Crash in nsExpatDriver::ParseChunk(char16_t const*, unsigned int, nsExpatDriver::ChunkOrBufferIsFinal, unsigned int*, unsigned long*)

Similar reports
Problem #670681
Component
firefox
Last affected version
0:115.9.1-1.el7.centos
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-04-03
Last occurrence
2026-11-06
Unique reports
25
Quality
-58

Statistics

Operating system Unique / Total count
CentOS 7 25 / 500
Operating system Count
CentOS 7 500
Architecture Count
x86_64 500
Related packages Count
libxkbcommon 508
 0:0.7.1-3.el7 497
 0:0.7.1-1.el7 11
cairo 508
 0:1.15.12-4.el7 497
 0:1.15.12-3.el7 11
cairo-gobject 508
 0:1.15.12-4.el7 497
 0:1.15.12-3.el7 11
Show more… (165)
pango 508
 0:1.42.4-4.el7_7 497
 0:1.42.4-2.el7_6 8
 0:1.42.4-1.el7 3
alsa-lib 508
 0:1.1.8-1.el7 497
 0:1.1.6-2.el7 11
gtk3 503
 0:3.22.30-8.el7_9 495
 0:3.22.30-5.el7 5
 0:3.22.30-3.el7 3
nspr 500
 0:4.35.0-1.el7_9 500
nss-util 500
 0:3.90.0-1.el7_9 500
libwayland-egl 500
 0:1.15.0-1.el7 500
libpng 500
 2:1.5.13-8.el7 495
 2:1.5.13-7.el7_2 5
libX11 500
 0:1.6.7-5.el7_9 491
 0:1.6.7-4.el7_9 4
 0:1.6.5-2.el7 3
 0:1.6.7-2.el7 2
expat 500
 0:2.1.0-15.el7_9 495
 0:2.1.0-10.el7_3 3
 0:2.1.0-11.el7 2
libblkid 500
 0:2.23.2-65.el7_9.1 494
 0:2.23.2-59.el7 3
 0:2.23.2-63.el7 2
 0:2.23.2-65.el7_9.1.1.spa 1
libmount 500
 0:2.23.2-65.el7_9.1 494
 0:2.23.2-59.el7 3
 0:2.23.2-63.el7 2
 0:2.23.2-65.el7_9.1.1.spa 1
libselinux 500
 0:2.5-15.el7 497
 0:2.5-14.1.el7 3
libattr 500
 0:2.4.46-13.el7 500
libwayland-cursor 500
 0:1.15.0-1.el7 500
libffi 500
 0:3.0.13-19.el7 497
 0:3.0.13-18.el7 3
libXi 500
 0:1.7.9-1.el7 500
pcre 500
 0:8.32-17.el7 500
at-spi2-atk 500
 0:2.26.2-1.el7 500
graphite2 500
 0:1.3.10-1.el7_3 500
fontconfig 500
 0:2.13.0-4.3.el7 500
dbus-libs 500
 1:1.10.24-15.el7 495
 1:1.10.24-13.el7_6 5
nss-softokn-freebl 500
 0:3.90.0-6.el7_9 500
libXcomposite 500
 0:0.4.4-4.1.el7 500
fribidi 500
 0:1.0.2-1.el7_7.1 497
 0:1.0.2-1.el7 3
atk 500
 0:2.28.1-2.el7 497
 0:2.28.1-1.el7 3
at-spi2-core 500
 0:2.28.0-1.el7 500
systemd-libs 500
 0:219-78.el7_9.9 495
 0:219-62.el7 3
 0:219-73.el7_8.6 2
libXtst 500
 0:1.2.3-1.el7 500
libepoxy 500
 0:1.5.2-1.el7 500
nss 500
 0:3.90.0-2.el7_9 500
libXrandr 500
 0:1.5.1-2.el7 500
nss-softokn 500
 0:3.90.0-6.el7_9 500
libuuid 500
 0:2.23.2-65.el7_9.1 494
 0:2.23.2-59.el7 3
 0:2.23.2-63.el7 2
 0:2.23.2-65.el7_9.1.1.spa 1
libgcrypt 500
 0:1.5.3-14.el7 500
libXext 500
 0:1.3.3-3.el7 500
glibc 500
 0:2.17-326.el7_9 485
 0:2.17-326.el7_9.3 9
 0:2.17-260.el7 3
 0:2.17-307.el7.1 2
 0:2.17-324.el7_9.0.1.spa 1
libthai 500
 0:0.1.14-9.el7 500
glib2 500
 0:2.56.1-9.el7_9 495
 0:2.56.1-2.el7 3
 0:2.56.1-5.el7 2
libXdamage 500
 0:1.1.4-4.1.el7 500
elfutils-libs 500
 0:0.176-5.el7 498
 0:0.176-4.el7 2
libXrender 500
 0:0.9.10-1.el7 500
bzip2-libs 500
 0:1.0.6-13.el7 500
pixman 500
 0:0.34.0-1.el7 500
libcap 500
 0:2.22-11.el7 497
 0:2.22-9.el7 3
harfbuzz 500
 0:1.7.5-2.el7 500
libXcursor 500
 0:1.1.15-1.el7 500
xz-libs 500
 0:5.2.2-2.el7_9 495
 0:5.2.2-1.el7 5
libXfixes 500
 0:5.0.3-1.el7 500
libwayland-client 500
 0:1.15.0-1.el7 500
libxcb 500
 0:1.13-1.el7 500
libgpg-error 500
 0:1.12-3.el7 500
libXau 500
 0:1.0.8-2.1.el7 500
firefox 500
 0:115.9.1-1.el7.centos 500
dbus-glib 500
 0:0.100-7.el7 500
gdk-pixbuf2 500
 0:2.36.12-3.el7 500
elfutils-libelf 499
 0:0.176-5.el7 497
 0:0.176-4.el7 2
sqlite 499
 0:3.7.17-8.el7_7.1 496
 0:3.7.17-8.el7 3
libXinerama 499
 0:1.1.3-2.1.el7 499
lz4 498
 0:1.8.3-1.el7 464
 0:1.8.3-1.el7_7 29
 0:1.7.5-2.el7 3
 0:1.7.5-3.el7 2
glibc-common 494
 0:2.17-326.el7_9 480
 0:2.17-326.el7_9.3 8
 0:2.17-260.el7 3
 0:2.17-307.el7.1 2
 0:2.17-324.el7_9.0.1.spa 1
libgcc 490
 0:4.8.5-44.el7 490
freetype 487
 0:2.8-14.el7_9.1 482
 0:2.8-12.el7 3
 0:2.8-14.el7 2
zlib 479
 0:1.2.7-21.el7_9 474
 0:1.2.7-18.el7 5
libglvnd-egl 465
 1:1.0.1-0.8.git5baa1e5.el7 465
libglvnd-glx 465
 1:1.0.1-0.8.git5baa1e5.el7 465
libglvnd 465
 1:1.0.1-0.8.git5baa1e5.el7 465
libstdc++ 463
 0:4.8.5-44.el7 463
dejavu-serif-fonts 352
 0:2.33-6.el7 352
dejavu-sans-fonts 345
 0:2.33-6.el7 345
liberation-sans-fonts 345
 1:1.07.2-16.el7 345
urw-base35-nimbus-sans-fonts 343
 0:20170801-10.el7 343
dejavu-sans-mono-fonts 183
 0:2.33-6.el7 183
urw-base35-nimbus-roman-fonts 178
 0:20170801-10.el7 178
urw-base35-nimbus-mono-ps-fonts 159
 0:20170801-10.el7 159
opencore-amr 149
 0:0.1.3-3.el7.nux 111
 0:0.1.5-6.el7 38
ffmpeg-libs 149
 0:2.8.15-2.el7.nux 106
 0:3.4.13-1.el7 41
 0:3.4.7-3.el7 2
numactl-libs 149
 0:2.0.12-5.el7 148
 0:2.0.9-7.el7 1
libtheora 149
 1:1.1.1-8.el7 149
x264-libs 149
 0:0.142-11.20141221git6a301b6.el7.nux 106
 0:0.148-24.20170521gitaaa9aa8.el7 38
 0:0.148-11.20160614gita5e06b9.el7 5
x265-libs 149
 0:1.9-1.el7.nux 106
 0:2.9-3.el7 38
 0:2.9-2.el7 5
soxr 149
 0:0.1.2-1.el7 149
libogg 149
 2:1.3.0-7.el7 149
libva 149
 0:1.8.3-1.el7 149
vo-amrwbenc 149
 0:0.1.2-1.el7.nux 106
 0:0.1.3-1.el7 43
xvidcore 149
 0:1.3.2-5.el7.nux 106
 0:1.3.4-2.el7 43
gsm 149
 0:1.0.13-11.el7 149
lame-libs 149
 0:3.100-1.el7 123
 0:3.100-2.el7 26
opus 149
 0:1.0.2-6.el7 149
libvorbis 149
 1:1.3.3-8.el7.1 149
speex 149
 0:1.2-0.19.rc1.el7 149
libgomp 149
 0:4.8.5-44.el7 149
paratype-pt-sans-fonts 145
 0:20101909-3.el7 145
abattis-cantarell-fonts 129
 0:0.0.25-1.el7 129
smc-meera-fonts 125
 0:6.0-7.el7 125
orc 106
 0:0.4.26-1.el7 106
wqy-zenhei-fonts 106
 0:0.9.46-11.el7 106
schroedinger 106
 0:1.0.11-4.el7 106
openjpeg-libs 106
 0:1.5.1-18.el7 106
fdk-aac 106
 0:0.1.4-1 106
vlgothic-fonts 88
 0:20130607-2.el7 88
liberation-narrow-fonts 87
 1:1.07.2-16.el7 87
liberation-serif-fonts 83
 1:1.07.2-16.el7 83
google-crosextra-carlito-fonts 79
 0:1.103-0.2.20130920.el7 79
wqy-microhei-fonts 60
 0:0.2.0-0.12.beta.el7 60
libxml2 43
 0:2.9.1-6.el7_9.6 41
 0:2.9.1-6.el7.4 2
libcroco 43
 0:0.6.12-6.el7_9 41
 0:0.6.12-4.el7 2
libvdpau 43
 0:1.1.1-3.el7 43
ocl-icd 43
 0:2.2.12-1.el7 43
librsvg2 43
 0:2.40.20-1.el7 43
libdrm 43
 0:2.4.97-2.el7 43
openjpeg2 43
 0:2.3.1-3.el7_7 43
libvpx 43
 0:1.3.0-8.el7 41
 0:1.3.0-5.el7_0 2
urw-base35-bookman-fonts 43
 0:20170801-10.el7 43
zvbi 43
 0:0.2.35-1.el7 43
libmfx 43
 0:1.21-2.el7 43
liberation-mono-fonts 41
 1:1.07.2-16.el7 41
stix-fonts 37
 0:1.1.0-5.el7 37
google-crosextra-caladea-fonts 37
 0:1.002-0.4.20130214.el7 37
urw-base35-c059-fonts 31
 0:20170801-10.el7 31
urw-base35-p052-fonts 29
 0:20170801-10.el7 29
urw-base35-gothic-fonts 27
 0:20170801-10.el7 27
nhn-nanum-gothic-fonts 20
 0:3.020-9.el7 20
xorg-x11-drv-nvidia-libs 19
 1:396.37-1.el7 19
xorg-x11-drv-nvidia-gl 19
 1:396.37-1.el7 19
google-noto-emoji-color-fonts 16
 0:20180508-4.el7 16
freetype-freeworld 13
 0:2.8-12.el7.nux 13
unifont-fonts 12
 0:10.0.07-2.el7 12
gnu-free-serif-fonts 11
 0:20120503-8.el7 11
urw-base35-standard-symbols-ps-fonts 8
 0:20170801-10.el7 8
ucs-miscfixed-fonts 7
 0:0.3-11.el7 7
lohit-devanagari-fonts 6
 0:2.5.3-4.el7 6
cjkuni-uming-fonts 5
 0:0.2.20080216.1-53.el7 5
ubuntu-font-family 5
 5:0.69-2.el7.nux 5
msttcore-fonts-installer 5
 0:2.6-1 5
webcore-fonts 5
 0:3.0-1 5
thai-scalable-waree-fonts 4
 0:0.5.0-7.el7 4
xorg-x11-fonts-Type1 4
 0:7.5-9.el7 4
open-sans-fonts 4
 0:1.10-1.el7 4
lohit-telugu-fonts 3
 0:2.5.3-3.el7 3
lohit-bengali-fonts 3
 0:2.5.3-4.el7 3
lohit-gujarati-fonts 3
 0:2.5.3-2.el7 3
urw-base35-d050000l-fonts 2
 0:20170801-10.el7 2
lohit-kannada-fonts 2
 0:2.5.3-3.el7 2
jomolhari-fonts 2
 0:0.003-17.el7 2
sil-padauk-fonts 2
 0:2.8-5.el7 2
khmeros-base-fonts 2
 0:5.0-17.el7 2
lohit-tamil-fonts 2
 0:2.5.3-2.el7 2
lohit-punjabi-fonts 2
 0:2.5.3-2.el7 2
gnu-free-sans-fonts 2
 0:20120503-8.el7 2
lohit-malayalam-fonts 1
 0:2.5.3-2.el7 1
libcom_err 1
 0:1.42.9-19.el7 1
sil-abyssinica-fonts 1
 0:1.200-6.el7 1
wine-wingdings-fonts 1
 0:4.0.4-1.el7 1
gnu-free-mono-fonts 1
 0:20120503-8.el7 1
wine-tahoma-fonts 1
 0:4.0.4-1.el7 1
google-noto-sans-fonts 1
 0:20141117-5.el7 1
lklug-fonts 1
 0:0.6-10.20090803cvs.el7 1
libreoffice-opensymbol-fonts 1
 1:5.3.6.1-25.el7_9 1
lohit-assamese-fonts 1
 0:2.5.3-2.el7 1
keyutils-libs 1
 0:1.5.8-3.el7 1
lohit-nepali-fonts 1
 0:2.5.3-2.el7 1
libNX_Xinerama 1
 0:3.5.0.27-1.el7 1
lohit-marathi-fonts 1
 0:2.5.3-2.el7 1
openssl-libs 1
 1:1.0.2k-26.el7_9 1
krb5-libs 1
 0:1.15.1-55.el7_9 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
nsExpatDriver::ParseChunk(char16_t const*, unsigned int, nsExpatDriver::ChunkOrBufferIsFinal, unsigned int*, unsigned long*)
/usr/lib64/firefox/libxul.so 0x15b36d1
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
2
nsExpatDriver::ChunkAndParseBuffer(char16_t const*, unsigned int, bool, unsigned int*, unsigned int*, unsigned long*)
/usr/lib64/firefox/libxul.so 0x15b37c9
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
3
nsExpatDriver::ResumeParse(nsScanner&, bool)
/usr/lib64/firefox/libxul.so 0x15b76d9
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
4
nsParser::ResumeParse(bool, bool, bool) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x15bde0f
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
5
nsParser::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x15be9aa
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
6
imgRequest::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x1a1c4ff
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
7
mozilla::net::nsHTTPCompressConv::do_OnDataAvailable(nsIRequest*, unsigned long, char const*, unsigned int)
/usr/lib64/firefox/libxul.so 0x1005c17
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
8
mozilla::net::nsHTTPCompressConv::BrotliHandler(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*)
/usr/lib64/firefox/libxul.so 0x100663d
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
9
nsStringInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)
/usr/lib64/firefox/libxul.so 0xc3879f
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
10
mozilla::net::nsHTTPCompressConv::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x1005e90
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
11
mozilla::net::HttpChannelChild::DoOnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x10f7095
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
12
mozilla::net::HttpChannelChild::OnTransportAndData(nsresult const&, nsresult const&, unsigned long const&, unsigned int const&, nsTSubstring<char> const&)
/usr/lib64/firefox/libxul.so 0x11184f4
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
13
mozilla::net::ChannelEventQueue::FlushQueue()
/usr/lib64/firefox/libxul.so 0x1244612
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
14
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0x1244834
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
15
mozilla::SchedulerGroup::Runnable::Run()
/usr/lib64/firefox/libxul.so 0xc5ffe6
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc66053
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
17
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc67e49
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xc6808b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
19
_ZN7mozilla6detail16RunnableFunctionIZNS_14TaskControllerC4EvEUlvE_E3RunEv
/usr/lib64/firefox/libxul.so 0xc68212
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xc8d368
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
21
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc78b1b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
22
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x1385cba
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1334ad5
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
24
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x39bc1d8
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
25
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4d1c61f
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
26
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1334ad5
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
27
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4d1cc2b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
28
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x15cb7
Build id: ee79a7226eadb3a74e51eaed3ab3d43484089a60 		-
29
main
/usr/lib64/firefox/firefox 0x153c8
Build id: ee79a7226eadb3a74e51eaed3ab3d43484089a60 		-