Crash in nsExpatDriver::ParseChunk(char16_t const*, unsigned int, nsExpatDriver::ChunkOrBufferIsFinal, unsigned int*, unsigned long*)

Similar reports
Problem #670681
Component
firefox
Last affected version
0:115.9.1-1.el7.centos
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-04-30
Last occurrence
2025-08-01
Unique reports
3
Quality
-60

Statistics

Operating system Unique / Total count
CentOS 7 3 / 4
Operating system Count
CentOS 7 4
Architecture Count
x86_64 4
Related packages Count
libXcomposite 4
 0:0.4.4-4.1.el7 4
libglvnd 4
 1:1.0.1-0.8.git5baa1e5.el7 4
glibc 4
 0:2.17-326.el7_9 4
Show more… (93)
fribidi 4
 0:1.0.2-1.el7_7.1 4
libattr 4
 0:2.4.46-13.el7 4
cairo 4
 0:1.15.12-4.el7 4
lz4 4
 0:1.8.3-1.el7 2
 0:1.8.3-1.el7_7 2
dejavu-sans-fonts 4
 0:2.33-6.el7 4
libXcursor 4
 0:1.1.15-1.el7 4
libXfixes 4
 0:5.0.3-1.el7 4
glib2 4
 0:2.56.1-9.el7_9 4
systemd-libs 4
 0:219-78.el7_9.9 4
libepoxy 4
 0:1.5.2-1.el7 4
libcap 4
 0:2.22-11.el7 4
elfutils-libelf 4
 0:0.176-5.el7 4
libstdc++ 4
 0:4.8.5-44.el7 4
libmount 4
 0:2.23.2-65.el7_9.1 4
libXtst 4
 0:1.2.3-1.el7 4
libXau 4
 0:1.0.8-2.1.el7 4
gtk3 4
 0:3.22.30-8.el7_9 4
nss 4
 0:3.90.0-2.el7_9 4
bzip2-libs 4
 0:1.0.6-13.el7 4
fontconfig 4
 0:2.13.0-4.3.el7 4
libglvnd-glx 4
 1:1.0.1-0.8.git5baa1e5.el7 4
libffi 4
 0:3.0.13-19.el7 4
gdk-pixbuf2 4
 0:2.36.12-3.el7 4
libblkid 4
 0:2.23.2-65.el7_9.1 4
nss-softokn-freebl 4
 0:3.90.0-6.el7_9 4
libxkbcommon 4
 0:0.7.1-3.el7 4
at-spi2-atk 4
 0:2.26.2-1.el7 4
expat 4
 0:2.1.0-15.el7_9 4
nspr 4
 0:4.35.0-1.el7_9 4
libXext 4
 0:1.3.3-3.el7 4
nss-util 4
 0:3.90.0-1.el7_9 4
libuuid 4
 0:2.23.2-65.el7_9.1 4
dbus-libs 4
 1:1.10.24-15.el7 4
libthai 4
 0:0.1.14-9.el7 4
alsa-lib 4
 0:1.1.8-1.el7 4
pixman 4
 0:0.34.0-1.el7 4
nss-softokn 4
 0:3.90.0-6.el7_9 4
dejavu-serif-fonts 4
 0:2.33-6.el7 4
libgcrypt 4
 0:1.5.3-14.el7 4
graphite2 4
 0:1.3.10-1.el7_3 4
libX11 4
 0:1.6.7-5.el7_9 4
libXrandr 4
 0:1.5.1-2.el7 4
glibc-common 4
 0:2.17-326.el7_9 4
libgcc 4
 0:4.8.5-44.el7 4
pcre 4
 0:8.32-17.el7 4
libXdamage 4
 0:1.1.4-4.1.el7 4
atk 4
 0:2.28.1-2.el7 4
libXinerama 4
 0:1.1.3-2.1.el7 4
libselinux 4
 0:2.5-15.el7 4
libxcb 4
 0:1.13-1.el7 4
pango 4
 0:1.42.4-4.el7_7 4
xz-libs 4
 0:5.2.2-2.el7_9 4
sqlite 4
 0:3.7.17-8.el7_7.1 4
elfutils-libs 4
 0:0.176-5.el7 4
libglvnd-egl 4
 1:1.0.1-0.8.git5baa1e5.el7 4
zlib 4
 0:1.2.7-21.el7_9 4
libwayland-cursor 4
 0:1.15.0-1.el7 4
at-spi2-core 4
 0:2.28.0-1.el7 4
libXi 4
 0:1.7.9-1.el7 4
freetype 4
 0:2.8-14.el7_9.1 4
firefox 4
 0:115.9.1-1.el7.centos 4
libpng 4
 2:1.5.13-8.el7 4
libwayland-egl 4
 0:1.15.0-1.el7 4
dbus-glib 4
 0:0.100-7.el7 4
libgpg-error 4
 0:1.12-3.el7 4
libXrender 4
 0:0.9.10-1.el7 4
libwayland-client 4
 0:1.15.0-1.el7 4
harfbuzz 4
 0:1.7.5-2.el7 4
cairo-gobject 4
 0:1.15.12-4.el7 4
urw-base35-d050000l-fonts 2
 0:20170801-10.el7 2
lohit-devanagari-fonts 2
 0:2.5.3-4.el7 2
wqy-microhei-fonts 2
 0:0.2.0-0.12.beta.el7 2
gnu-free-mono-fonts 2
 0:20120503-8.el7 2
urw-base35-gothic-fonts 2
 0:20170801-10.el7 2
urw-base35-nimbus-mono-ps-fonts 2
 0:20170801-10.el7 2
dejavu-sans-mono-fonts 2
 0:2.33-6.el7 2
paktype-naskh-basic-fonts 2
 0:4.1-3.el7 2
urw-base35-z003-fonts 2
 0:20170801-10.el7 2
lohit-tamil-fonts 2
 0:2.5.3-2.el7 2
gnu-free-serif-fonts 2
 0:20120503-8.el7 2
wqy-zenhei-fonts 2
 0:0.9.46-11.el7 2
lohit-marathi-fonts 2
 0:2.5.3-2.el7 2
gnu-free-sans-fonts 2
 0:20120503-8.el7 2
stix-fonts 2
 0:1.1.0-5.el7 2
urw-base35-nimbus-roman-fonts 2
 0:20170801-10.el7 2
smc-meera-fonts 2
 0:6.0-7.el7 2
vlgothic-fonts 2
 0:20130607-2.el7 2
abattis-cantarell-fonts 2
 0:0.0.25-1.el7 2
khmeros-base-fonts 2
 0:5.0-17.el7 2
paratype-pt-sans-fonts 2
 0:20101909-3.el7 2
google-crosextra-carlito-fonts 1
 0:1.103-0.2.20130920.el7 1
liberation-serif-fonts 1
 1:1.07.2-16.el7 1
liberation-sans-fonts 1
 1:1.07.2-16.el7 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
nsExpatDriver::ParseChunk(char16_t const*, unsigned int, nsExpatDriver::ChunkOrBufferIsFinal, unsigned int*, unsigned long*)
/usr/lib64/firefox/libxul.so 0x15b36d1
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
2
nsExpatDriver::ChunkAndParseBuffer(char16_t const*, unsigned int, bool, unsigned int*, unsigned int*, unsigned long*)
/usr/lib64/firefox/libxul.so 0x15b37c9
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
3
nsExpatDriver::ResumeParse(nsScanner&, bool)
/usr/lib64/firefox/libxul.so 0x15b76d9
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
4
nsParser::ResumeParse(bool, bool, bool) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x15bde0f
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
5
nsParser::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int) [clone .part.0]
/usr/lib64/firefox/libxul.so 0x15be9aa
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
6
imgRequest::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x1a1c4ff
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
7
nsCORSListenerProxy::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x113d495
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
8
mozilla::net::nsHTTPCompressConv::do_OnDataAvailable(nsIRequest*, unsigned long, char const*, unsigned int)
/usr/lib64/firefox/libxul.so 0x1005c17
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
9
mozilla::net::nsHTTPCompressConv::BrotliHandler(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*)
/usr/lib64/firefox/libxul.so 0x100663d
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
10
nsStringInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)
/usr/lib64/firefox/libxul.so 0xc3879f
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
11
mozilla::net::nsHTTPCompressConv::OnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x1005e90
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
12
mozilla::net::HttpChannelChild::DoOnDataAvailable(nsIRequest*, nsIInputStream*, unsigned long, unsigned int)
/usr/lib64/firefox/libxul.so 0x10f7095
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
13
mozilla::net::HttpChannelChild::OnTransportAndData(nsresult const&, nsresult const&, unsigned long const&, unsigned int const&, nsTSubstring<char> const&)
/usr/lib64/firefox/libxul.so 0x11184f4
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
14
mozilla::net::ChannelEventQueue::FlushQueue()
/usr/lib64/firefox/libxul.so 0x1244612
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
15
mozilla::net::ChannelEventQueue::ResumeInternal()::CompleteResumeRunnable::Run()
/usr/lib64/firefox/libxul.so 0x1244834
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
16
mozilla::SchedulerGroup::Runnable::Run()
/usr/lib64/firefox/libxul.so 0xc5ffe6
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
17
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc66053
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
18
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0xc67e49
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
19
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0xc6808b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
20
_ZN7mozilla6detail16RunnableFunctionIZNS_14TaskControllerC4EvEUlvE_E3RunEv
/usr/lib64/firefox/libxul.so 0xc68212
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
21
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0xc8d368
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
22
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0xc78b1b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
23
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x1385cba
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
24
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1334ad5
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
25
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x39bc1d8
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
26
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x4d1c61f
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
27
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x1334ad5
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
28
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x4d1cc2b
Build id: 0dd3fc072c93893071d074102f1711814b6b10cb 		-
29
content_process_main(mozilla::Bootstrap*, int, char**)
/usr/lib64/firefox/firefox 0x15cb7
Build id: ee79a7226eadb3a74e51eaed3ab3d43484089a60 		-
30
main
/usr/lib64/firefox/firefox 0x153c8
Build id: ee79a7226eadb3a74e51eaed3ab3d43484089a60 		-