| 1386490
|
|
Crash in js::WrapperMap::lookup
|
Core
|
JavaScript Engine
|
bhackett1024
|
RESO
|
FIXE
|
2018-08-28
|
| 1406154
|
|
Stack buffer overflow in nr_transport_addr_fmt_ifname_addr_string
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
FIXE
|
2018-08-28
|
| 1384121
|
|
C++ helper functions can trigger ObjectGroup sweeping and walk the stack on OOM
|
Core
|
JavaScript Engine: J
|
jdemooij
|
RESO
|
FIXE
|
2018-08-28
|
| 1399922
|
|
Assertion failure: IsIdle(oldState) with testcase that exhausts the stack while adopting
|
Core
|
WebRTC: Audio/Video
|
jib
|
RESO
|
FIXE
|
2018-11-05
|
| 1384615
|
|
Assertion failure: !wcompartment->lookupWrapper(ObjectValue(*newTarget)), at /home/worker/workspace/build/src/js/src/proxy/CrossCompartmentWrapper.cpp:623
|
Core
|
JavaScript Engine
|
jorendorff
|
RESO
|
FIXE
|
2018-08-28
|
| 1403716
|
|
Fix the underlying issues that make the patch for bug 1355109 crashy
|
Core
|
JavaScript Engine
|
jorendorff
|
RESO
|
FIXE
|
2018-08-28
|
| 1407032
|
|
Crash in DeleteTask<T>::Run from GPU process or Content process
|
Core
|
IPC
|
dvander
|
RESO
|
FIXE
|
2018-08-28
|
| 1394031
|
|
Intermittent test_platform_specific_threats.js,test_pref.js ,test_safebrowsing_protobuf.js | application crashed [@ nsNSSShutDownObject::shutdown(nsNSSShutDownObject::ShutdownCalledFrom)]
|
Toolkit
|
Safe Browsing
|
tnguyen
|
RESO
|
FIXE
|
2018-11-05
|
| 1365894
|
|
AddressSanitizer: heap-use-after-free RefPtr.h:40:11 Release ~RefPtr ~SchedulerEventTarget (anonymous namespace)::SchedulerEventTarget::Release()
|
Core
|
XPCOM
|
ayumiqmazaky
|
RESO
|
FIXE
|
2020-02-28
|
| 1403646
|
|
Dead object proxies can violate some invariants that JSObject::swap asserts
|
Core
|
JavaScript Engine
|
bzbarsky
|
RESO
|
FIXE
|
2018-08-28
|
| 1383019
|
|
EXEC Crash in nsTimerImpl::Fire
|
Core
|
XPCOM
|
docfaraday
|
RESO
|
FIXE
|
2018-08-28
|
| 1402876
|
|
Crash [@ js::jit::JSJitFrameIter::checkInvalidation] with OOM
|
Core
|
JavaScript Engine
|
jdemooij
|
RESO
|
FIXE
|
2018-11-05
|
| 1387845
|
|
heap-use-after-free in [@ mozilla::layers::SharedPlanarYCbCrImage::~SharedPlanarYCbCrImage]
|
Core
|
Graphics
|
sotaro.ikeda.g
|
RESO
|
FIXE
|
2018-11-05
|
| 1339485
|
|
[10.12] Crash in libobjc.A.dylib@0x6b5d
|
Core
|
Widget: Cocoa
|
spohl.mozilla.bugs
|
RESO
|
FIXE
|
2018-11-05
|
| 1361432
|
|
[10.12] Crash in objc_msgSend | -[NSKeyBindingManager interpretEventAsCommand:forClient:]
|
Core
|
Widget: Cocoa
|
spohl.mozilla.bugs
|
RESO
|
FIXE
|
2018-11-05
|
| 1407375
|
|
stylo: AddressSanitizer: heap-use-after-free [@ NonMappedAttrCount] with READ of size 8
|
Core
|
SVG
|
bzbarsky
|
VERI
|
FIXE
|
2020-02-28
|