Crash in tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]

Similar reports
Problem #698628
Component
firefox
Last affected version
0:134.0.2-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2024-12-19
Last occurrence
2025-06-15
Unique reports
5
Quality
-32

Graphs

Statistics

Operating system Unique / Total count
Fedora 40 6 / 35
Fedora 41 5 / 29
Operating system Count
Fedora 40 35
Fedora 41 29
Architecture Count
x86_64 64
Related packages Count
mozilla-openh264 64
 0:2.4.1-2.fc40 35
 0:2.4.1-2.fc41 29
firefox 64
 0:133.0.3-1.fc40 35
 0:134.0.2-1.fc41 29
libvpx 32
 0:1.14.1-2.fc41 29
 0:1.14.1-1.fc40 3
Show more… (3)
glibc 29
 0:2.40-21.fc41 29
libevent 3
 0:2.1.12-12.fc40 3
libwebp 3
 0:1.3.2-5.fc40 3

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]
/lib64/libtcmalloc_minimal.so.4 0xcde4
Build id: 91ae895bdc5c400fe055df5f23dc8994ca0ebc4e 		-
2
tcmalloc::CentralFreeList::ReleaseListToSpans(void*)
/lib64/libtcmalloc_minimal.so.4 0x156be
Build id: 91ae895bdc5c400fe055df5f23dc8994ca0ebc4e 		-
3
tcmalloc::CentralFreeList::InsertRange(void*, void*, int)
/lib64/libtcmalloc_minimal.so.4 0x15963
Build id: 91ae895bdc5c400fe055df5f23dc8994ca0ebc4e 		-
4
RefCountTaskWrapper::Destroy()
/usr/lib64/mozilla/plugins/gmp-gmpopenh264/system-installed/libgmpopenh264.so 0x3884b
Build id: 103551a8aa6dde6f913acec9a5819e42b547ad73 		-
5
mozilla::gmp::GMPRunnable::Run()
/usr/lib64/firefox/libxul.so 0x17355f9
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
6
mozilla::detail::RunnableMethodImpl<mozilla::gmp::GMPRunnable*, void (mozilla::gmp::GMPRunnable::*)(), true, (mozilla::RunnableKind)0>::Run()
/usr/lib64/firefox/libxul.so 0x1736dc8
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
7
MessageLoop::RunTask(already_AddRefed<nsIRunnable>)
/usr/lib64/firefox/libxul.so 0x2c8ef0d
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
8
MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask&&)
/usr/lib64/firefox/libxul.so 0x2c8eebc
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
9
MessageLoop::DoWork()
/usr/lib64/firefox/libxul.so 0x2c738fb
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
10
base::MessagePumpDefault::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2fba785
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
11
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2c73428
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
12
base::Thread::ThreadMain()
/usr/lib64/firefox/libxul.so 0x2c6c256
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
13
ThreadFunc(void*)
/usr/lib64/firefox/libxul.so 0x2c6c0fb
Build id: 5579d7e976a83e9a9be34f730b106e4fe6c23559 		-
14
set_alt_signal_stack_and_start(PthreadCreateParams*)
/usr/lib64/firefox/firefox 0x4cf16
Build id: a3c0d51a43faad9c97ab19ab47f44fdb46143c4e 		-
15
start_thread
/lib64/libc.so.6 0x97c17
Build id: b871aacf7b252210b87d2e5dbea81bda8ada61f1 		-
16
__clone
/lib64/libc.so.6 0x11b914
Build id: b871aacf7b252210b87d2e5dbea81bda8ada61f1 		-