| 1423770
|
|
Write out of bounds in ConvertAudioSamples
|
Core
|
WebRTC: Audio/Video
|
achronop
|
RESO
|
FIXE
|
2018-08-28
|
| 1415770
|
|
Assertion failure: isInList(), at /src/obj-firefox/dist/include/mozilla/LinkedList.h:243
|
Core
|
DOM: Core & HTML
|
afarre
|
RESO
|
FIXE
|
2019-03-13
|
| 1416519
|
|
Assertion failure: IsIdle() || (mActivelyCollecting && mIncrementalPhase != GraphBuildingPhase) (Reentered CC during graph building), at /src/xpcom/base/nsCycleCollector.cpp:3840
|
Core
|
Audio/Video: Playbac
|
alwu
|
RESO
|
FIXE
|
2018-08-28
|
| 1416879
|
|
Crash in mozilla::net::HttpChannelParentListener::OnDataAvailable
|
Core
|
DOM: Service Workers
|
bugmail
|
RESO
|
FIXE
|
2018-01-18
|
| 1410140
|
|
PluginModuleChromeParent::AnswerGetFileName - Heap Buffer Overflow
|
Core Graveyard
|
Plug-ins
|
davidp99
|
RESO
|
FIXE
|
2022-05-16
|
| 1411631
|
|
PluginModuleChromeParent::AnswerGetFileName - Grant Arbitrary File Read Access.
|
Core Graveyard
|
Plug-ins
|
davidp99
|
RESO
|
FIXE
|
2022-05-16
|
| 1418966
|
|
AddressSanitizer: heap-use-after-free [@ js::TypeSet::unknown] with READ of size 4
|
Core
|
JavaScript Engine
|
jdemooij
|
RESO
|
FIXE
|
2020-02-28
|
| 1401459
|
|
AddressSanitizer: heap-use-after-free @ compare_exchange_strong | mozilla::net::HttpChannelChild::TrySendDeletingChannel()
|
Core
|
Networking: HTTP
|
polo.hellfire
|
RESO
|
FIXE
|
2020-02-28
|
| 1426449
|
|
Crash in webrtc::SimulcastRateAllocator::GetAllocation
|
Core
|
WebRTC
|
rjesup
|
RESO
|
FIXE
|
2018-08-28
|
| 1389561
|
|
crash in PLDHashTable::Remove | mozilla::dom::quota::QuotaObject::Release
|
Core
|
Storage: IndexedDB
|
shawnjohnjr
|
RESO
|
FIXE
|
2018-11-05
|
| 1415788
|
|
Crash in mozilla::dom::HTMLMediaElement::InitializeDecoderForChannel
|
Core
|
Audio/Video: Playbac
|
suro001
|
RESO
|
FIXE
|
2018-08-28
|
| 1384544
|
|
Crash in NewFunctionClone
|
Core
|
JavaScript Engine
|
tcampbell
|
RESO
|
FIXE
|
2018-11-05
|
| 1409179
|
|
Crash in js::InterpreterFrame::callee
|
Core
|
JavaScript Engine
|
tcampbell
|
RESO
|
FIXE
|
2018-08-28
|
| 1415748
|
|
Crash in js::InterpreterFrame::prologue
|
Core
|
JavaScript Engine
|
tcampbell
|
RESO
|
FIXE
|
2018-11-05
|
| 1421786
|
|
Crash in JSFunction::needsFunctionEnvironmentObjects
|
Core
|
JavaScript Engine
|
tcampbell
|
RESO
|
FIXE
|
2018-11-05
|
| 1412646
|
|
[Static Analysis] Uninitialized fields in some classes of security/manager
|
Core
|
Security: PSM
|
tristanbourvon
|
RESO
|
FIXE
|
2018-11-05
|
| 1364399
|
|
###!!! ASSERTION: mOpQueue modified during tree op execution.: 'mFlushState == eNotFlushing', file /home/allstars/src/gecko-dev/parser/html/nsHtml5TreeOpExecutor.cpp, line 824
|
Core
|
DOM: HTML Parser
|
hsivonen
|
RESO
|
FIXE
|
2018-11-13
|
| 1382851
|
|
Invalid read @ libGLESv2.dll!rx::Image11::disassociateStorage()
|
Core
|
Graphics: CanvasWebG
|
nobody
|
RESO
|
FIXE
|
2018-11-05
|
| 1416799
|
|
Crash in mozilla::MediaDecoderStateMachine::AccurateSeekingState::OnSeekRejected
|
Core
|
Audio/Video: Playbac
|
suro001
|
RESO
|
FIXE
|
2018-08-28
|
| 1401420
|
|
AddressSanitizer: use-after-poison [@ GetNextSibling] with READ of size 8 in layout/generic/nsIFrame.h:1431:45
|
Core
|
Layout
|
xidorn+moz
|
RESO
|
FIXE
|
2020-02-28
|
| 1261175
|
|
crash in nsPresContext::GetRootPresContext or nsPresContext::GetParentPresContext (from nsRefreshDriver::IsWaitingForPaint())
|
Core
|
Layout
|
matt.woodrow
|
RESO
|
FIXE
|
2018-08-28
|
| 1412313
|
|
ParamTraits<nsAString> Deserialization - Integer Overflow
|
Core
|
IPC
|
alex.gaynor
|
RESO
|
FIXE
|
2022-01-04
|
| 1413857
|
|
Crash in SkRefCntBase::unref
|
Core
|
Graphics
|
bas
|
RESO
|
FIXE
|
2018-11-05
|
| 1371891
|
|
SEGV on unknown address in [@ ParseFTPList]
|
Core Graveyard
|
Networking: FTP
|
continuation
|
RESO
|
FIXE
|
2024-02-08
|
| 1413143
|
|
Assertion failure nsContentUtils::IsSafeToRunScript() with non-default systemFontScale
|
Core
|
CSS Parsing and Comp
|
emilio
|
RESO
|
FIXE
|
2018-11-05
|
| 1400912
|
|
AddressSanitizer: stack-use-after-scope when plugging in webcam (regression)
|
Core
|
WebRTC: Audio/Video
|
jib
|
RESO
|
FIXE
|
2020-02-28
|
| 1412942
|
|
heap buffer overflow READ of size 4 when printing mozilla.org (ASAN)
|
Core
|
Graphics
|
lsalzman
|
RESO
|
FIXE
|
2018-11-05
|
| 1281965
|
|
Hash table re-entrancy during shutdown with non-ASCII font names
|
Core
|
Graphics: Text
|
milaninbugzilla
|
RESO
|
FIXE
|
2018-11-05
|
| 1415158
|
|
Crash in PLDHashTable::Search | nsTHashtable<T>::Contains | mozilla::dom::ContentParent::EnsurePermissionsByKey
|
Core
|
Permission Manager
|
nika
|
RESO
|
FIXE
|
2018-08-28
|
| 1418841
|
|
WasmInstanceScope::Data has wrong DeletePolicy
|
Core
|
JavaScript: GC
|
tcampbell
|
RESO
|
FIXE
|
2018-08-28
|
| 1412641
|
|
[Static Analysis] Uninitialized fields in some classes of accessibility
|
Core
|
Disability Access AP
|
tristanbourvon
|
RESO
|
FIXE
|
2018-11-05
|
| 1412645
|
|
[Static Analysis] Uninitialized fields in some classes of widget/cocoa
|
Core
|
Widget: Cocoa
|
tristanbourvon
|
RESO
|
FIXE
|
2018-11-05
|
| 1412648
|
|
[Static Analysis] Uninitialized fields in some classes of tools/profiler
|
Core
|
Gecko Profiler
|
tristanbourvon
|
RESO
|
FIXE
|
2018-11-05
|
| 1412653
|
|
Assertion failure: blFrame->numValueSlots() <= script->nslots(), at js/src/jit/BaselineBailouts.cpp:1011 with Debugger and OOM
|
Core
|
JavaScript Engine
|
nicolas.b.pierron
|
VERI
|
FIXE
|
2023-12-06
|
| 1427126
|
|
Assertion failure: !elements[i].isGCThing(), at js/src/gc/Marking.cpp:1669 with async
|
Core
|
JavaScript Engine
|
jdemooij
|
VERI
|
FIXE
|
2023-12-06
|