Crash in tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]

Similar reports
Problem #702897
Component
firefox
Last affected version
0:136.0.2-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-02-05
Last occurrence
2025-04-09
Unique reports
6
Quality
-94

Statistics

Operating system Unique / Total count
Fedora 41 6 / 437
Operating system Count
Fedora 41 437
Architecture Count
x86_64 437
Related packages Count
firefox 437
 0:136.0.2-1.fc41 433
 0:131.0.2-1.fc41 4
lpcnetfreedv 437
 0:0.5-6.fc41 437
libbrotli 437
 0:1.1.0-5.fc41 437
Show more… (10)
libgomp 435
 0:14.2.1-7.fc41 435
libgcrypt 433
 0:1.11.0-3.fc41 433
libgpg-error 433
 0:1.50-2.fc41 433
libjxl 431
 1:0.10.4-1.fc41 431
x265-libs 429
 0:3.6-3.fc41 429
libvmaf 10
 0:3.0.0-2.fc41 10
svt-av1-libs 4
 0:2.1.0-2.fc41 4
glibc 4
 0:2.40-21.fc41 4
ocl-icd 4
 0:2.3.2-7.fc41 4
x264-libs 2
 0:0.164-15.20231001git31e19f92.fc41 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]
/lib64/libtcmalloc_minimal.so.4 0x2de4
Build id: f242584eea3b898cd99d1c9b6b0e705121897e49 		-
2
tcmalloc::CentralFreeList::ReleaseListToSpans(void*)
/lib64/libtcmalloc_minimal.so.4 0xb6be
Build id: f242584eea3b898cd99d1c9b6b0e705121897e49 		-
3
tcmalloc::CentralFreeList::InsertRange(void*, void*, int)
/lib64/libtcmalloc_minimal.so.4 0xb963
Build id: f242584eea3b898cd99d1c9b6b0e705121897e49 		-
4
tcmalloc::ThreadCache::ReleaseToCentralCache(tcmalloc::ThreadCache::FreeList*, unsigned int, int)
/lib64/libtcmalloc_minimal.so.4 0xbb5b
Build id: f242584eea3b898cd99d1c9b6b0e705121897e49 		-
5
tcmalloc::ThreadCache::ListTooLong(tcmalloc::ThreadCache::FreeList*, unsigned int)
/lib64/libtcmalloc_minimal.so.4 0xbdd9
Build id: f242584eea3b898cd99d1c9b6b0e705121897e49 		-
6
__static_initialization_and_destruction_0() [clone .lto_priv.1]
/lib64/libaribcaption.so.1 0x5f0f
Build id: b53e29803259c2cbc969b9ee619520539f31069e 		-
7
_sub_I_65535_0.0
/lib64/libaribcaption.so.1 0x718b
Build id: b53e29803259c2cbc969b9ee619520539f31069e 		-
8
call_init
/usr/lib64/ld-linux-x86-64.so.2 0x4557
Build id: 2a59604186d5fbec715f683557fd69077886233a 		-
9
_dl_init
/usr/lib64/ld-linux-x86-64.so.2 0x464d
Build id: 2a59604186d5fbec715f683557fd69077886233a 		-
10
_dl_catch_exception
/usr/lib64/ld-linux-x86-64.so.2 0x15c2
Build id: 2a59604186d5fbec715f683557fd69077886233a 		-
11
dl_open_worker
/usr/lib64/ld-linux-x86-64.so.2 0xb4fc
Build id: 2a59604186d5fbec715f683557fd69077886233a 		-
12
_dl_catch_exception
/usr/lib64/ld-linux-x86-64.so.2 0x1523
Build id: 2a59604186d5fbec715f683557fd69077886233a 		-
13
_dl_open
/usr/lib64/ld-linux-x86-64.so.2 0xb904
Build id: 2a59604186d5fbec715f683557fd69077886233a 		-
14
dlopen_doit
/lib64/libc.so.6 0x6ccf4
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
15
_dl_catch_exception
/usr/lib64/ld-linux-x86-64.so.2 0x1523
Build id: 2a59604186d5fbec715f683557fd69077886233a 		-
16
_dl_catch_error
/usr/lib64/ld-linux-x86-64.so.2 0x1679
Build id: 2a59604186d5fbec715f683557fd69077886233a 		-
17
_dlerror_run
/lib64/libc.so.6 0x6c7e3
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
18
dlopen@GLIBC_2.2.5
/lib64/libc.so.6 0x6cdaf
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
19
PR_LoadLibraryWithFlags
/lib64/libnspr4.so 0xc16b
Build id: d279889a5096a86610a7a5f8fe7139fa103e7292 		-
20
mozilla::FFmpegRuntimeLinker::Init() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x2e74492
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
21
mozilla::PDMInitializer::InitPDMs() [clone .part.0]
/usr/lib64/firefox/libxul.so 0x2dff105
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
22
mozilla::PDMFactory::PDMFactory()
/usr/lib64/firefox/libxul.so 0x2e023c1
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
23
mozilla::PDMFactory::Supported(bool)::{lambda()#1}::operator()() const [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x2e06ba7
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
24
mozilla::PDMFactory::Supported(bool)
/usr/lib64/firefox/libxul.so 0x2e06d88
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
25
mozilla::RDDParent::RecvInit(nsTArray<mozilla::gfx::GfxVarUpdate>&&, mozilla::Maybe<mozilla::ipc::FileDescriptor> const&, bool const&, bool const&)
/usr/lib64/firefox/libxul.so 0x2cf30e6
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
26
mozilla::PRDDParent::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x2d2c464
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
27
mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
/usr/lib64/firefox/libxul.so 0xc4f2f4
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
28
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0xc56cab
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
29
mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)
/usr/lib64/firefox/libxul.so 0xc5765d
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
30
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0xc577da
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
31
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4d4b6f
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
32
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x4d52eb
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
33
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x4d554b
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
34
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#1}>::Run()
/usr/lib64/firefox/libxul.so 0x4d5696
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
35
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x4f839f
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
36
NS_ProcessNextEvent(nsIThread*, bool)
/usr/lib64/firefox/libxul.so 0x4ea22f
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
37
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc40efa
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
38
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xbf3cfd
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
39
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3c3451c
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
40
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3cea9b0
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
41
XRE_RunAppShell()
/usr/lib64/firefox/libxul.so 0x47f2b31
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
42
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0xbf3cfd
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
43
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x47f3385
Build id: 2dcdb59e9ab19e54788b8f6c7120a45f0d1371d6 		-
44
main
/usr/lib64/firefox/firefox 0x2a66
Build id: 670a10eebe2b95c4f595989970d3afbd4e0a8d92 		-
45
__libc_start_call_main
/lib64/libc.so.6 0x3248
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
46
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x330b
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
47
_start
/usr/lib64/firefox/firefox 0x2ef5
Build id: 670a10eebe2b95c4f595989970d3afbd4e0a8d92 		-