expat 2
 0:2.2.5-4.el8 2
dejavu-sans-mono-fonts 2
 0:2.35-7.el8 2
libwayland-server 2
 0:1.19.0-1.el8 2
glibc 2
 0:2.28-164.el8 2
libXrandr 2
 0:1.5.2-1.el8 2
systemd-libs 2
 0:239-51.el8 2
libwebp 2
 0:1.0.0-5.el8 2
libXcursor 2
 0:1.1.15-3.el8 2
atk 2
 0:2.28.1-1.el8 2
libXrender 2
 0:0.9.10-7.el8 2
libffi 2
 0:3.1-22.el8 2
libblkid 2
 0:2.32.1-28.el8 2
libgpg-error 2
 0:1.31-1.el8 2
libidn2 2
 0:2.2.0-1.el8 2
pixman 2
 0:0.38.4-1.el8 2
libXau 2
 0:1.0.9-3.el8 2
cairo 2
 0:1.15.12-3.el8 2
libwayland-cursor 2
 0:1.19.0-1.el8 2
libX11-xcb 2
 0:1.6.8-5.el8 2
libjpeg-turbo 2
 0:1.5.3-12.el8 2
fontconfig 2
 0:2.13.1-4.el8 2
gmp 2
 1:6.1.2-10.el8 2
glibc-langpack-en 2
 0:2.28-164.el8 2
bzip2-libs 2
 0:1.0.6-26.el8 2
gstreamer1 2
 0:1.16.1-2.el8 2
brotli 2
 0:1.0.6-3.el8 2
at-spi2-atk 2
 0:2.26.2-1.el8 2
pcre2 2
 0:10.32-2.el8 2
dejavu-sans-fonts 2
 0:2.35-7.el8 2
libnotify 2
 0:0.7.7-5.el8 2
sqlite-libs 2
 0:3.26.0-15.el8 2
libXcomposite 2
 0:0.4.4-14.el8 2
libepoxy 2
 0:1.5.8-1.el8 2
google-noto-emoji-fonts 2
 0:20200916-2.el8 2
libXt 2
 0:1.1.5-12.el8 2
libselinux 2
 0:2.9-5.el8 2
webkit2gtk3 2
 0:2.32.3-2.el8 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
WebCore::StyledMarkupAccumulator::traverseNodesForSerialization(WebCore::Node*, WebCore::Node*, WebCore::StyledMarkupAccumulator::NodeTraversalMode)
/lib64/libwebkit2gtk-4.0.so.37 0x19e3962
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
2
WebCore::StyledMarkupAccumulator::serializeNodes(WebCore::Position const&, WebCore::Position const&)
/lib64/libwebkit2gtk-4.0.so.37 0x19e4345
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
3
WebCore::serializePreservingVisualAppearanceInternal(WebCore::Position const&, WebCore::Position const&, WTF::Vector<WebCore::Node*, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>*, WebCore::ResolveURLs, WebCore::SerializeComposedTree, WebCore::AnnotateForInterchange, WebCore::ConvertBlocksToInlines, WebCore::StandardFontFamilySerializationMode, WebCore::MSOListMode)
/lib64/libwebkit2gtk-4.0.so.37 0x19e4857
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
4
WebCore::serializePreservingVisualAppearance(WebCore::VisibleSelection const&, WebCore::ResolveURLs, WebCore::SerializeComposedTree, WTF::Vector<WebCore::Node*, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>*)
/lib64/libwebkit2gtk-4.0.so.37 0x19e5acd
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
5
WebKit::WebEditorClient::updateGlobalSelection(WebCore::Frame*)
/lib64/libwebkit2gtk-4.0.so.37 0xce80b4
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
6
WebKit::WebEditorClient::respondToChangedSelection(WebCore::Frame*)
/lib64/libwebkit2gtk-4.0.so.37 0xcc9141
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
7
WebCore::Editor::respondToChangedSelection(WebCore::VisibleSelection const&, WTF::OptionSet<WebCore::FrameSelection::SetSelectionOption>)
/lib64/libwebkit2gtk-4.0.so.37 0x196db2a
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
8
WebCore::FrameSelection::setSelectionWithoutUpdatingAppearance(WebCore::VisibleSelection const&, WTF::OptionSet<WebCore::FrameSelection::SetSelectionOption>, WebCore::FrameSelection::CursorAlignOnScroll, WebCore::TextGranularity)
/lib64/libwebkit2gtk-4.0.so.37 0x196df69
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
9
WebCore::FrameSelection::setSelection(WebCore::VisibleSelection const&, WTF::OptionSet<WebCore::FrameSelection::SetSelectionOption>, WebCore::AXTextStateChangeIntent, WebCore::FrameSelection::CursorAlignOnScroll, WebCore::TextGranularity)
/lib64/libwebkit2gtk-4.0.so.37 0x196e180
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
10
WebCore::FrameSelection::setSelectionByMouseIfDifferent(WebCore::VisibleSelection const&, WebCore::TextGranularity, WebCore::FrameSelection::EndPointsAdjustmentMode)
/lib64/libwebkit2gtk-4.0.so.37 0x19712d5
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
11
WebCore::EventHandler::updateSelectionForMouseDrag(WebCore::HitTestResult const&)
/lib64/libwebkit2gtk-4.0.so.37 0x1dc2494
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
12
WebCore::EventHandler::handleMouseDraggedEvent(WebCore::MouseEventWithHitTestResults const&, WebCore::CheckDragHysteresis)
/lib64/libwebkit2gtk-4.0.so.37 0x1ddb1ef
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
13
WebCore::EventHandler::handleMouseMoveEvent(WebCore::PlatformMouseEvent const&, WebCore::HitTestResult*, bool) [clone .part.997]
/lib64/libwebkit2gtk-4.0.so.37 0x1ddb77f
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
14
WebCore::EventHandler::mouseMoved(WebCore::PlatformMouseEvent const&)
/lib64/libwebkit2gtk-4.0.so.37 0x1ddb98c
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
15
WebKit::WebPage::mouseEvent(WebKit::WebMouseEvent const&, WTF::Optional<WebKit::SandboxExtension::HandleArray>&&)
/lib64/libwebkit2gtk-4.0.so.37 0xd0982b
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
16
void IPC::handleMessage<Messages::WebPage::MouseEvent, WebKit::WebPage, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&, WTF::Optional<WebKit::SandboxExtension::HandleArray>&&)>(IPC::Decoder&, WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&, WTF::Optional<WebKit::SandboxExtension::HandleArray>&&))
/lib64/libwebkit2gtk-4.0.so.37 0x7e2131
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
17
WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&, IPC::Decoder&)
/lib64/libwebkit2gtk-4.0.so.37 0x7da624
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
18
IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&)
/lib64/libwebkit2gtk-4.0.so.37 0x92ca38
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
19
WebKit::WebProcess::didReceiveMessage(IPC::Connection&, IPC::Decoder&)
/lib64/libwebkit2gtk-4.0.so.37 0xb9346a
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
20
IPC::Connection::dispatchMessage(IPC::Decoder&)
/lib64/libwebkit2gtk-4.0.so.37 0x924988
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
21
IPC::Connection::dispatchMessage(std::unique_ptr<IPC::Decoder, std::default_delete<IPC::Decoder> >)
/lib64/libwebkit2gtk-4.0.so.37 0x92602d
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
22
IPC::Connection::dispatchOneIncomingMessage()
/lib64/libwebkit2gtk-4.0.so.37 0x926743
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-
23
WTF::RunLoop::performWork()
/lib64/libjavascriptcoregtk-4.0.so.18 0x13cf8ef
Build id: f6667471546a56ffb154531fb88b27e5c1352184 		-
24
WTF::RunLoop::RunLoop()::{lambda(void*)#1}::_FUN(void*)
/lib64/libjavascriptcoregtk-4.0.so.18 0x1423c1d
Build id: f6667471546a56ffb154531fb88b27e5c1352184 		-
25
WTF::RunLoop::{lambda(_GSource*, int (*)(void*), void*)#1}::_FUN(_GSource*, int (*)(void*), void*)
/lib64/libjavascriptcoregtk-4.0.so.18 0x1424683
Build id: f6667471546a56ffb154531fb88b27e5c1352184 		-
26
g_main_context_dispatch
/lib64/libglib-2.0.so.0 0x4d95d
Build id: b1d6da79871c6bb7b6e90eb33cd803500a5f7e73 		-
27
g_main_context_iterate.isra.21
/lib64/libglib-2.0.so.0 0x4dd18
Build id: b1d6da79871c6bb7b6e90eb33cd803500a5f7e73 		-
28
g_main_loop_run
/lib64/libglib-2.0.so.0 0x4e042
Build id: b1d6da79871c6bb7b6e90eb33cd803500a5f7e73 		-
29
WTF::RunLoop::run()
/lib64/libjavascriptcoregtk-4.0.so.18 0x1424d80
Build id: f6667471546a56ffb154531fb88b27e5c1352184 		-
30
int WebKit::AuxiliaryProcessMain<WebKit::WebProcessMainGtk>(int, char**)
/lib64/libwebkit2gtk-4.0.so.37 0xd383ab
Build id: 28f80c522083edf1fcbf5ec90ad8bc03b4f24f33 		-