Crash in OpenH264VideoDecoder::Decode_m(GMPVideoEncodedFrame*, TagBufferInfo*, unsigned char**, long, bool)

Similar reports
Problem #606144
Component
firefox
Last affected version
0:125.0.2-1.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-11-06
Last occurrence
2026-02-23
Unique reports
1
Quality
-54

Graphs

Statistics

Operating system Unique / Total count
Fedora 37 3 / 4
Fedora 38 11 / 11
Fedora 39 22 / 23
Fedora 40 1 / 1
Operating system Count
Fedora 39 23
Fedora 38 11
Fedora 37 4
Fedora 40 1
Architecture Count
x86_64 39
Related packages Count
firefox 25
 0:125.0-1.fc38 4
 0:120.0.1-1.fc39 2
 0:121.0-2.fc39 2
 0:120.0-2.fc39 2
 0:122.0.1-1.fc39 2
 0:119.0-2.fc38 2
 0:120.0-3.fc39 1
 0:124.0.1-2.fc39 1
 0:122.0-5.fc39 1
 0:122.0-5.fc38 1
 0:125.0.2-1.fc40 1
 0:120.0.1-1.fc38 1
 0:122.0-1.fc39 1
 0:121.0-3.fc39 1
 0:122.0-1.fc38 1
 0:124.0.1-2.fc38 1
 0:122.0.1-1.fc38 1
mozilla-openh264 10
 0:2.3.1-2.fc39 3
 0:2.4.1-1.fc38 2
 0:2.3.1-2.fc38 2
 0:2.4.0-2.fc40 1
 0:2.4.0-2.fc39 1
 0:2.3.1-1.fc37 1
libjxl 1
 1:0.7.0-6.fc38 1
Show more… (2)
libvmaf 1
 0:2.3.0-5.fc38 1
libvpx 1
 0:1.13.1-1.fc38 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
OpenH264VideoDecoder::Decode_m(GMPVideoEncodedFrame*, TagBufferInfo*, unsigned char**, long, bool)
/usr/lib64/mozilla/plugins/gmp-gmpopenh264/system-installed/libgmpopenh264.so 0x399ac
Build id: 6b661d50d671e35eed6a34eb0084d57f17080e9b 		-
2
mozilla::gmp::GMPSyncRunnable::Run()
/usr/lib64/firefox/libxul.so 0x1460a54
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
3
mozilla::detail::RunnableMethodImpl<mozilla::gmp::GMPSyncRunnable*, void (mozilla::gmp::GMPSyncRunnable::*)(), true, (mozilla::RunnableKind)0>::Run()
/usr/lib64/firefox/libxul.so 0x1458ad4
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
4
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x258e2d4
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
5
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x258db42
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
6
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x290ae19
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
7
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x258bee5
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
8
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x258b4c3
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
9
bool mozilla::SpinEventLoopUntil<(mozilla::ProcessFailureBehavior)1, nsThreadSyncDispatch::SpinEventLoopUntilComplete(nsTSubstring<char> const&)::{lambda()#1}>(nsTSubstring<char> const&, nsThreadSyncDispatch::SpinEventLoopUntilComplete(nsTSubstring<char> const&)::{lambda()#1}&&, nsIThread*) [clone .constprop.0] [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x292af89
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
10
NS_DispatchAndSpinEventLoopUntilComplete(nsTSubstring<char> const&, nsIEventTarget*, already_AddRefed<nsIRunnable>)
/usr/lib64/firefox/libxul.so 0x292ad13
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
11
mozilla::ChildProfilerController::ShutdownAndMaybeGrabShutdownProfileFirst(mozilla::ProfileAndAdditionalInformation*)
/usr/lib64/firefox/libxul.so 0x292abe7
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
12
mozilla::gmp::PGMPChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x14965d2
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
13
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x258f3d4
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
14
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x28f160d
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
15
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x258e2d4
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
16
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x258db42
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
17
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x258be73
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
18
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28efa42
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288c59b
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
20
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x28ef95d
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
21
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28ef2c9
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288c59b
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
23
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x287de49
Build id: 1026b7463267714db936afbe1abf897460f3bf58 		-
24
main
/usr/lib64/firefox/firefox 0x4d5d8
Build id: f7fcdbddf059fbc678c7c9375abda52bab4abb31 		-
25
__libc_start_call_main
/lib64/libc.so.6 0x27b8a
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24 		-
26
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27c4b
Build id: 7026fe8c129a523e07856d7c96306663ceab6e24 		-
27
_start
/usr/lib64/firefox/firefox 0x4b9a5
Build id: f7fcdbddf059fbc678c7c9375abda52bab4abb31 		-