Crash in mozilla::detail::InvalidArrayIndex_CRASH(unsigned long, unsigned long)

Similar reports
An owning problem doesn't exist yet.
Component
firefox
Last affected version
0:151.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2026-11-04
Last occurrence
2026-11-04
Unique reports
1
Quality
-92

Statistics

Operating system Unique / Total count
Fedora 42 1 / 1
Operating system Count
Fedora 42 1
Architecture Count
x86_64 1
Related packages Count
firefox 1
 0:151.0-2.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::detail::InvalidArrayIndex_CRASH(unsigned long, unsigned long)
/usr/lib64/firefox/firefox 0xde9f
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58 		-
2
mozilla::dom::Selection::Repaint(nsPresContext*)
/usr/lib64/firefox/libxul.so 0x1098039
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
3
nsFrameSelection::RepaintHighlightSelection(nsAtom*)
/usr/lib64/firefox/libxul.so 0x25db2cb
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
4
mozilla::RestyleManager::DoProcessPendingRestyles(mozilla::ServoTraversalFlags) [clone .cold]
/usr/lib64/firefox/libxul.so 0x38cf58
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
5
mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush)
/usr/lib64/firefox/libxul.so 0x320c1be
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
6
mozilla::dom::Document::FlushPendingNotifications(mozilla::ChangesToFlush)
/usr/lib64/firefox/libxul.so 0x31bd20f
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
7
nsIContent::GetPrimaryFrame(mozilla::FlushType)
/usr/lib64/firefox/libxul.so 0x38de30c
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
8
mozilla::dom::Element::GetBoundingClientRect()
/usr/lib64/firefox/libxul.so 0x393a1aa
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
9
mozilla::dom::Element_Binding::getBoundingClientRect(JSContext*, JS::Handle<JSObject*>, void*, JSJitMethodCallArgs const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x393a08f
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
10
bool mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x2f937fe
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
11
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e8a0
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
12
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2fbbfc6
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
13
anonymous function
/usr/lib64/firefox/libxul.so 0x197dcec5804 -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x197dcecb4f6 -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x197dcecd858 -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x197dd51143f -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x197dcf9032b -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x197dcecd858 -
19
anonymous function
/usr/lib64/firefox/libxul.so 0x197dcec33be -
20
EnterJit(JSContext*, js::RunState&, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2f5ec8e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
21
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2f5e4b2
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
22
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2f6e9c3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
23
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x3123e1b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
24
nsDOMMutationObserver::HandleMutationsInternal(mozilla::AutoSlowOperation&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x3067b2
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
25
mozilla::RunMicroTask(JSContext*, mozilla::CycleCollectedJSContext*, JS::MutableHandle<mozilla::MustConsumeMicroTask>, bool) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3075e5f
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
26
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x30758a2
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
27
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x3120a84
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
28
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x311ff9e
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
29
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x3106ee9
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
30
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x3104bdb
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
31
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&)
/usr/lib64/firefox/libxul.so 0x371de60
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
32
mozilla::dom::PostMessageRunnable::Run()
/usr/lib64/firefox/libxul.so 0x22b9016
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
33
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x308044c
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
34
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x307f43b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2e4386b
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
36
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x314a992
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
37
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
38
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37a005d
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
39
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x379eb83
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
40
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xbe03d4
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
41
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x34ce8b3
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
42
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x29c9651
Build id: d3450ee74e2de0b003d3c66c70256d19d4ee4c83 		-
43
main
/usr/lib64/firefox/firefox 0x41003
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58 		-
44
__libc_start_call_main
/lib64/libc.so.6 0x3575
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53 		-
45
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x3628
Build id: 17a908195ad4110e58083fc22fd8ac486d01da53 		-
46
_start
/usr/lib64/firefox/firefox 0x3ead5
Build id: 970d9c86d9e4ded34c9c4d0e29a4cdbb2576ac58 		-