Sat Apr 19 2025 10:26:54 PDT
  • Bug ID: 1343261, 1350844, 1341096, 1342823, 1348894, 1348941, 1349340, 1352926, 1353088

ID Type Summary Product Comp Assignee Status Resolution Updated
1342823 Crash in RefPtr<T>::RefPtr<T> | TakeFrameRequestCallbacksFrom Core DOM: Animation bzbarsky RESO FIXE 2017-10-26
1352926 AddressSanitizer: heap-buffer-overflow on address in nsContentSink::ProcessLinkHeader(nsAString const&) Core DOM: Core & HTML bzbarsky RESO FIXE 2020-02-28
1349340 Probable write beyond bounds in GetSurfaceDataImpl() Core DOM: Copy & Paste an cervantes.yu RESO FIXE 2024-05-30
1348894 fix integer overflow in RecyclingPlanarYCbCrImage::CopyData Core Graphics dbaron RESO FIXE 2017-10-26
1341096 JS::IsIncrementalBarrierNeeded returns false during incremental sweeping Core JavaScript: GC jcoppeard RESO FIXE 2017-10-26
1343261 Crash [@ JSObject::compartment] or Crash [@ js::gc::GCRuntime::markCompartments] with nukeCCW Core JavaScript: GC sphink RESO FIXE 2017-10-26
1348941 Possible integer overflow in allocation size in nsBMPEncoder::AddImageFrame? Core Graphics: ImageLib tnikkel RESO FIXE 2017-10-26
1350844 Assertion failure: zone->gcSweepGroupEdges().empty(), at js/src/jsgc.cpp:4568 with nukeCCW Core JavaScript Engine jcoppeard VERI FIXE 2023-12-06
1353088 Crash in vcruntime140.dll@0xc387 | nsTArray_base<T>::ShiftData<T> | nsTArray_Impl<T>::RemoveElementsAt | mozilla::TrackBuffersManager::InitializationSegmentReceived Core Audio/Video: Playbac jya-moz VERI FIXE 2017-10-26
9 bugs found.

File a new bug in the "Core" product