| 1354853
|
|
REFTEST PROCESS-CRASH | http://10.252.73.230:39858/tests/layout/reftests/ogg-video/poster-15.html == http://10.252.73.230:39858/tests/layout/reftests/ogg-video/poster-ref-green70x30.html | application crashed [@ libc.so + 0x475fa]
|
Firefox for Android
|
Audio/Video
|
bechen
|
RESO
|
FIXE
|
2020-12-21
|
| 1349421
|
|
Integer overflow in dom/media/encoder/OpusTrackEncoder.cpp, potentially leading to disclosure of uninitialized memory
|
Core
|
Audio/Video: Recordi
|
brycebugemail
|
RESO
|
FIXE
|
2017-10-27
|
| 1366446
|
|
AddressSanitizer: heap-use-after-free /home/worker/workspace/build/src/gfx/skia/skia/src/opts/SkBitmapProcState_opts_SSSE3.cpp:291:9 in ProcessTwoPixelPairs<false>
|
Core
|
Graphics
|
lsalzman
|
RESO
|
FIXE
|
2020-02-28
|
| 1299147
|
|
Assertion failure: !cycleEnd_, at js/src/jit/MoveResolver.h:278
|
Core
|
JavaScript Engine: J
|
sean.stangl
|
RESO
|
FIXE
|
2017-10-26
|
| 1352073
|
|
Off-by-one in Vector::insert
|
Core
|
MFBT
|
bugzilla
|
RESO
|
FIXE
|
2017-10-26
|
| 1361098
|
|
TimerThread::Init can race against TimerThread::Run, and can call TimerEvent::Init more than once
|
Core
|
XPCOM
|
docfaraday
|
RESO
|
FIXE
|
2017-10-26
|
| 1361100
|
|
Racy accesses to nsTimerImpl::mEventTarget in TimerThread::PostTimerEvent
|
Core
|
XPCOM
|
docfaraday
|
RESO
|
FIXE
|
2017-10-26
|
| 1342181
|
|
FinalizeDeferredThings can change gray marking state between FixGrayBits GC and start of CC
|
Core
|
XPCOM
|
jcoppeard
|
RESO
|
FIXE
|
2017-10-26
|
| 1349604
|
|
Possible integer overflow in allocation size in WidevineVideoFrame::InitToBlack?
|
Core
|
Audio/Video: GMP
|
mozbugz
|
RESO
|
FIXE
|
2023-06-02
|
| 1343069
|
|
Bug 1302071 added code which fails the static analysis check in 1336510
|
Core
|
Layout
|
nika
|
RESO
|
FIXE
|
2017-10-26
|
| 1318645
|
|
Crash in mozilla::a11y::Accessible::Elm
|
Core
|
Disability Access AP
|
nobody
|
RESO
|
FIXE
|
2017-10-26
|
| 1341026
|
|
Crash [@ js::detail::HashTable<void* const, js::HashSet<void*, js::PointerHasher<void*, 3ul>, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::lookup] or Assertion failure: table, at dist/include/js/HashTable.h:1377 with off-thread compilation
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2017-10-26
|
| 1360852
|
|
Crash [@ js::jit::IonSetPropertyIC::update] with invalid write
|
Core
|
JavaScript Engine
|
nobody
|
VERI
|
FIXE
|
2023-12-06
|