Crash in nsExpatDriver::ParseChunk(char16_t const*, unsigned int, nsExpatDriver::ChunkOrBufferIsFinal, unsigned int*, unsigned long*)

Similar reports
Problem #670698
Component
firefox
Last affected version
0:115.9.1-1.el7.centos
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-04-03
Last occurrence
2026-09-04
Unique reports
14
Quality
-50

Statistics

Operating system Unique / Total count
CentOS 7 14 / 224
Operating system Count
CentOS 7 224
Architecture Count
x86_64 224
Related packages Count
glib2 233
 0:2.56.1-9.el7_9 232
 0:2.56.1-2.el7 1
libselinux 232
 0:2.5-15.el7 222
 0:2.5-14.1.el7 9
 0:2.5-12.el7 1
libwayland-client 224
 0:1.15.0-1.el7 223
 0:1.14.0-2.el7 1
Show more… (146)
fontconfig 224
 0:2.13.0-4.3.el7 223
 0:2.10.95-11.el7 1
lz4 224
 0:1.8.3-1.el7 220
 0:1.8.3-1.el7_7 2
 0:1.7.5-2.el7 2
pango 224
 0:1.42.4-4.el7_7 222
 0:1.42.4-1.el7 1
 0:1.40.4-1.el7 1
expat 224
 0:2.1.0-15.el7_9 222
 0:2.1.0-10.el7_3 2
libuuid 224
 0:2.23.2-65.el7_9.1 222
 0:2.23.2-52.el7_5.1 1
 0:2.23.2-59.el7 1
libcap 224
 0:2.22-11.el7 223
 0:2.22-9.el7 1
libXrender 224
 0:0.9.10-1.el7 224
libXdamage 224
 0:1.1.4-4.1.el7 224
gdk-pixbuf2 224
 0:2.36.12-3.el7 223
 0:2.36.5-1.el7 1
zlib 224
 0:1.2.7-21.el7_9 222
 0:1.2.7-17.el7 1
 0:1.2.7-18.el7 1
systemd-libs 224
 0:219-78.el7_9.9 215
 0:219-78.el7_9.7 7
 0:219-62.el7 1
 0:219-57.el7_5.1 1
libXfixes 224
 0:5.0.3-1.el7 224
libXau 224
 0:1.0.8-2.1.el7 224
harfbuzz 224
 0:1.7.5-2.el7 223
 0:1.3.2-1.el7 1
cairo-gobject 224
 0:1.15.12-4.el7 222
 0:1.14.8-2.el7 1
 0:1.15.12-3.el7 1
libgpg-error 224
 0:1.12-3.el7 224
libXi 224
 0:1.7.9-1.el7 224
glibc 224
 0:2.17-326.el7_9 221
 0:2.17-326.el7_9.3 2
 0:2.17-260.el7 1
pixman 224
 0:0.34.0-1.el7 224
freetype 224
 0:2.8-14.el7_9.1 222
 0:2.4.11-15.el7 1
 0:2.8-12.el7 1
libstdc++ 224
 0:4.8.5-44.el7 223
 0:4.8.5-28.el7_5.1 1
libxcb 224
 0:1.13-1.el7 223
 0:1.12-1.el7 1
libgcc 224
 0:4.8.5-44.el7 223
 0:4.8.5-28.el7_5.1 1
libmount 224
 0:2.23.2-65.el7_9.1 222
 0:2.23.2-52.el7_5.1 1
 0:2.23.2-59.el7 1
atk 224
 0:2.28.1-2.el7 222
 0:2.28.1-1.el7 1
 0:2.22.0-3.el7 1
libxkbcommon 224
 0:0.7.1-3.el7 222
 0:0.7.1-1.el7 2
graphite2 224
 0:1.3.10-1.el7_3 224
xz-libs 224
 0:5.2.2-2.el7_9 222
 0:5.2.2-1.el7 2
alsa-lib 224
 0:1.1.8-1.el7 222
 0:1.1.6-2.el7 1
 0:1.1.4.1-2.el7 1
libblkid 224
 0:2.23.2-65.el7_9.1 222
 0:2.23.2-52.el7_5.1 1
 0:2.23.2-59.el7 1
elfutils-libs 224
 0:0.176-5.el7 223
 0:0.170-4.el7 1
dbus-libs 224
 1:1.10.24-15.el7 222
 1:1.10.24-7.el7 1
 1:1.10.24-13.el7_6 1
at-spi2-atk 224
 0:2.26.2-1.el7 223
 0:2.22.0-2.el7 1
libXcursor 224
 0:1.1.15-1.el7 223
 0:1.1.14-8.el7 1
libXcomposite 224
 0:0.4.4-4.1.el7 224
elfutils-libelf 224
 0:0.176-5.el7 223
 0:0.170-4.el7 1
libepoxy 224
 0:1.5.2-1.el7 223
 0:1.3.1-2.el7_5 1
libgcrypt 224
 0:1.5.3-14.el7 224
nss 224
 0:3.90.0-2.el7_9 224
libX11 224
 0:1.6.7-5.el7_9 215
 0:1.6.7-4.el7_9 7
 0:1.6.5-1.el7 1
 0:1.6.5-2.el7 1
dbus-glib 224
 0:0.100-7.el7 224
libXrandr 224
 0:1.5.1-2.el7 224
libattr 224
 0:2.4.46-13.el7 224
at-spi2-core 224
 0:2.28.0-1.el7 223
 0:2.22.0-1.el7 1
nss-softokn-freebl 224
 0:3.90.0-6.el7_9 224
pcre 224
 0:8.32-17.el7 224
sqlite 224
 0:3.7.17-8.el7_7.1 222
 0:3.7.17-8.el7 2
gtk3 224
 0:3.22.30-8.el7_9 223
 0:3.22.30-3.el7 1
libwayland-cursor 224
 0:1.15.0-1.el7 223
 0:1.14.0-2.el7 1
libXinerama 224
 0:1.1.3-2.1.el7 224
libXext 224
 0:1.3.3-3.el7 224
cairo 224
 0:1.15.12-4.el7 222
 0:1.14.8-2.el7 1
 0:1.15.12-3.el7 1
firefox 224
 0:115.9.1-1.el7.centos 224
nspr 224
 0:4.35.0-1.el7_9 224
libXtst 224
 0:1.2.3-1.el7 224
nss-util 224
 0:3.90.0-1.el7_9 224
libthai 224
 0:0.1.14-9.el7 224
bzip2-libs 224
 0:1.0.6-13.el7 224
libpng 224
 2:1.5.13-8.el7 222
 2:1.5.13-7.el7_2 2
nss-softokn 224
 0:3.90.0-6.el7_9 224
libffi 223
 0:3.0.13-19.el7 221
 0:3.0.13-18.el7 2
libwayland-egl 223
 0:1.15.0-1.el7 223
fribidi 223
 0:1.0.2-1.el7_7.1 222
 0:1.0.2-1.el7 1
glibc-common 220
 0:2.17-326.el7_9 217
 0:2.17-326.el7_9.3 2
 0:2.17-260.el7 1
libglvnd-egl 219
 1:1.0.1-0.8.git5baa1e5.el7 219
libglvnd-glx 219
 1:1.0.1-0.8.git5baa1e5.el7 219
libglvnd 219
 1:1.0.1-0.8.git5baa1e5.el7 219
dejavu-sans-fonts 174
 0:2.33-6.el7 174
dejavu-serif-fonts 174
 0:2.33-6.el7 174
urw-base35-nimbus-sans-fonts 107
 0:20170801-10.el7 107
liberation-sans-fonts 62
 1:1.07.2-16.el7 62
liberation-mono-fonts 61
 1:1.07.2-16.el7 61
urw-base35-nimbus-roman-fonts 41
 0:20170801-10.el7 41
wqy-zenhei-fonts 39
 0:0.9.46-11.el7 39
urw-base35-gothic-fonts 25
 0:20170801-10.el7 25
vlgothic-fonts 25
 0:20130607-2.el7 25
abattis-cantarell-fonts 22
 0:0.0.25-1.el7 22
paratype-pt-sans-fonts 21
 0:20101909-3.el7 21
dejavu-sans-mono-fonts 17
 0:2.33-6.el7 17
lohit-devanagari-fonts 16
 0:2.5.3-4.el7 16
thai-scalable-waree-fonts 16
 0:0.5.0-7.el7 16
lohit-gujarati-fonts 15
 0:2.5.3-2.el7 15
lohit-telugu-fonts 15
 0:2.5.3-3.el7 15
lohit-bengali-fonts 15
 0:2.5.3-4.el7 15
khmeros-base-fonts 15
 0:5.0-17.el7 15
smc-meera-fonts 15
 0:6.0-7.el7 15
lohit-tamil-fonts 15
 0:2.5.3-2.el7 15
lohit-kannada-fonts 15
 0:2.5.3-3.el7 15
lklug-fonts 15
 0:0.6-10.20090803cvs.el7 15
msttcore-fonts-installer 13
 0:2.6-1 13
urw-base35-nimbus-mono-ps-fonts 12
 0:20170801-10.el7 12
lohit-punjabi-fonts 11
 0:2.5.3-2.el7 11
open-sans-fonts 11
 0:1.10-1.el7 11
webcore-fonts 9
 0:3.0-1 9
dconf 9
 0:0.28.0-4.el7 9
gnu-free-serif-fonts 8
 0:20120503-8.el7 8
stix-fonts 8
 0:1.1.0-5.el7 8
google-droid-sans-fonts 8
 0:20120715-12.el7 8
libgomp 7
 0:4.8.5-44.el7 7
gsm 7
 0:1.0.13-11.el7 7
libvorbis 7
 1:1.3.3-8.el7.1 7
libva 7
 0:1.8.3-1.el7 7
vo-amrwbenc 7
 0:0.1.2-1.el7.nux 6
 0:0.1.3-1.el7 1
opencore-amr 7
 0:0.1.3-3.el7.nux 6
 0:0.1.5-6.el7 1
opus 7
 0:1.0.2-6.el7 7
x264-libs 7
 0:0.142-11.20141221git6a301b6.el7.nux 6
 0:0.148-24.20170521gitaaa9aa8.el7 1
libtheora 7
 1:1.1.1-8.el7 7
numactl-libs 7
 0:2.0.12-5.el7 7
ffmpeg-libs 7
 0:2.8.15-2.el7.nux 6
 0:3.4.13-1.el7 1
xvidcore 7
 0:1.3.2-5.el7.nux 6
 0:1.3.4-2.el7 1
lame-libs 7
 0:3.100-1.el7 6
 0:3.100-2.el7 1
speex 7
 0:1.2-0.19.rc1.el7 7
soxr 7
 0:0.1.2-1.el7 7
x265-libs 7
 0:1.9-1.el7.nux 6
 0:2.9-3.el7 1
libogg 7
 2:1.3.0-7.el7 7
openjpeg-libs 6
 0:1.5.1-18.el7 6
fdk-aac 6
 0:0.1.4-1 6
schroedinger 6
 0:1.0.11-4.el7 6
orc 6
 0:0.4.26-1.el7 6
ucs-miscfixed-fonts 4
 0:0.3-11.el7 4
urw-base35-c059-fonts 2
 0:20170801-10.el7 2
google-crosextra-carlito-fonts 2
 0:1.103-0.2.20130920.el7 2
libdrm 2
 0:2.4.83-2.el7 1
 0:2.4.97-2.el7 1
google-noto-emoji-color-fonts 2
 0:20180508-4.el7 2
liberation-serif-fonts 2
 1:1.07.2-16.el7 2
wqy-microhei-fonts 2
 0:0.2.0-0.12.beta.el7 2
libwayland-server 1
 0:1.14.0-2.el7 1
libXxf86vm 1
 0:1.1.4-1.el7 1
openjpeg2 1
 0:2.3.1-3.el7_7 1
mesa-libEGL 1
 0:17.2.3-8.20171019.el7 1
mesa-libgbm 1
 0:17.2.3-8.20171019.el7 1
libxml2 1
 0:2.9.1-6.el7_9.6 1
librsvg2 1
 0:2.40.20-1.el7 1
mesa-libGL 1
 0:17.2.3-8.20171019.el7 1
mesa-libwayland-egl 1
 0:17.2.3-8.20171019.el7 1
ocl-icd 1
 0:2.2.12-1.el7 1
libvdpau 1
 0:1.1.1-3.el7 1
liberation-narrow-fonts 1
 1:1.07.2-16.el7 1
intel-gdb-2020 1
 0:2020.0-304 1
zvbi 1
 0:0.2.35-1.el7 1
mesa-libglapi 1
 0:17.2.3-8.20171019.el7 1
libcroco 1
 0:0.6.12-6.el7_9 1
lohit-marathi-fonts 1
 0:2.5.3-2.el7 1
libmfx 1
 0:1.21-2.el7 1
libxshmfence 1
 0:1.2-1.el7 1
libvpx 1
 0:1.3.0-8.el7 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
nsExpatDriver::ParseChunk(char16_t const*, unsigned int, nsExpatDriver::ChunkOrBufferIsFinal, unsigned int*, unsigned long*)
/usr/lib64/firefox/libxul.so 0x15b36d1
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
2
nsExpatDriver::ChunkAndParseBuffer(char16_t const*, unsigned int, bool, unsigned int*, unsigned int*, unsigned long*)
/usr/lib64/firefox/libxul.so 0x15b37c9
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
3
nsExpatDriver::ResumeParse(nsScanner&, bool)
/usr/lib64/firefox/libxul.so 0x15b76d9
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
4
nsParser::ResumeParse(bool, bool, bool) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x15bde0f
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
5
nsParser::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x15be9aa
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
6
imgRequest::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x1a1c4ff
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
7
mozilla::net::HttpChannelChild::DoOnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x10f7095
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
8
mozilla::net::HttpChannelChild::OnTransportAndData(nsresult const&, nsresult const&, unsigned long const&, unsigned int const&, nsTSubstring<char> const&)
/usr/lib64/firefox/libxul.so 0x11184f4
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
9
mozilla::net::ChannelEventQueue::FlushQueue()
/usr/lib64/firefox/libxul.so 0x1244612
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
10
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0x1244834
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
11
mozilla::SchedulerGroup::Runnable::Run()
/usr/lib64/firefox/libxul.so 0xc5ffe6
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
12
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc66053
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
13
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc67e49
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
14
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xc6808b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
15
_ZN7mozilla6detail16RunnableFunctionIZNS_14TaskControllerC4EvEUlvE0_E3RunEv
/usr/lib64/firefox/libxul.so 0xc68235
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
16
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xc8d368
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
17
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc78b1b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
18
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x1385d00
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
19
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1334ad5
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
20
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x39bc1d8
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
21
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4d1c61f
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
22
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1334ad5
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
23
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4d1cc2b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
24
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x15cb7
Build id: ee79a7226eadb3a74e51eaed3ab3d43484089a60 		-
25
main
/usr/lib64/firefox/firefox 0x153c8
Build id: ee79a7226eadb3a74e51eaed3ab3d43484089a60 		-