Sat Apr 19 2025 14:31:40 PDT
  • Bug ID: 1296649, 1298107, 1300129, 1305876, 1314667, 1301252, 1277866, 1307254, 1252511, 1264053

10 bugs found.
ID Type Summary Product Comp Assignee Status Resolution Updated
1314667 Adding too many SimulcastStreams leads to stack smashing Core WebRTC: Audio/Video dminor RESO FIXE 2017-02-09
1298107 Invalid array access in MediaEngineCameraVideoSource::GetCapability() Core WebRTC: Audio/Video jib RESO FIXE 2017-08-28
1277866 Out-of-bounds write to unboxed object in arm64 backend Core JavaScript Engine: J jcoppeard RESO FIXE 2017-02-09
1305876 Crash in InvalidArrayIndex_CRASH | nsTArray_Impl<T>::operator[] | mozilla::TrackBuffersManager::GetSample Core Audio/Video: Playbac jya-moz RESO FIXE 2017-03-09
1301252 libjpeg-turbo: index out of bounds in [@initial_setup] Core Graphics: ImageLib nobody RESO FIXE 2017-02-09
1300129 Crash in InvalidArrayIndex_CRASH | mozilla::EventListenerManager::GetListenerInfo Core DOM: Events smaug RESO FIXE 2017-08-28
1252511 "Assertion failure: uint32_t(LittleEndian::readUint64(point) >> 32) < SCTAG_TRANSFER_MAP_HEADER" with DOM MessageChannel Core JavaScript Engine sphink RESO FIXE 2016-11-15
1296649 Crash [@ JSScript::code] or Crash [@ js::jit::ICEntry::pc] with use-after-free Core JavaScript Engine hv1989 VERI FIXE 2023-12-06
1307254 Changing screensharing resolution with applyConstraints crashes 49 and 48 Core WebRTC: Audio/Video rjesup VERI FIXE 2018-11-27
1264053 MessagePort should support transferable objects in multi-e10s Core JavaScript Engine sphink VERI FIXE 2017-10-26
10 bugs found.

File a new bug in the "Core" product