Bug: SIGSEGV on click on font selection in compose window (Fedora 36, Sway, wayland)
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2022-11-07 14:09:23+00:00
Resolved: 2022-11-17 08:46:06+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

Steps to reproduce:

Sway version: 1.7
Fedora version: 36
Thunderbird: 102.4.1

1. Open compose window
2. Click on font selection
3. Dropdown opens for a nanosecond (I think it is not filled) and thunderbird crashes.

100% reproducible. Not sure since which version of thunderbird/sway this happens.

Paragraph format select next to the font dropdown works fine.


Actual results:

SIGSEGV:

$ (gdb) bt full
#0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=11, no_tid=no_tid@entry=0) at pthread_kill.c:44
        tid = <optimized out>
        ret = 0
        pd = <optimized out>

                    old_mask = {__val = {0, 139745557711720, 139745154007464, 177, 139745628782616, 139745628782592, 139743954206720, 94823405062090, 139743954932992, 6, 139745631901344, 8, 139745616162048, 139745615227789, 139743954932992, 139745615263428}}
        ret = <optimized out>
#1  0x00007f1910a8ec73 in __pthread_kill_internal (signo=11, threadid=<optimized out>) at pthread_kill.c:78
#2  0x00007f1910a3e986 in __GI_raise (sig=11) at ../sysdeps/posix/raise.c:26
        ret = <optimized out>
#3  0x00007f1907b12190 in nsProfileLock::FatalSignalHandler(int, siginfo_t*, void*) (signo=11, info=<optimized out>, context=0x7ffe6808dcc0)
    at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/toolkit/profile/nsProfileLock.cpp:174

                    unblock_sigs = {__val = {1024, 139745637149484, 11, 139745637162332, 140730643832000, 139745492515458, 139744063852944, 61216, 1144, 139745615227789, 8, 139745615239866, 206158430256, 12719420871989815040, 140730643833136, 139744297195520}}
        oldact = <optimized out>
#4  0x00007f1910a3ea30 in <signal handler called> () at /lib64/libc.so.6
#5  0x00007f190fd74101 in wl_buffer_add_listener
    Python Exception <class 'gdb.MemoryError'>: Cannot access memory at address 0x18
 (data=0x7f190f8bcbe0 <_cairo_surface_nil_invalid_size.lto_priv.0>, listener=0x7f190fdfb9a0 <buffer_listener>, wl_buffer=#6  gdk_wayland_window_ensure_cairo_surface (window=<optimized out>) at ../gdk/wayland/gdkwindow-wayland.c:995
        display_wayland = <optimized out>
Python Exception <class 'gdb.MemoryError'>: Cannot access memory at address 0x18
        buffer = #7  0x00007f190fd7417d in gdk_window_impl_wayland_begin_paint (window=<optimized out>) at ../gdk/wayland/gdkwindow-wayland.c:1033
#8  0x00007f190fd4507d in gdk_window_begin_paint_internal (region=0x7f18c51c91c0, window=0x7f18c13ad7e0) at ../gdk/gdkwindow.c:2954
        clip_box = {x = -185382432, y = 32536, width = 24, height = 0}
        sy = 1.1857575500189917e-322
        needs_surface = 1
        surface_content = <optimized out>
        impl_class = <optimized out>
        sx = 6.9530176435634037e-310
        __func__ = "gdk_window_begin_paint_internal"
#9  gdk_window_begin_paint_internal (window=window@entry=0x7f18c13ad7e0, region=region@entry=0x7f18c51c91c0) at ../gdk/gdkwindow.c:2930
        __func__ = "gdk_window_begin_paint_internal"
#10 0x00007f190fd4582e in gdk_window_begin_draw_frame (window=window@entry=0x7f18c13ad7e0, region=region@entry=0x7f18c51c91c0) at ../gdk/gdkwindow.c:3257
        context = <optimized out>
        impl_class = <optimized out>
        __func__ = "gdk_window_begin_draw_frame"
#11 0x00007f191017a47b in gtk_widget_render (widget=0x7f18c1317c60, window=0x7f18c13ad7e0, region=0x7f18c51c91c0) at ../gtk/gtkwidget.c:17591
        context = <optimized out>
        do_clip = <optimized out>
        cr = <optimized out>
        x = 32536
        y = -1053721504
#12 0x00007f191000dbd3 in gtk_main_do_event (event=<optimized out>) at ../gtk/gtkmain.c:1844
[I]--Type <RET> for more, q to quit, c to continue without paging--c
        grab_widget = 0x7f18c1317c60
        window_group = 0x7f18c0bf05f0
        rewritten_event = <optimized out>
        device = 0x0
        tmp_list = <optimized out>
        event_widget = 0x7f18c1317c60
        topmost_widget = <optimized out>
        __func__ = "gtk_main_do_event"
#13 gtk_main_do_event (event=<optimized out>) at ../gtk/gtkmain.c:1691
        __func__ = "gtk_main_do_event"
#14 0x00007f190fd3a463 in _gdk_event_emit (event=0x7ffe6808e5a0) at ../gdk/gdkevents.c:73
#15 _gdk_event_emit (event=0x7ffe6808e5a0) at ../gdk/gdkevents.c:67
#16 0x00007f190fd429e9 in _gdk_window_process_updates_recurse_helper (window=0x7f18c13ad7e0, expose_region=<optimized out>) at ../gdk/gdkwindow.c:3874
        event = {type = GDK_EXPOSE, any = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000'}, expose = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', area = {x = 0, y = 0, width = 286, height = 61216}, region = 0x7f18c51c91c0, count = 0}, visibility = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', state = GDK_VISIBILITY_UNOBSCURED}, motion = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, x = 6.0689079621606788e-312, y = 6.9041255085090823e-310, axes = 0x7f18c51c91c0, state = 0, is_hint = 32536, device = 0x7f191086f400, x_root = 6.9042856542186796e-310, y_root = 6.9043508344786047e-310}, button = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, x = 6.0689079621606788e-312, y = 6.9041255085090823e-310, axes = 0x7f18c51c91c0, state = 0, button = 32536, device = 0x7f191086f400, x_root = 6.9042856542186796e-310, y_root = 6.9043508344786047e-310}, touch = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, x = 6.0689079621606788e-312, y = 6.9041255085090823e-310, axes = 0x7f18c51c91c0, state = 0, sequence = 0x7f191086f400, emulating_pointer = -1053520832, device = 0x7f190fd6e7ec, x_root = 6.9043513926212052e-310, y_root = 6.904288892260101e-310}, scroll = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, x = 6.0689079621606788e-312, y = 6.9041255085090823e-310, state = 3306983872, direction = 32536, device = 0x7f1800000000, x_root = 6.9043514045032863e-310, y_root = 6.9042856542186796e-310, delta_x = 6.9043508344786047e-310, delta_y = 6.9043513926212052e-310, is_stop = 0}, key = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, state = 0, keyval = 286, length = 61216, string = 0x7f18c51c91c0 "\001", hardware_keycode = 0, group = 0 '\000', is_modifier = 0}, crossing = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', subwindow = 0x11e00000000, time = 61216, x = 6.9042888921968606e-310, y = 6.90412550548461e-310, x_root = 6.9043514045032863e-310, y_root = 6.9042856542186796e-310, mode = 265742316, detail = 32537, focus = 277039248, state = 32537}, focus_change = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', in = 4230}, configure = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', x = 0, y = 0, width = 286, height = 61216}, property = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', atom = 0x11e00000000, time = 61216, state = 32536}, selection = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', selection = 0x11e00000000, target = 0x7f180000ef20, property = 0x7f18c51c91c0, time = 0, requestor = 0x7f191086f400}, owner_change = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', owner = 0x11e00000000, reason = (unknown: 0xef20), selection = 0x7f18c51c91c0, time = 0, selection_time = 32536}, proximity = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, device = 0x11e00000000}, dnd = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', context = 0x11e00000000, time = 61216, x_root = 32536, y_root = 0}, window_state = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', changed_mask = 0, new_window_state = 0}, setting = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', action = GDK_SETTING_ACTION_NEW, name = 0x11e00000000 <error: Cannot access memory at address 0x11e00000000>}, grab_broken = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', keyboard = 0, implicit = 0, grab_window = 0x7f180000ef20}, touchpad_swipe = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', phase = -12 '\364', n_fingers = -122 '\206', time = 0, x = 6.0689079621606788e-312, y = 6.9041255085090823e-310, dx = 6.9042888921968606e-310, dy = 6.90412550548461e-310, x_root = 6.9043514045032863e-310, y_root = 6.9042856542186796e-310, state = 265742316}, touchpad_pinch = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', phase = -12 '\364', n_fingers = -122 '\206', time = 0, x = 6.0689079621606788e-312, y = 6.9041255085090823e-310, dx = 6.9042888921968606e-310, dy = 6.90412550548461e-310, angle_delta = 6.9043514045032863e-310, scale = 6.9042856542186796e-310, x_root = 6.9043508344786047e-310, y_root = 6.9043513926212052e-310, state = 3306985152}, pad_button = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, group = 0, button = 286, mode = 61216}, pad_axis = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, group = 0, index = 286, mode = 61216, value = 6.9042888921968606e-310}, pad_group_mode = {type = GDK_EXPOSE, window = 0x7f18c13ad7e0, send_event = 0 '\000', time = 0, group = 0, mode = 286}}
        child = <optimized out>
        clipped_expose_region = 0x7f18c51c91c0
        children = <optimized out>
        free_children = 0x0
        i = <optimized out>
        n_children = <optimized out>
        l = <optimized out>
        last_link = <optimized out>
#17 0x00007f190fd478a2 in gdk_window_process_updates_internal (window=0x7f18c13ad7e0) at ../gdk/gdkwindow.c:4020
        expose_region = 0x7f18c51c9180
        impl_class = 0x7f191086f400
        toplevel = <optimized out>
        display = <optimized out>
        __func__ = "gdk_window_process_updates_internal"
#18 0x00007f190fd47a98 in gdk_window_process_updates_with_mode (window=<optimized out>, recurse_mode=<optimized out>) at ../gdk/gdkwindow.c:4215
        impl_window = 0x7f18c13ad7e0
        list = 0x7f18c51c9020
        i = <optimized out>
        __func__ = "gdk_window_process_updates_with_mode"
#19 0x00007f1910cafb79 in _g_closure_invoke_va (param_types=<optimized out>, n_params=<optimized out>, args=0x7ffe6808e850, instance=<optimized out>, return_value=<optimized out>, closure=0x7f18c1347ee0) at ../gobject/gclosure.c:893
        marshal = <optimized out>
        marshal_data = <optimized out>
        in_marshal = <optimized out>
        real_closure = 0x7f18c1347ec0
        return_accu = <optimized out>
        accu = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        accumulator = <optimized out>
        emission = Python Exception <class 'TypeError'>: can only concatenate str (not "NoneType") to str
{next = 0x0, instance = 0x7f18b9061d90, ihint = {signal_id = 40, detail = 0, run_type = (G_SIGNAL_RUN_FIRST | G_SIGNAL_ACCUMULATOR_FIRST_RUN)}, state = EMISSION_RUN, chain_type = }
        instance_type = <optimized out>
        emission_return = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        rtype = <optimized out>
        static_scope = <optimized out>
        fastpath_handler = <optimized out>
        closure = <optimized out>
        run_type = <optimized out>
        hlist = <optimized out>
        l = <optimized out>
        fastpath = <optimized out>
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#20 g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7ffe6808e850) at ../gobject/gsignal.c:3406
        return_accu = <optimized out>
        accu = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        accumulator = <optimized out>
        emission = Python Exception <class 'TypeError'>: can only concatenate str (not "NoneType") to str
{next = 0x0, instance = 0x7f18b9061d90, ihint = {signal_id = 40, detail = 0, run_type = (G_SIGNAL_RUN_FIRST | G_SIGNAL_ACCUMULATOR_FIRST_RUN)}, state = EMISSION_RUN, chain_type = }
        instance_type = <optimized out>
        emission_return = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        rtype = <optimized out>
        static_scope = <optimized out>
        fastpath_handler = <optimized out>
        closure = <optimized out>
        run_type = <optimized out>
        hlist = <optimized out>
        l = <optimized out>
        fastpath = <optimized out>
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#21 0x00007f1910cafcb3 in g_signal_emit (instance=instance@entry=0x7f18b9061d90, signal_id=<optimized out>, detail=detail@entry=0) at ../gobject/gsignal.c:3553
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7ffe6808e930, reg_save_area = 0x7ffe6808e870}}
#22 0x00007f190fd3e208 in _gdk_frame_clock_emit_paint (frame_clock=0x7f18b9061d90) at ../gdk/gdkframeclock.c:657
        clock = 0x7f18b9061d90
        clock_idle = 0x7f18b9061d90
        priv = 0x7f18b9061ca0
        skip_to_resume_events = 0
        timings = <optimized out>
        __func__ = "gdk_frame_clock_paint_idle"
#23 gdk_frame_clock_paint_idle (data=<optimized out>) at ../gdk/gdkframeclockidle.c:597
        clock = 0x7f18b9061d90
        clock_idle = 0x7f18b9061d90
        priv = 0x7f18b9061ca0
        skip_to_resume_events = 0
        timings = <optimized out>
        __func__ = "gdk_frame_clock_paint_idle"
#24 0x00007f190fd2b1fb in gdk_threads_dispatch (data=data@entry=0x7f18c517c440) at ../gdk/gdk.c:769
        dispatch = 0x7f18c517c440
        ret = 0
#25 0x00007f190fc117b1 in g_timeout_dispatch (source=0x7f18b0dfb2e0, callback=0x7f190fd2b1d0 <gdk_threads_dispatch>, user_data=0x7f18c517c440) at ../glib/gmain.c:4971
        timeout_source = 0x7f18b0dfb2e0
        again = <optimized out>
#26 0x00007f190fc10faf in g_main_dispatch (context=0x7f19108c1a80) at ../glib/gmain.c:3417
        dispatch = 0x7f190fc11790 <g_timeout_dispatch>
        prev_source = 0x0
        begin_time_nsec = 75375482201215
        was_in_call = 0
        user_data = 0x7f18c517c440
        callback = 0x7f190fd2b1d0 <gdk_threads_dispatch>
        cb_funcs = 0x7f190fcf63e0 <g_source_callback_funcs>
        cb_data = 0x7f18c517c680
        need_destroy = <optimized out>
        source = 0x7f18b0dfb2e0
        current = 0x7f19108f8ba0
        i = 0
#27 g_main_context_dispatch (context=0x7f19108c1a80) at ../glib/gmain.c:4135
#28 0x00007f190fc662c8 in g_main_context_iterate.constprop.0 (context=context@entry=0x7f19108c1a80, block=block@entry=0, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4211
        max_priority = 120
        timeout = 0
        some_ready = 1
        nfds = 5
        allocated_nfds = <optimized out>
        fds = <optimized out>
        begin_time_nsec = 75375482191152
#29 0x00007f190fc0e940 in g_main_context_iteration (context=0x7f19108c1a80, may_block=0) at ../glib/gmain.c:4276
        retval = <optimized out>
#30 0x00007f1906787ff0 in nsAppShell::ProcessNextNativeEvent(bool) (this=<optimized out>, mayWait=<optimized out>) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/widget/gtk/nsAppShell.cpp:384
        didProcessEvent = <optimized out>
#31 0x00007f1906716ace in nsBaseAppShell::DoProcessNextNativeEvent(bool) (mayWait=false, this=0x7f18f4f78cf0) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/widget/nsBaseAppShell.cpp:120
        prevVal = nsBaseAppShell::eEventloopNone
        result = <optimized out>
        now = <optimized out>
        keepGoing = <optimized out>
        start = 75375478
        limit = 10
        oldBlockedWait = <optimized out>
        needEvent = false
#32 nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, bool) (this=0x7f18f4f78cf0, thr=0x7f1910878e00, mayWait=<optimized out>) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/widget/nsBaseAppShell.cpp:242
        now = <optimized out>
        keepGoing = <optimized out>
        start = 75375478
        limit = 10
        oldBlockedWait = <optimized out>
        needEvent = false
#33 0x00007f1903d11556 in nsThread::ProcessNextEvent(bool, bool*) (this=0x7f1910878e00, aMayWait=<optimized out>, aResult=0x7ffe6808ecc7) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/xpcom/threads/nsThread.cpp:1096
        reallyWait = <optimized out>
        noJSAPI = {<mozilla::detail::MaybeStorage<mozilla::dom::AutoNoJSAPI, false>> = {<mozilla::detail::MaybeStorageBase<mozilla::dom::AutoNoJSAPI, false>> = {mStorage = {val = {<mozilla::dom::ScriptSettingsStackEntry> = {mGlobalObject = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, mType = mozilla::dom::ScriptSettingsStackEntry::eNoJSAPI, mOlder = 0x0}, <JSAutoNullableRealm> = {cx_ = 0x7f18ef91f200, oldRealm_ = 0x0}, mCx = 0x7f18ef91f200, mExecutionYield = {mExecutionGrantingManager = {mRawPtr = 0x0}}}}}, mIsSome = 1 '\001'}, <mozilla::detail::Maybe_CopyMove_Enabler<mozilla::dom::AutoNoJSAPI, false, true, true>> = {<No data fields>}, <No data fields>}
        callScriptObserver = true
        obs = {<nsCOMPtr_base> = {mRawPtr = 0x7f18f4f78cf8}, <No data fields>}
        rv = <optimized out>
#34 0x00007f1903cfd92f in NS_ProcessNextEvent(nsIThread*, bool) (aThread=<optimized out>, aThread@entry=0x7f1910878e00, aMayWait=aMayWait@entry=false) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/xpcom/threads/nsThreadUtils.cpp:465
        val = false
#35 0x00007f1904380f9a in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) (this=0x7f18f4f62c00, aDelegate=0x7f1910844040) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/ipc/glue/MessagePump.cpp:85
        did_work = <optimized out>
        thisThread = 0x7f1910878e00
#36 0x00007f190433ac22 in MessageLoop::RunInternal() (this=<optimized out>) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/objdir/dist/include/mozilla/RefPtr.h:280
        save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0x7f1910844040, previous_state_ = 0x0}
#37 MessageLoop::RunHandler() (this=<optimized out>) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/ipc/chromium/src/base/message_loop.cc:373
        save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0x7f1910844040, previous_state_ = 0x0}
#38 MessageLoop::Run() (this=<optimized out>) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/ipc/chromium/src/base/message_loop.cc:355
        save_state = {<MessageLoop::RunState> = {run_depth = 1, quit_received = false}, loop_ = 0x7f1910844040, previous_state_ = 0x0}
#39 0x00007f190671214c in nsBaseAppShell::Run() (this=0x7f18f4f78cf0) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/widget/nsBaseAppShell.cpp:137
        thread = 0x7f1910878e00
#40 0x00007f1907a63fb6 in nsAppStartup::Run() (this=0x7f18f4f70330) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/toolkit/components/startup/nsAppStartup.cpp:295
        rv = <optimized out>
        userAllowedQuit = false
        retval = <optimized out>
#41 0x00007f1907b26197 in XREMain::XRE_mainRun() (this=<optimized out>) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/toolkit/xre/nsAppRunner.cpp:5745
        rv = nsresult::NS_OK
        appStartup = {<nsCOMPtr_base> = {mRawPtr = 0x7f18f4f70330}, <No data fields>}
        cmdLine = {<nsCOMPtr_base> = {mRawPtr = 0x7f18ef7a4af0}, <No data fields>}
#42 0x00007f1907b26d3e in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) (this=0x7ffe6808efe0, argc=<optimized out>, argv=<optimized out>, aConfig=<optimized out>) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/toolkit/xre/nsAppRunner.cpp:5939
        raiiObject5797 = {mProfilingStack = 0x0, static sProfilingStack = {<mozilla::detail::ThreadLocalNativeStorage<mozilla::baseprofiler::ProfilingStack*>> = {mValue = 0x0}, <No data fields>}}
        raiiObject5798 = {<No data fields>}
        raiiObject5799 = {mProfilingStack = 0x7f191084e778}
        rv = <optimized out>
        binFile = {<nsCOMPtr_base> = {mRawPtr = 0x7f19108c15b0}, <No data fields>}
        exit = false
        result = <optimized out>
#43 0x00007f1907b272c1 in XRE_main(int, char**, mozilla::BootstrapConfig const&) (argc=1, argv=0x7ffe680902d8, aConfig=...) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/toolkit/xre/nsAppRunner.cpp:5995
        main = {mNativeApp = {<nsCOMPtr_base> = {mRawPtr = 0x7f191084fb00}, <No data fields>}, mProfileSvc = {mRawPtr = 0x7f19108ac400}, mProfD = {<nsCOMPtr_base> = {mRawPtr = 0x7f18f4434500}, <No data fields>}, mProfLD = {<nsCOMPtr_base> = {mRawPtr = 0x7f18f44343a0}, <No data fields>}, mProfileLock = {<nsCOMPtr_base> = {mRawPtr = 0x7f18f4428220}, <No data fields>}, mRemoteService = {mRawPtr = 0x7f18f4425680}, mScopedXPCOM = {mTuple = {<mozilla::detail::CompactPairHelper<ScopedXPCOMStartup*, mozilla::DefaultDelete<ScopedXPCOMStartup>, (mozilla::detail::StorageType)1, (mozilla::detail::StorageType)0>> = {<mozilla::DefaultDelete<ScopedXPCOMStartup>> = {<No data fields>}, mFirstA = 0x7f18f4f38aa8}, <No data fields>}}, mAppData = {mTuple = {<mozilla::detail::CompactPairHelper<mozilla::XREAppData*, mozilla::DefaultDelete<mozilla::XREAppData>, (mozilla::detail::StorageType)1, (mozilla::detail::StorageType)0>> = {<mozilla::DefaultDelete<mozilla::XREAppData>> = {<No data fields>}, mFirstA = 0x7f191082af70}, <No data fields>}}, mDirProvider = {<nsIDirectoryServiceProvider2> = {<nsIDirectoryServiceProvider> = {<nsISupports> = {_vptr.nsISupports = 0x7f190c1b1d68 <vtable for nsXREDirProvider+16>}, <No data fields>}, <No data fields>}, <nsIXREDirProvider> = {<nsISupports> = {_vptr.nsISupports = 0x7f190c1b1dc0 <vtable for nsXREDirProvider+104>}, <No data fields>}, <nsIProfileStartup> = {<nsISupports> = {_vptr.nsISupports = 0x7f190c1b1df8 <vtable for nsXREDirProvider+160>}, <No data fields>}, mAppProvider = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, mGREDir = {<nsCOMPtr_base> = {mRawPtr = 0x7f19108c13a0}, <No data fields>}, mGREBinDir = {<nsCOMPtr_base> = {mRawPtr = 0x7f19108c1710}, <No data fields>}, mXULAppDir = {<nsCOMPtr_base> = {mRawPtr = 0x7f19108c1500}, <No data fields>}, mProfileDir = {<nsCOMPtr_base> = {mRawPtr = 0x7f18f4434500}, <No data fields>}, mProfileLocalDir = {<nsCOMPtr_base> = {mRawPtr = 0x7f18f44343a0}, <No data fields>}, mProfileNotified = true, mPrefsInitialized = true, mContentTempDir = {<nsCOMPtr_base> = {mRawPtr = 0x7f18d67a60e0}, <No data fields>}, mContentProcessSandboxTempDir = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}}, mDesktopStartupID = {<nsTString<char>> = {<nsTSubstring<char>> = {<mozilla::detail::nsTStringRepr<char>> = {static kMaxCapacity = <optimized out>, mData = 0x7ffe6808f094 "", mLength = {static kMax = 2147483646, mLength = 0}, mDataFlags = 17, mClassFlags = 3}, <No data fields>}, <No data fields>}, static kStorageSize = <optimized out>, mInlineCapacity = {static kMax = 2147483646, mLength = 63}, mStorage = "\000V\000\000L\035`\313=V\000\000\370\070\037\000\000\000\000\000#\000\000\000\000\000\000\000\370H\037\000\000\000\000\000\"\000\000\000\000\000\000\000 \361\bh\376\177\000\000\061\226|O\211D\000\000,\361\bh"}, mStartOffline = false, mShuttingDown = false, mDisableRemoteClient = false, mDisableRemoteServer = false, mGdkDisplay = 0x7f1910857e00}
        result = <optimized out>
#44 0x0000563dcb5f778c in do_main(int, char**, char**) (argc=<optimized out>, argc@entry=1, argv=<optimized out>, argv@entry=0x7ffe680902d8, envp=envp@entry=0x7ffe680902e8) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/comm/mail/app/nsMailApp.cpp:228
        appDataFile = <optimized out>
        config = {appData = 0x563dcb68fd40 <sAppData>, appDataPath = 0x563dcb675a56 ""}
        acceptableParams = {0x563dcb67304e "compose", 0x563dcb673056 "mail", 0x0}
#45 0x0000563dcb5f6b1e in main(int, char**, char**) (argc=1, argv=0x7ffe680902d8, envp=0x7ffe680902e8) at /usr/src/debug/thunderbird-102.4.1-1.fc36.x86_64/comm/mail/app/nsMailApp.cpp:368
        rv = <optimized out>
        result = <optimized out>


Expected results:

No segfault.
Successful selection of a different font.