Crash in tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]

Similar reports
Problem #698628
Component
firefox
Last affected version
0:138.0.4-1.fc41
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-02-20
Last occurrence
2025-05-31
Unique reports
5
Quality
-32

Statistics

Operating system Unique / Total count
Fedora 41 5 / 48
Operating system Count
Fedora 41 48
Architecture Count
x86_64 48
Related packages Count
firefox 48
 0:136.0.2-1.fc41 42
 0:135.0-1.fc41 4
 0:138.0.4-1.fc41 2
libvpx 48
 0:1.14.1-2.fc41 48
mozilla-openh264 48
 0:2.4.1-2.fc41 48
Show more… (3)
libwebp 42
 0:1.5.0-1.fc41 42
libevent 42
 0:2.1.12-14.fc41 42
glibc 2
 0:2.40-25.fc41 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
tcmalloc::PageHeap::Delete(tcmalloc::Span*) [clone .cold]
/lib64/libtcmalloc_minimal.so.4 0x2de4
Build id: f242584eea3b898cd99d1c9b6b0e705121897e49 		-
2
tcmalloc::CentralFreeList::ReleaseListToSpans(void*)
/lib64/libtcmalloc_minimal.so.4 0xb6be
Build id: f242584eea3b898cd99d1c9b6b0e705121897e49 		-
3
tcmalloc::CentralFreeList::InsertRange(void*, void*, int)
/lib64/libtcmalloc_minimal.so.4 0xb963
Build id: f242584eea3b898cd99d1c9b6b0e705121897e49 		-
4
RefCountTaskWrapper::Destroy()
/usr/lib64/mozilla/plugins/gmp-gmpopenh264/system-installed/libgmpopenh264.so 0x3884b
Build id: bf1434c3d80a6f6ae5ad028c315d955fbd005177 		-
5
mozilla::gmp::GMPRunnable::Run()
/usr/lib64/firefox/libxul.so 0x16f57eb
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
6
mozilla::detail::RunnableMethodImpl<mozilla::gmp::GMPRunnable*, nsresult (mozilla::gmp::GMPRunnable::*)(), true, (mozilla::RunnableKind)0>::Run()
/usr/lib64/firefox/libxul.so 0x16f73d8
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
7
MessageLoop::RunTask(already_AddRefed<nsIRunnable>)
/usr/lib64/firefox/libxul.so 0x2cee66d
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
8
MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask&&)
/usr/lib64/firefox/libxul.so 0x2cee45c
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
9
MessageLoop::DoWork()
/usr/lib64/firefox/libxul.so 0x2cd261b
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
10
base::MessagePumpDefault::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x3021dc4
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
11
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x2cd2118
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
12
base::Thread::ThreadMain()
/usr/lib64/firefox/libxul.so 0x2ccaf26
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
13
ThreadFunc(void*)
/usr/lib64/firefox/libxul.so 0x2ccadcb
Build id: f040e7cdaf9c0882e6e980aeef96ff9706ae02b4 		-
14
set_alt_signal_stack_and_start(PthreadCreateParams*)
/usr/lib64/firefox/firefox 0x41ae6
Build id: d1f99065b03d6df65d04ae9bf5f1fe1774564b8b 		-
15
start_thread
/lib64/libc.so.6 0x71168
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-
16
__clone
/lib64/libc.so.6 0xf4f54
Build id: 515c33a35f41020661fea8ac4eb995e26ccd6b00 		-