Crash in nsTArrayInfallibleAllocator::ResultType nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayInfallibleAllocator>::AssignInternal<nsTArrayInfallibleAllocator, RefPtr<mozilla::dom::BlobImpl> >(RefPtr<mozilla::dom::BlobImpl> const*, unsigned long)

Similar reports
Problem #618244
Component
firefox
Last affected version
0:119.0-2.fc39
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2023-11-11
Last occurrence
2025-11-19
Unique reports
2
Quality
-120

Statistics

Operating system Unique / Total count
Fedora 39 2 / 2
Operating system Count
Fedora 39 2
Architecture Count
x86_64 2
Related packages Count
firefox 1
 0:119.0-2.fc39 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.


Backtrace

Frame # Function Binary Source or offset Line
1
nsTArrayInfallibleAllocator::ResultType nsTArray_Impl<RefPtr<mozilla::dom::BlobImpl>, nsTArrayInfallibleAllocator>::AssignInternal<nsTArrayInfallibleAllocator, RefPtr<mozilla::dom::BlobImpl> >(RefPtr<mozilla::dom::BlobImpl> const*, unsigned long)
/usr/lib64/firefox/libxul.so 0x2a537b9
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
2
mozilla::dom::MultipartBlobImpl::InitializeBlob(mozilla::dom::Sequence<mozilla::dom::OwningArrayBufferViewOrArrayBufferOrBlobOrUTF8String> const&, nsTSubstring<char16_t> const&, bool, mozilla::RTPCallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x304b30a
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
3
mozilla::dom::Blob_Binding::_constructor(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x304ae25
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
4
InternalConstruct(JSContext*, js::AnyConstructArgs const&, js::CallReason) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x262faff
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
5
js::Interpret(JSContext*, js::RunState&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x12d446
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
6
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x262117b
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
7
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2625248
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
8
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a0b72d
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
9
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb2c617c -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb2cbfa6 -
11
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb2ce1fa -
12
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb2c32d5 -
13
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb2c34e9 -
14
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x264a2da
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
15
js::Interpret(JSContext*, js::RunState&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x128782
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
16
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x262117b
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
17
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2625248
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
18
js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2a188ea
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
19
js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*)
/usr/lib64/firefox/libxul.so 0x2a1852d
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
20
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb2c3e98 -
21
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb823340 -
22
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb4d802e -
23
anonymous function
/usr/lib64/firefox/libxul.so 0x2945ec056edc -
24
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb40b6e1 -
25
anonymous function
/usr/lib64/firefox/libxul.so 0x2945ec0c8be5 -
26
anonymous function
/usr/lib64/firefox/libxul.so 0x2945eb2c34e9 -
27
EnterJit(JSContext*, js::RunState&, unsigned char*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x264a2da
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
28
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x26211a9
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
29
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2625248
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
30
js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)
/usr/lib64/firefox/libxul.so 0x263167c
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
31
PromiseReactionJob(JSContext*, unsigned int, JS::Value*) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2b481d6
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
32
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2625349
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
33
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2683422
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
34
mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool)
/usr/lib64/firefox/libxul.so 0x25e15ee
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
35
mozilla::EventListenerManager::HandleEventWithListenerArray(mozilla::EventListenerManager::ListenerArray*, nsAtom*, mozilla::EventMessage, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, bool)
/usr/lib64/firefox/libxul.so 0x26deebc
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
36
mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool)
/usr/lib64/firefox/libxul.so 0x26cb346
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
37
mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&)
/usr/lib64/firefox/libxul.so 0x26122dd
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
38
mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*)
/usr/lib64/firefox/libxul.so 0x26108df
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
39
mozilla::EventDispatcher::DispatchDOMEvent(mozilla::dom::EventTarget*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*)
/usr/lib64/firefox/libxul.so 0x260fa9d
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
40
mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x29ae70e
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
41
mozilla::dom::EventTarget::DispatchEvent(mozilla::dom::Event&, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2bd8e14
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
42
mozilla::dom::IDBTransaction::FireCompleteOrAbortEvents(nsresult)
/usr/lib64/firefox/libxul.so 0x2cc8cf6
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
43
mozilla::dom::indexedDB::PBackgroundIDBTransactionChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2ce3b8d
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
44
mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2a5f463
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
45
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x258b9d4
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
46
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x28e7bed
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
47
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x258ab34
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
48
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x258a39e
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
49
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x28ffd09
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
50
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2588685
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
51
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28e5fc6
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
52
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288269b
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
53
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x28e5d9d
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
54
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x28e5a29
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
55
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x288269b
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
56
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x2873ac9
Build id: d7599779538467ec13b74a3737ba1709b05c2972 		-
57
main
/usr/lib64/firefox/firefox 0x4d8d8
Build id: c1ab04417a0f4e4237bff72666596ac56bb466fc 		-
58
__libc_start_call_main
/lib64/libc.so.6 0x2814a
Build id: 651b2bed7ecaf18098a63b8f10299821749766e6 		-
59
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x2820b
Build id: 651b2bed7ecaf18098a63b8f10299821749766e6 		-
60
_start
/usr/lib64/firefox/firefox 0x4bca5
Build id: c1ab04417a0f4e4237bff72666596ac56bb466fc 		-