Crash in nsExpatDriver::ParseChunk(char16_t const*, unsigned int, nsExpatDriver::ChunkOrBufferIsFinal, unsigned int*, unsigned long*)

Similar reports
Problem #674369
Component
firefox
Last affected version
0:115.9.1-1.el8
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-04-14
Last occurrence
2024-05-12
Unique reports
4
Quality
-58

Statistics

Operating system Unique / Total count
CentOS 8 4 / 9
Operating system Count
CentOS 8 9
Architecture Count
x86_64 9
Related packages Count
libdatrie 9
 0:0.2.9-7.el8 9
libcap 9
 0:2.48-5.el8 9
pcre 9
 0:8.42-6.el8 9
Show more… (78)
pixman 9
 0:0.38.4-4.el8 9
libuuid 9
 0:2.32.1-46.el8 9
graphite2 9
 0:1.3.10-10.el8 9
at-spi2-atk 9
 0:2.26.2-1.el8 9
nss-softokn-freebl 9
 0:3.90.0-6.el8 8
 0:3.90.0-7.el8 1
libselinux 9
 0:2.9-8.el8 9
libgcrypt 9
 0:1.8.5-7.el8 9
freetype 9
 0:2.9.1-9.el8 9
lz4-libs 9
 0:1.8.3-3.el8_4 9
glibc 9
 0:2.28-251.el8 9
nss-softokn 9
 0:3.90.0-6.el8 8
 0:3.90.0-7.el8 1
p11-kit-trust 9
 0:0.23.22-2.el8 9
libXrandr 9
 0:1.5.2-1.el8 9
libXfixes 9
 0:5.0.3-7.el8 9
gmp 9
 1:6.1.2-12.el8 9
libmount 9
 0:2.32.1-46.el8 9
cairo 9
 0:1.15.12-6.el8 9
pango 9
 0:1.42.4-8.el8 9
libxkbcommon 9
 0:0.9.1-1.el8 9
p11-kit 9
 0:0.23.22-2.el8 9
libXi 9
 0:1.7.10-1.el8 9
nettle 9
 0:3.4.1-7.el8 9
libXext 9
 0:1.3.4-1.el8 9
libXau 9
 0:1.0.9-3.el8 9
libxcb 9
 0:1.13.1-1.el8 9
pcre2 9
 0:10.32-3.el8 9
libX11 9
 0:1.6.8-8.el8 9
libX11-xcb 9
 0:1.6.8-8.el8 9
systemd-libs 9
 0:239-82.el8 9
nss-util 9
 0:3.90.0-6.el8 8
 0:3.90.0-7.el8 1
libthai 9
 0:0.1.27-2.el8 9
harfbuzz 9
 0:1.7.5-4.el8 9
libunistring 9
 0:0.9.9-3.el8 9
libgpg-error 9
 0:1.31-1.el8 9
nspr 9
 0:4.35.0-1.el8 9
at-spi2-core 9
 0:2.28.0-1.el8 9
expat 9
 0:2.2.5-13.el8 9
libgcc 9
 0:8.5.0-21.el8 9
fontconfig 9
 0:2.13.1-4.el8 9
glibc-all-langpacks 9
 0:2.28-251.el8 9
libXtst 9
 0:1.2.3-7.el8 9
bzip2-libs 9
 0:1.0.6-26.el8 9
atk 9
 0:2.28.1-1.el8 9
libXrender 9
 0:0.9.10-7.el8 9
sqlite-libs 9
 0:3.26.0-19.el8 9
libidn2 9
 0:2.2.0-1.el8 9
libwayland-client 9
 0:1.21.0-1.el8 9
xz-libs 9
 0:5.2.4-4.el8 9
libepoxy 9
 0:1.5.8-1.el8 9
cairo-gobject 9
 0:1.15.12-6.el8 9
libpng 9
 2:1.6.34-5.el8 9
libXcomposite 9
 0:0.4.4-14.el8 9
libstdc++ 9
 0:8.5.0-21.el8 9
nss 9
 0:3.90.0-6.el8 8
 0:3.90.0-7.el8 1
libwayland-cursor 9
 0:1.21.0-1.el8 9
libtasn1 9
 0:4.13-4.el8 9
gnutls 9
 0:3.6.16-8.el8.1 9
gdk-pixbuf2 9
 0:2.36.12-5.el8 9
firefox 9
 0:115.9.1-1.el8 9
zlib 9
 0:1.2.11-25.el8 9
gtk3 9
 0:3.22.30-11.el8 9
libXdamage 9
 0:1.1.4-14.el8 9
dbus-glib 9
 0:0.110-2.el8 9
libffi 9
 0:3.1-24.el8 9
dbus-libs 9
 1:1.12.8-26.el8 9
glib2 9
 0:2.56.4-163.el8 9
fribidi 9
 0:1.0.4-9.el8 9
alsa-lib 9
 0:1.2.10-2.el8 9
libXcursor 9
 0:1.1.15-3.el8 9
libblkid 9
 0:2.32.1-46.el8 9
libwayland-egl 9
 0:1.21.0-1.el8 9
libXinerama 9
 0:1.1.4-1.el8 9
liberation-sans-fonts 8
 1:2.00.3-7.el8 8
dejavu-serif-fonts 6
 0:2.35-7.el8 6
liberation-mono-fonts 5
 1:2.00.3-7.el8 5
dejavu-sans-fonts 4
 0:2.35-7.el8 4
urw-base35-nimbus-roman-fonts 3
 0:20170801-10.el8 3
julietaula-montserrat-fonts 1
 1:7.200-2.el8.2 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

No reports in the last 20 months.


Backtrace

Frame # Function Binary Source or offset Line
1
nsExpatDriver::ParseChunk(char16_t const*, unsigned int, nsExpatDriver::ChunkOrBufferIsFinal, unsigned int*, unsigned long*)
/usr/lib64/firefox/libxul.so 0x1556411
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
2
nsExpatDriver::ChunkAndParseBuffer(char16_t const*, unsigned int, bool, unsigned int*, unsigned int*, unsigned long*)
/usr/lib64/firefox/libxul.so 0x1556519
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
3
nsExpatDriver::ResumeParse(nsScanner&, bool)
/usr/lib64/firefox/libxul.so 0x155c53c
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
4
nsParser::ResumeParse(bool, bool, bool) [clone .part.1070]
/usr/lib64/firefox/libxul.so 0x156454d
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
5
nsParser::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x1564f7a
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
6
imgRequest::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x1988b18
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
7
mozilla::net::nsHTTPCompressConv::do_OnDataAvailable(nsIRequest*, unsigned long, char const*, unsigned int)
/usr/lib64/firefox/libxul.so 0x1004d48
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
8
mozilla::net::nsHTTPCompressConv::BrotliHandler(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*)
/usr/lib64/firefox/libxul.so 0x1005829
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
9
nsStringInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)
/usr/lib64/firefox/libxul.so 0xc60583
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
10
mozilla::net::nsHTTPCompressConv::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x1004fc5
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
11
mozilla::net::HttpChannelChild::DoOnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x10e8c99
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
12
mozilla::net::HttpChannelChild::OnTransportAndData(nsresult const&, nsresult const&, unsigned long const&, unsigned int const&, nsTSubstring<char> const&)
/usr/lib64/firefox/libxul.so 0x10fefbd
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
13
mozilla::net::ChannelEventQueue::FlushQueue()
/usr/lib64/firefox/libxul.so 0x1212362
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
14
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0x1212532
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
15
mozilla::SchedulerGroup::Runnable::Run()
/usr/lib64/firefox/libxul.so 0xc852bb
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
16
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc8c2e9
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
17
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc8ca9d
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
18
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xc8ccfb
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
19
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run()
/usr/lib64/firefox/libxul.so 0xc8ce89
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
20
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xcaea38
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
21
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc96fcf
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
22
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x13446b0
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
23
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12f8739
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
24
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x37a564c
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
25
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4dc9d23
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
26
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x12f8739
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
27
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4dca426
Build id: 0ba5540904a85727d0c9efddd2377e53e7903be4 		-
28
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0xec6a
Build id: 13a71f71182072b64a6ca5eb4c1d51989fc884dc 		-
29
main
/usr/lib64/firefox/firefox 0xe342
Build id: 13a71f71182072b64a6ca5eb4c1d51989fc884dc 		-