Crash in nsTArrayInfallibleAllocator::ResultType nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayInfallibleAllocator>::AssignInternal<nsTArrayInfallibleAllocator, RefPtr<mozilla::dom::BlobImpl> >(RefPtr<mozilla::dom::BlobImpl> const*, unsigned long)

Similar reports
Problem #618244
Component
firefox
Last affected version
0:141.0.2-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-09-02
Last occurrence
2026-02-17
Unique reports
2
Quality
-102

Graphs

Statistics

Operating system Unique / Total count
Fedora 37 1 / 1
Fedora 42 2 / 2
Operating system Count
Fedora 42 2
Fedora 37 1
Architecture Count
x86_64 3
Related packages Count
firefox 2
 0:141.0.2-1.fc42 1
 0:136.0.3-1.fc42 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
nsTArrayInfallibleAllocator::ResultType nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayInfallibleAllocator>::AssignInternal<nsTArrayInfallibleAllocator, RefPtr<mozilla::dom::BlobImpl> >(RefPtr<mozilla::dom::BlobImpl> const*, unsigned long)
/usr/lib64/firefox/libxul.so 0x359da09
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
2
mozilla::dom::MultipartBlobImpl::InitializeBlob(mozilla::dom::Sequence<mozilla::dom::OwningArrayBufferViewOrArrayBufferOrBlobOrUTF8String> const&, nsTSubstring<char16_t> const&, bool, mozilla::RTPCallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x3b4a284
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
3
mozilla::dom::Blob_Binding::_constructor(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3b49dc8
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
4
InternalConstruct(JSContext*, js::AnyConstructArgs const&, js::CallReason) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x3164faf
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
5
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x31549f3
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
6
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x314c23b
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
7
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x3159e19
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
8
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x355360b
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
9
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e491e5c -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e497986 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e499bc0 -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e5eda4f -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e585e2e -
14
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e4d487e -
15
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e58585c -
16
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e5864fa -
17
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e59fb95 -
18
anonymous function
/usr/lib64/firefox/libxul.so 0x28a88e48f4e9 -
19
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x31832a5
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
20
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x314c269
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
21
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x3159e19
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
22
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x31f54f7
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
23
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x368ee5c
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
24
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x3159f1b
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
25
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x31b4382
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
26
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x310583c
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
27
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool) [clone .cold]
/usr/lib64/firefox/libxul.so 0xb26413
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
28
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x313d260
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
29
mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x313b1b2
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
30
mozilla::EventDispatcher::DispatchDOMEvent(nsISupports*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x313a34d
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
31
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x34efd6e
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
32
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&, mozilla::ErrorResult&) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x37155e4
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
33
mozilla::dom::IDBTransaction::FireCompleteOrAbortEvents(nsresult)
/usr/lib64/firefox/libxul.so 0x37fb963
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
34
mozilla::dom::indexedDB::PBackgroundIDBTransactionChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x3817298
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
35
mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x35a4193
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
36
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x30aef26
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
37
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x34270be
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
38
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x30adf58
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
39
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x30ad772
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
40
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x343e969
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
41
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x30ab6f5
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
42
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3425f16
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
43
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x33bffcb
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
44
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3425d8d
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
45
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x34253cd
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
46
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x33bffcb
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
47
XRE_InitChildProcess(int, char**, XREChildData const*) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x33b1147
Build id: ebb24ff501395d6d2444c67325d89c9ed2ba63f8 		-
48
main
/usr/lib64/firefox/firefox 0x4f713
Build id: cf9e1e9e9b9545c9c2c4dbdc123f083f8ddcd099 		-
49
__libc_start_call_main
/lib64/libc.so.6 0x27510
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
50
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x275c9
Build id: 81daba31ee66dbd63efdc4252a872949d874d136 		-
51
_start
/usr/lib64/firefox/firefox 0x4da85
Build id: cf9e1e9e9b9545c9c2c4dbdc123f083f8ddcd099 		-