Crash in tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]

Similar reports
Problem #701911
Component
firefox
Last affected version
0:133.0.3-1.fc40
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-09-25
Last occurrence
2025-06-15
Unique reports
11
Quality
-50

Statistics

Operating system Unique / Total count
Fedora 40 11 / 200
Operating system Count
Fedora 40 200
Architecture Count
x86_64 200
Related packages Count
firefox 200
 0:133.0.3-1.fc40 108
 0:130.0.1-1.fc40 53
 0:130.0-3.fc40 24
 0:131.0.3-1.fc40 14
 0:131.0-2.fc40 1
openh264 15
 0:2.4.1-2.fc40 15

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]
/lib64/libtcmalloc_minimal.so.4 0xcde4
Build id: 91ae895bdc5c400fe055df5f23dc8994ca0ebc4e 		-
2
tcmalloc::CentralFreeList::ReleaseListToSpans(void*)
/lib64/libtcmalloc_minimal.so.4 0x156be
Build id: 91ae895bdc5c400fe055df5f23dc8994ca0ebc4e 		-
3
tcmalloc::CentralFreeList::InsertRange(void*, void*, int)
/lib64/libtcmalloc_minimal.so.4 0x15963
Build id: 91ae895bdc5c400fe055df5f23dc8994ca0ebc4e 		-
4
WelsDec::CWelsDecoder::UninitDecoderCtx(WelsDec::TagWelsDecoderContext*&)
/lib64/libopenh264.so.7 0xb5768
Build id: d22cb90822a4d1997235e6cce22eb727af8a132d 		-
5
WelsDec::CWelsDecoder::InitDecoderCtx(WelsDec::TagWelsDecoderContext*&, TagSVCDecodingParam const*)
/lib64/libopenh264.so.7 0xb601a
Build id: d22cb90822a4d1997235e6cce22eb727af8a132d 		-
6
WelsDec::CWelsDecoder::ResetDecoder(WelsDec::TagWelsDecoderContext*&)
/lib64/libopenh264.so.7 0xb6511
Build id: d22cb90822a4d1997235e6cce22eb727af8a132d 		-
7
WelsDec::CWelsDecoder::DecodeFrame2WithCtx(WelsDec::TagWelsDecoderContext*, unsigned char const*, int, unsigned char**, TagBufferInfo*)
/lib64/libopenh264.so.7 0xb691c
Build id: d22cb90822a4d1997235e6cce22eb727af8a132d 		-
8
WelsDec::CWelsDecoder::DecodeFrameNoDelay(unsigned char const*, int, unsigned char**, TagBufferInfo*)
/lib64/libopenh264.so.7 0xb73da
Build id: d22cb90822a4d1997235e6cce22eb727af8a132d 		-
9
svc_decode_frame.lto_priv.0
/lib64/libavcodec.so.60 0x2c19d3
Build id: 00afb3e96a98b4074f184835965fe5f290173744 		-
10
decode_receive_frame_internal.lto_priv.0
/lib64/libavcodec.so.60 0x166a87
Build id: 00afb3e96a98b4074f184835965fe5f290173744 		-
11
avcodec_send_packet
/lib64/libavcodec.so.60 0x168353
Build id: 00afb3e96a98b4074f184835965fe5f290173744 		-
12
mozilla::FFmpegVideoDecoder<60>::DoDecode(mozilla::MediaRawData*, unsigned char*, int, bool*, nsTArray<RefPtr<mozilla::MediaData> >&)
/usr/lib64/firefox/libxul.so 0x18afd25
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
13
mozilla::FFmpegDataDecoder<60>::DoDecode(mozilla::MediaRawData*, bool*, nsTArray<RefPtr<mozilla::MediaData> >&)
/usr/lib64/firefox/libxul.so 0x1893ccf
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
14
mozilla::FFmpegDataDecoder<60>::ProcessDecode(mozilla::MediaRawData*)
/usr/lib64/firefox/libxul.so 0x1893dae
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
15
mozilla::detail::ProxyRunnable<mozilla::MozPromise<nsTArray<RefPtr<mozilla::MediaData> >, mozilla::MediaResult, true>, RefPtr<mozilla::MozPromise<nsTArray<RefPtr<mozilla::MediaData> >, mozilla::MediaResult, true> > (mozilla::FFmpegDataDecoder<60>::*)(mozilla::MediaRawData*), mozilla::FFmpegDataDecoder<60>, mozilla::MediaRawData*>::Run()
/usr/lib64/firefox/libxul.so 0x187eeb9
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
16
mozilla::TaskQueue::Runner::Run()
/usr/lib64/firefox/libxul.so 0x2c387fa
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
17
nsThreadPool::Run()
/usr/lib64/firefox/libxul.so 0x2c3843f
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
18
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2785ed3
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
19
mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2c3764a
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
20
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2bcae18
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
21
nsThread::ThreadFunc(void*)
/usr/lib64/firefox/libxul.so 0x2c371e3
Build id: c2736555dfc0df4dffd98ff99b064e2d6c4dd0bb 		-
22
_pt_root
/lib64/libnspr4.so 0x2b3b7
Build id: e6dfe24882ade9ec65f7f1591a3e9e249e5a5780 		-
23
set_alt_signal_stack_and_start(PthreadCreateParams*)
/usr/lib64/firefox/firefox 0x55ff6
Build id: 5e9204982a33c05a71e498002a756311b9798ae2 		-
24
start_thread
/lib64/libc.so.6 0x976d7
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-
25
__clone
/lib64/libc.so.6 0x11b414
Build id: 77c77fee058b19c6f001cf2cb0371ce3b8341211 		-