Crash in mozilla::dom::MultipartBlobImpl::GetAllocationSize() const

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:151.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-09-25
Last occurrence
2026-09-25
Unique reports
1
Quality
-58

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:151.0-2.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::MultipartBlobImpl::GetAllocationSize() const
/usr/lib64/firefox/libxul.so 0x3aedde1
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
2
mozilla::dom::Blob_Binding::_finalize(JS::GCContext*, JSObject*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3bba6b5
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
3
bool FinalizeTypedArenas<JSObject, (js::gc::FinalizeKind)1, (js::gc::ReleaseEmpty)0>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, JS::SliceBudget&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x4274601
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
4
sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x33c8584
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
5
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x33c1819
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
6
sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3a5b07a
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
7
sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x33c1819
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
8
sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&)
/usr/lib64/firefox/libxul.so 0x3a5203c
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
9
js::gc::GCRuntime::incrementalSlice(JS::SliceBudget&, JS::GCReason, bool)
/usr/lib64/firefox/libxul.so 0x33af7b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
10
js::gc::GCRuntime::gcCycle(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x33ace94
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
11
js::gc::GCRuntime::collect(bool, JS::SliceBudget const&, JS::GCReason)
/usr/lib64/firefox/libxul.so 0x3a47b96
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
12
GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, JS::SliceBudget const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3b9e212
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
13
std::_Function_handler<bool (mozilla::TimeStamp), mozilla::CCGCScheduler::EnsureGCRunner(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>)::{lambda(mozilla::TimeStamp)#1}>::_M_invoke(std::_Any_data const&, mozilla::TimeStamp&&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3709d83
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
14
mozilla::IdleTaskRunner::Run()
/usr/lib64/firefox/libxul.so 0x30ffdbd
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
15
mozilla::IdleTaskRunnerTask::Run()
/usr/lib64/firefox/libxul.so 0x3709a5b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x3080c2d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
17
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x307f782
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
18
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2e4386b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
19
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x314a992
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
20
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
21
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37a005d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
22
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x379eb83
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
23
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xbe03d4
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
24
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
25
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29c9651
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
26
main
/usr/lib64/firefox/firefox 0x41003
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58 		-
27
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53 		-
28
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53 		-
29
_start
/usr/lib64/firefox/firefox 0x3ead5
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58 		-