| 1371484
|
|
Write beyond bounds in Key::EncodeAsString()
|
Core
|
Storage: IndexedDB
|
bevistseng
|
RESO
|
FIXE
|
2024-05-30
|
| 1330739
|
|
crash near null and potential UAF [@mozilla::a11y::DocManager::CreateDocOrRootAccessible]
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
FIXE
|
2018-02-01
|
| 1371982
|
|
Intermittent AddressSanitizer: heap-use-after-free /home/worker/workspace/build/src/obj-firefox/dist/include/mozilla/MozPromise.h:867:5 in mozilla::MozPromise<mozilla::UniquePtr<int, mozilla::DefaultDelete<int> >, bool, true>::ThenInternal(mozilla::Abstra
|
Core
|
XPCOM
|
suro001
|
RESO
|
FIXE
|
2020-02-28
|
| 1370817
|
|
Unsafe use of Array.prototype.slice in Intl.js
|
Core
|
JavaScript: Internat
|
andrebargull
|
RESO
|
FIXE
|
2018-02-01
|
| 1371511
|
|
InvalidArrayIndex_CRASH {@ mozilla::a11y::NotificationController::WillRefresh]
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
FIXE
|
2018-02-01
|
| 1361749
|
|
Initialize a bunch of variables that are left uninitialized on construction after bug 1316556
|
Core
|
Layout
|
emilio
|
RESO
|
FIXE
|
2018-07-06
|
| 1370070
|
|
Assertion failure: CheckCapacity(aLength) (String is too large.), at dist/include/nsTSubstring.h:1125
|
Core
|
DOM: File
|
ericrahm+bz
|
RESO
|
FIXE
|
2018-02-01
|
| 1344666
|
|
Undefined behaviour in pr_inet_aton
|
NSPR
|
NSPR
|
franziskuskiefer
|
RESO
|
FIXE
|
2018-02-01
|
| 1347968
|
|
Intermittent ts_paint | application crashed [@ IPC::Channel::ChannelImpl::ProcessIncomingMessages(base::MessagePumpForIO::IOContext *,unsigned long)]
|
Core
|
General
|
gkrizsanits
|
RESO
|
FIXE
|
2018-10-01
|
| 1363150
|
|
Assertion failure: !denseElementsAreFrozen(), at /home/andre/git/mozilla-central/js/src/vm/NativeObject-inl.h:223
|
Core
|
JavaScript Engine
|
jdemooij
|
RESO
|
FIXE
|
2018-02-01
|
| 1373663
|
|
Assertion failure: off.assigned() && offset >= 0 && unsigned(offset) < size(), at js/src/jit/shared/IonAssemblerBuffer.h:380 with wasm
|
Core
|
JavaScript Engine
|
lhansen
|
RESO
|
FIXE
|
2018-02-01
|
| 1349138
|
|
Subclasses of nsITransaction shouldn't use raw reference to store EditorBase
|
Core
|
DOM: Editor
|
masayuki
|
RESO
|
FIXE
|
2018-02-01
|
| 1367850
|
|
REFTEST PROCESS-CRASH | http://10.252.73.233:33649/tests/dom/media/test/crashtests/1236639.html | application crashed [@ libc.so + 0x4027e]
|
Firefox for Android
|
General
|
rbarker
|
RESO
|
FIXE
|
2020-12-21
|
| 1353356
|
|
Assertion failure: aIndex < mLength, at dist/include/mozilla/Vector.h:533 with Debugger
|
Core
|
JavaScript Engine
|
shu
|
RESO
|
FIXE
|
2018-02-01
|
| 1369836
|
|
heap-use-after-free in [@ mozilla::a11y::DocAccessible::UncacheChildrenInSubtree]
|
Core
|
Disability Access AP
|
surkov.alexander
|
RESO
|
FIXE
|
2018-02-01
|
| 1273678
|
|
AddressSanitizer: heap-use-after-free on address in nssPKIObject_AddRef
|
NSS
|
Libraries
|
ttaubert
|
RESO
|
FIXE
|
2020-02-28
|
| 1353763
|
|
Crash [@ js::gc::IsInsideNursery]
|
Core
|
JavaScript Engine
|
mail
|
VERI
|
FIXE
|
2023-12-06
|
| 1375435
|
|
Assertion failure: resumePointsEmpty(), at js/src/jit/MIRGraph.cpp:1092
|
Core
|
JavaScript Engine
|
nicolas.b.pierron
|
VERI
|
FIXE
|
2023-12-06
|