Crash in arena_t::AllocRun(unsigned long, bool, bool)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:151.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-05
Last occurrence
2026-09-05
Unique reports
1
Quality
-202

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:151.0-2.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
arena_t::AllocRun(unsigned long, bool, bool)
/usr/lib64/firefox/firefox 0x319a6
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58
-
2
PLDHashTable::Search(void const*) const
/usr/lib64/firefox/libxul.so 0x2e315ce
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
3
nsContentUtils::NewXULOrHTMLElement(mozilla::dom::Element**, mozilla::dom::NodeInfo*, mozilla::dom::FromParser, nsAtom*, mozilla::dom::CustomElementDefinition*)
/usr/lib64/firefox/libxul.so 0x312e307
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
4
NS_NewHTMLElement(mozilla::dom::Element**, already_AddRefed<mozilla::dom::NodeInfo>&&, mozilla::dom::FromParser, nsAtom*, mozilla::dom::CustomElementDefinition*)
/usr/lib64/firefox/libxul.so 0x312d76b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
5
NS_NewElement(mozilla::dom::Element**, already_AddRefed<mozilla::dom::NodeInfo>&&, mozilla::dom::FromParser, nsAtom*, mozilla::dom::CustomElementDefinition*)
/usr/lib64/firefox/libxul.so 0x318a04a
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
6
mozilla::dom::Document::CreateElem(nsTSubstring<char16_t> const&, nsAtom*, int, nsTSubstring<char16_t> const*) [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x384e88e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
7
mozilla::dom::Document::CreateElement(nsTSubstring<char16_t> const&, mozilla::dom::ElementCreationOptionsOrString const&, mozilla::ErrorResult&) [clone .constprop.0] [clone .cold]
/usr/lib64/firefox/libxul.so 0x302ba9
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
8
mozilla::dom::Document_Binding::createElement(JSContext*, JS::Handle<JSObject*>, void*, JSJitMethodCallArgs const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x384e2bb
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
9
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c114fd8 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c170c06 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c15a868 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c155484 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c153cb3 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c159239 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20bf3627b -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20be8eb9d -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fa7798 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20be12370 -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fa7a6b -
20
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d894c -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fa69e2 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d894c -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c088969 -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c0834d5 -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099ce3be -
26
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
27
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5f7a6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
28
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5e43b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
29
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
30
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fc2b4a
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
31
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2fc2739
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
32
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099cec75 -
33
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fdc7b3 -
34
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fdb85f -
35
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099ce3be -
36
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
37
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5f7a6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
38
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5e43b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
39
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
40
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fbbfc6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
41
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d0804 -
42
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d64f6 -
43
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d8858 -
44
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099ce3be -
45
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
46
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5e41e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
47
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
48
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fc2b4a
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
49
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2fc2739
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
50
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099cec75 -
51
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fdc7b3 -
52
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fdb85f -
53
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fa7a6b -
54
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d894c -
55
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099ce3be -
56
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
57
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5e41e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
58
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
59
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fbbfc6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
60
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d0804 -
61
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d64f6 -
62
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099d8858 -
63
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099ce3be -
64
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
65
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5e41e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
66
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
67
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fc2b4a
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
68
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2fc2739
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
69
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099cec75 -
70
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c088969 -
71
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc20c0834d5 -
72
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fa7a6b -
73
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc209fdaf30 -
74
anonymous function
/usr/lib64/firefox/libxul.so 0x2dc2099ce3be -
75
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
76
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5f7a6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
77
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5e4ea
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
78
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
79
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x3123e1b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
80
mozilla::JSEventHandler::HandleEvent(mozilla::dom::Event*)
/usr/lib64/firefox/libxul.so 0x3745bc5
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
81
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x312199d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
82
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x311ff9e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
83
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x3106ee9
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
84
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x3104bdb
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
85
nsINode::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x31796e4
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
86
mozilla::AsyncEventDispatcher::DispatchEventOnTarget(mozilla::dom::EventTarget*, nsTSubstring<char16_t> const&, mozilla::CanBubble, mozilla::ChromeOnlyDispatch, mozilla::Composed)
/usr/lib64/firefox/libxul.so 0x31794c7
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
87
mozilla::AsyncEventDispatcher::Run()
/usr/lib64/firefox/libxul.so 0x38189d6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
88
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x308044c
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
89
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x307f43b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
90
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2e4386b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
91
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x314a992
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
92
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
93
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37a005d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
94
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x379eb83
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
95
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xbe03d4
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
96
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
97
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29c9651
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83
-
98
main
/usr/lib64/firefox/firefox 0x41003
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58
-
99
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53
-
100
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53
-
101
_start
/usr/lib64/firefox/firefox 0x3ead5
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58
-