Crash in nsSplittableFrame::RemoveFromFlow(nsIFrame*)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:137.0-2.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-02
Last occurrence
2026-09-02
Unique reports
1
Quality
-148

Statistics

Operating system Unique / Total count
Fedora 40 1 / 1
Operating system Count
Fedora 40 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:137.0-2.fc40 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
nsSplittableFrame::RemoveFromFlow(nsIFrame*)
/usr/lib64/firefox/libxul.so 0x1fff02e
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
2
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x436104
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
3
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
4
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
5
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
6
nsFrameList::DestroyFrames(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a7c4
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
7
nsContainerFrame::DestroyAbsoluteFrames(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a710
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
8
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x3454724
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
9
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
10
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
11
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
12
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
13
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
14
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
15
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
16
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
17
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
18
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
19
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
20
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
21
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
22
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
23
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
24
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
25
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
26
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
27
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
28
nsLineBox::DeleteLineList(nsPresContext*, nsLineList&, nsFrameList*, mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a831
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
29
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x345474f
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
30
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
31
nsFrameList::DestroyFrames(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a7c4
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
32
nsContainerFrame::DestroyAbsoluteFrames(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a710
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
33
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x3454724
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
34
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
35
nsFrameList::DestroyFrames(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a7c4
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
36
nsContainerFrame::DestroyAbsoluteFrames(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a710
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
37
nsBlockFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x3454724
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
38
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
39
nsFrameList::DestroyFrames(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x2e7a7c4
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
40
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x3454585
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
41
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
42
nsContainerFrame::Destroy(mozilla::FrameDestroyContext&)
/usr/lib64/firefox/libxul.so 0x34544f7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
43
mozilla::PresShell::Destroy()
/usr/lib64/firefox/libxul.so 0x34b9ae1
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
44
nsDocumentViewer::DestroyPresShell()
/usr/lib64/firefox/libxul.so 0x34b92ef
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
45
nsDocumentViewer::Hide() [clone .cold]
/usr/lib64/firefox/libxul.so 0x2909b9
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
46
.LTHUNK464.lto_priv.0
/usr/lib64/firefox/libxul.so 0x34f11d4
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
47
nsFrameLoader::Hide() [clone .cold]
/usr/lib64/firefox/libxul.so 0x6d5632
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
48
nsHideViewer::Run()
/usr/lib64/firefox/libxul.so 0x367d9e5
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
49
nsContentUtils::RemoveScriptBlocker()
/usr/lib64/firefox/libxul.so 0x2d6d6c0
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
50
nsDocumentViewer::Destroy()
/usr/lib64/firefox/libxul.so 0x34b91ca
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
51
nsDocShell::Destroy()
/usr/lib64/firefox/libxul.so 0x3694eef
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
52
nsWebBrowser::SetDocShell(nsDocShell*)
/usr/lib64/firefox/libxul.so 0x341d742
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
53
nsWebBrowser::InternalDestroy()
/usr/lib64/firefox/libxul.so 0x3694b72
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
54
nsWebBrowser::Destroy()
/usr/lib64/firefox/libxul.so 0x3694afa
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
55
mozilla::dom::BrowserChild::DestroyWindow()
/usr/lib64/firefox/libxul.so 0x1cdfbe0
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
56
mozilla::dom::BrowserChild::RecvDestroy()
/usr/lib64/firefox/libxul.so 0x1cdff78
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
57
mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x1cf680a
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
58
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x1cf9881
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
59
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x2cd8975
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
60
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2cd83e7
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
61
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ce6879
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
62
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ce6142
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
63
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2a7cd70
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
64
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2db3802
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
65
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
66
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x331843d
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
67
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x33176c0
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
68
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xb04615
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
69
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x3070eac
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
70
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x22d46f3
Build id: b8c783537a078c39095535b827fa8d1f67443d65 		-
71
main
/usr/lib64/firefox/firefox 0x49517
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-
72
__libc_start_call_main
/lib64/libc.so.6 0x2a088
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
73
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2a14b
Build id: fc3b3c4da3283cd44c006682a30b9df3242de053 		-
74
_start
/usr/lib64/firefox/firefox 0x464a5
Build id: 924cad6dc3d4b5346afaaec7bae8c59c6f301a06 		-