Crash in tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]

Similar reports
Problem #718770
Component
firefox
Last affected version
0:140.0.4-1.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-06-02
Last occurrence
2025-07-18
Unique reports
6
Quality
-90

Statistics

Operating system Unique / Total count
Fedora 42 6 / 104
Operating system Count
Fedora 42 104
Architecture Count
x86_64 104
Related packages Count
firefox 104
 0:140.0.4-1.fc42 89
 0:140.0-1.fc42 11
 0:138.0.4-1.fc42 4
libbrotli 104
 0:1.1.0-6.fc42 104
lpcnetfreedv 104
 0:0.5-8.fc42 104
Show more… (13)
libvmaf 104
 0:3.0.0-3.fc42 104
libgomp 102
 0:15.1.1-2.fc42 102
libjxl 102
 1:0.11.1-2.fc42 102
libgcrypt 102
 0:1.11.0-5.fc42 102
libgpg-error 102
 0:1.51-2.fc42 102
soxr 100
 0:0.1.3-18.fc42 100
cpuinfo 91
 0:24.09.26-2.git1e83a2f.fc42.1 91
libxcb 9
 0:1.17.0-5.fc42 9
vvenc-libs 2
 0:1.13.1-3.fc42 2
x265-libs 2
 0:4.1-2.fc42 2
libogg 2
 2:1.3.5-11.fc42 2
x264-libs 2
 0:0.164-16.20231001git31e19f92.fc42 2
glibc 2
 0:2.41-8.fc42 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]
/lib64/libtcmalloc_minimal.so.4 0x2dd6
Build id: ee9452309d178615826e2bc43873880ef6be7e72 		-
2
tcmalloc::CentralFreeList::ReleaseListToSpans(void*)
/lib64/libtcmalloc_minimal.so.4 0xb30e
Build id: ee9452309d178615826e2bc43873880ef6be7e72 		-
3
tcmalloc::CentralFreeList::InsertRange(void*, void*, int)
/lib64/libtcmalloc_minimal.so.4 0xb5d1
Build id: ee9452309d178615826e2bc43873880ef6be7e72 		-
4
tcmalloc::ThreadCache::ReleaseToCentralCache(tcmalloc::ThreadCache::FreeList*, unsigned int, int)
/lib64/libtcmalloc_minimal.so.4 0xb7cb
Build id: ee9452309d178615826e2bc43873880ef6be7e72 		-
5
tcmalloc::ThreadCache::ListTooLong(tcmalloc::ThreadCache::FreeList*, unsigned int)
/lib64/libtcmalloc_minimal.so.4 0xba96
Build id: ee9452309d178615826e2bc43873880ef6be7e72 		-
6
std::pair<unsigned long, int>& std::vector<std::pair<unsigned long, int>, std::allocator<std::pair<unsigned long, int> > >::emplace_back<std::pair<unsigned long, int> >(std::pair<unsigned long, int>&&)
/lib64/libhwy.so.1 0x4126
Build id: ea924cb274ff5f1c0ab257c8ffd467e500cbceba 		-
7
void hwy::robust_statistics::CountingSort<unsigned long>(unsigned long*, unsigned long)
/lib64/libhwy.so.1 0x3ee2
Build id: ea924cb274ff5f1c0ab257c8ffd467e500cbceba 		-
8
unsigned long hwy::robust_statistics::Mode<unsigned long, 256ul>(unsigned long (&) [256ul])
/lib64/libhwy.so.1 0x66b2
Build id: ea924cb274ff5f1c0ab257c8ffd467e500cbceba 		-
9
hwy::platform::TimerResolution()
/lib64/libhwy.so.1 0x65a8
Build id: ea924cb274ff5f1c0ab257c8ffd467e500cbceba 		-
10
_GLOBAL__sub_I_nanobenchmark.cc
/lib64/libhwy.so.1 0x62d
Build id: ea924cb274ff5f1c0ab257c8ffd467e500cbceba 		-
11
call_init
/usr/lib64/ld-linux-x86-64.so.2 0x4537
Build id: 3ea27fb641c3d354d587ac252eba85feda1b5985 		-
12
_dl_init
/usr/lib64/ld-linux-x86-64.so.2 0x460d
Build id: 3ea27fb641c3d354d587ac252eba85feda1b5985 		-
13
_dl_catch_exception
/usr/lib64/ld-linux-x86-64.so.2 0x17b5
Build id: 3ea27fb641c3d354d587ac252eba85feda1b5985 		-
14
dl_open_worker
/usr/lib64/ld-linux-x86-64.so.2 0xb349
Build id: 3ea27fb641c3d354d587ac252eba85feda1b5985 		-
15
_dl_catch_exception
/usr/lib64/ld-linux-x86-64.so.2 0x1716
Build id: 3ea27fb641c3d354d587ac252eba85feda1b5985 		-
16
_dl_open
/usr/lib64/ld-linux-x86-64.so.2 0xb75e
Build id: 3ea27fb641c3d354d587ac252eba85feda1b5985 		-
17
dlopen_doit
/lib64/libc.so.6 0x6d554
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
18
_dl_catch_exception
/usr/lib64/ld-linux-x86-64.so.2 0x1716
Build id: 3ea27fb641c3d354d587ac252eba85feda1b5985 		-
19
_dl_catch_error
/usr/lib64/ld-linux-x86-64.so.2 0x1869
Build id: 3ea27fb641c3d354d587ac252eba85feda1b5985 		-
20
_dlerror_run
/lib64/libc.so.6 0x6d043
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
21
dlopen@GLIBC_2.2.5
/lib64/libc.so.6 0x6d60b
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
22
PR_LoadLibraryWithFlags
/lib64/libnspr4.so 0xb3ce
Build id: b59795e132784ec5b754a7aededef1a327d52350 		-
23
mozilla::FFmpegRuntimeLinker::Init()
/usr/lib64/firefox/libxul.so 0x1c41ef4
Build id: daac599996733d190da69ea5130c1455e033e935 		-
24
mozilla::PDMFactory::PDMFactory()
/usr/lib64/firefox/libxul.so 0x1c42c53
Build id: daac599996733d190da69ea5130c1455e033e935 		-
25
RefPtr<mozilla::PDMFactory> mozilla::MakeRefPtr<mozilla::PDMFactory>()
/usr/lib64/firefox/libxul.so 0x1bb487b
Build id: daac599996733d190da69ea5130c1455e033e935 		-
26
mozilla::PDMFactory::Supported(bool)::{lambda()#1}::operator()() const [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x1c0f735
Build id: daac599996733d190da69ea5130c1455e033e935 		-
27
mozilla::PDMFactory::Supported(bool) [clone .constprop.0]
/usr/lib64/firefox/libxul.so 0x1c0f866
Build id: daac599996733d190da69ea5130c1455e033e935 		-
28
mozilla::PRDDParent::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x1bbad60
Build id: daac599996733d190da69ea5130c1455e033e935 		-
29
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x2eb8faf
Build id: daac599996733d190da69ea5130c1455e033e935 		-
30
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2eb89db
Build id: daac599996733d190da69ea5130c1455e033e935 		-
31
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2ec74d0
Build id: daac599996733d190da69ea5130c1455e033e935 		-
32
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2ec6d7b
Build id: daac599996733d190da69ea5130c1455e033e935 		-
33
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::{lambda()#2}>::Run() [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x2ec6d39
Build id: daac599996733d190da69ea5130c1455e033e935 		-
34
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2c3821d
Build id: daac599996733d190da69ea5130c1455e033e935 		-
35
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2fa1b67
Build id: daac599996733d190da69ea5130c1455e033e935 		-
36
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x32a2f23
Build id: daac599996733d190da69ea5130c1455e033e935 		-
37
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x354035d
Build id: daac599996733d190da69ea5130c1455e033e935 		-
38
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x353fb05
Build id: daac599996733d190da69ea5130c1455e033e935 		-
39
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xc12ebc
Build id: daac599996733d190da69ea5130c1455e033e935 		-
40
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x32a2f23
Build id: daac599996733d190da69ea5130c1455e033e935 		-
41
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x27b5765
Build id: daac599996733d190da69ea5130c1455e033e935 		-
42
main
/usr/lib64/firefox/firefox 0x3e1f7
Build id: 0bf89a74f699ff3255d3677536b8ae9e150be7b4 		-
43
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
44
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: 2b3c02fe7e4d3811767175b6f323692a10a4e116 		-
45
_start
/usr/lib64/firefox/firefox 0x3b225
Build id: 0bf89a74f699ff3255d3677536b8ae9e150be7b4 		-