Crash in mozilla::ScrollContainerFrame::AppendScrollPartsTo(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&, bool, bool)

Similar reports
Problem #830750
Component
firefox
Last affected version
0:145.0-2.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-10
Last occurrence
2026-09-10
Unique reports
1
Quality
-78

Statistics

Operating system Unique / Total count
Fedora 41 1 / 5
Operating system Count
Fedora 41 5
Architecture Count
x86_64 5
Related packages Count
google-noto-sans-vf-fonts 5
 0:20240701-2.fc41 5
google-noto-sans-arabic-vf-fonts 5
 0:20240701-2.fc41 5
firefox 5
 0:145.0-2.fc41 5
google-noto-color-emoji-fonts 5
 0:20241008-1.fc41 5

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::ScrollContainerFrame::AppendScrollPartsTo(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&, bool, bool)
/usr/lib64/firefox/libxul.so 0x46bebb3
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
2
mozilla::ScrollContainerFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x46c04fa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
3
nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
/usr/lib64/firefox/libxul.so 0x47047cc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
4
mozilla::ViewportFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
/usr/lib64/firefox/libxul.so 0x46915b7
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
5
nsIFrame::BuildDisplayListForStackingContext(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayList*, bool*)
/usr/lib64/firefox/libxul.so 0x46ffd28
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
6
nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, mozilla::nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags)
/usr/lib64/firefox/libxul.so 0x465c4d5
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
7
mozilla::PresShell::PaintInternal(nsView*, mozilla::PaintInternalFlags)
/usr/lib64/firefox/libxul.so 0x45ba093
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
8
nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*)
/usr/lib64/firefox/libxul.so 0x42243de
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
9
nsViewManager::ProcessPendingUpdatesForView(nsView*, bool)
/usr/lib64/firefox/libxul.so 0x42247a0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
10
nsViewManager::ProcessPendingUpdates()
/usr/lib64/firefox/libxul.so 0x4224d87
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
11
nsRefreshDriver::PaintIfNeeded() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x4598fd1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
12
nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
/usr/lib64/firefox/libxul.so 0x459f6a7
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
13
mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x45a04a9
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
14
mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
/usr/lib64/firefox/libxul.so 0x45a07b0
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
15
mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread()
/usr/lib64/firefox/libxul.so 0x45a0ff5
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
16
mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
/usr/lib64/firefox/libxul.so 0x3cfa371
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
17
mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3e4b9ec
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
18
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3e02acc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
19
mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
/usr/lib64/firefox/libxul.so 0xd24beb
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
20
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0xd33604
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
21
mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)
/usr/lib64/firefox/libxul.so 0xd33f94
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
22
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0xd34166
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
23
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f588f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
24
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4f600b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
25
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4f626b
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
26
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4f6376
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
27
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x5231ef
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
28
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x51053f
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
29
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xd19eaa
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
30
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
31
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x4276efc
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
32
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x436db2e
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
33
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4fd9bf1
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
34
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xcc931d
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
35
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4fda770
Build id: 371c6b7599336dc75cf1fee377cd2ef277209604 		-
36
main
/usr/lib64/firefox/firefox 0x2ae9
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-
37
__libc_start_call_main
/lib64/libc.so.6 0x3448
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
38
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x350b
Build id: dae6ae6929d69dca842288f5300af5a33d1bdcd7 		-
39
_start
/usr/lib64/firefox/firefox 0x3125
Build id: 94e76111d47ef18d023bc39bb7d2119c49646428 		-