See https://crash-stats.mozilla.org/report/index/ae968262-7b1b-4835-885e-39b4d0220909
The crash report has alloc::alloc::handle_alloc_error() being called by cert_storage::load_crlite_stash_from_reader_into_map(..) but load_crlite_stash_from_reader_into_map doesn't call handle_alloc_error. There should be some frames from Vec there instead.