Sat Apr 19 2025 09:12:46 PDT
  • Bug ID: 1413857, 1412653, 1418966, 1427126, 1412942, 1401459, 1364399, 1382851, 1423770, 1401420, 1281965, 1389561, 1409179, 1416879, 1421786, 1426449, 1416799, 1400912, 1415158, 1415748, 1415788, 1371891, 1415770, 1416519, 1413143, 1418841, 1384544, 1410140, 1411631, 1412313, 1412641, 1412645, 1412646, 1412648, 1261175

35 bugs found.
ID Type Summary Product Comp Assignee Status Resolution Updated
1423770 Write out of bounds in ConvertAudioSamples Core WebRTC: Audio/Video achronop RESO FIXE 2018-08-28
1415770 Assertion failure: isInList(), at /src/obj-firefox/dist/include/mozilla/LinkedList.h:243 Core DOM: Core & HTML afarre RESO FIXE 2019-03-13
1416519 Assertion failure: IsIdle() || (mActivelyCollecting && mIncrementalPhase != GraphBuildingPhase) (Reentered CC during graph building), at /src/xpcom/base/nsCycleCollector.cpp:3840 Core Audio/Video: Playbac alwu RESO FIXE 2018-08-28
1416879 Crash in mozilla::net::HttpChannelParentListener::OnDataAvailable Core DOM: Service Workers bugmail RESO FIXE 2018-01-18
1410140 PluginModuleChromeParent::AnswerGetFileName - Heap Buffer Overflow Core Graveyard Plug-ins davidp99 RESO FIXE 2022-05-16
1411631 PluginModuleChromeParent::AnswerGetFileName - Grant Arbitrary File Read Access. Core Graveyard Plug-ins davidp99 RESO FIXE 2022-05-16
1418966 AddressSanitizer: heap-use-after-free [@ js::TypeSet::unknown] with READ of size 4 Core JavaScript Engine jdemooij RESO FIXE 2020-02-28
1401459 AddressSanitizer: heap-use-after-free @ compare_exchange_strong | mozilla::net::HttpChannelChild::TrySendDeletingChannel() Core Networking: HTTP polo.hellfire RESO FIXE 2020-02-28
1426449 Crash in webrtc::SimulcastRateAllocator::GetAllocation Core WebRTC rjesup RESO FIXE 2018-08-28
1389561 crash in PLDHashTable::Remove | mozilla::dom::quota::QuotaObject::Release Core Storage: IndexedDB shawnjohnjr RESO FIXE 2018-11-05
1415788 Crash in mozilla::dom::HTMLMediaElement::InitializeDecoderForChannel Core Audio/Video: Playbac suro001 RESO FIXE 2018-08-28
1384544 Crash in NewFunctionClone Core JavaScript Engine tcampbell RESO FIXE 2018-11-05
1409179 Crash in js::InterpreterFrame::callee Core JavaScript Engine tcampbell RESO FIXE 2018-08-28
1415748 Crash in js::InterpreterFrame::prologue Core JavaScript Engine tcampbell RESO FIXE 2018-11-05
1421786 Crash in JSFunction::needsFunctionEnvironmentObjects Core JavaScript Engine tcampbell RESO FIXE 2018-11-05
1412646 [Static Analysis] Uninitialized fields in some classes of security/manager Core Security: PSM tristanbourvon RESO FIXE 2018-11-05
1364399 ###!!! ASSERTION: mOpQueue modified during tree op execution.: 'mFlushState == eNotFlushing', file /home/allstars/src/gecko-dev/parser/html/nsHtml5TreeOpExecutor.cpp, line 824 Core DOM: HTML Parser hsivonen RESO FIXE 2018-11-13
1382851 Invalid read @ libGLESv2.dll!rx::Image11::disassociateStorage() Core Graphics: CanvasWebG nobody RESO FIXE 2018-11-05
1416799 Crash in mozilla::MediaDecoderStateMachine::AccurateSeekingState::OnSeekRejected Core Audio/Video: Playbac suro001 RESO FIXE 2018-08-28
1401420 AddressSanitizer: use-after-poison [@ GetNextSibling] with READ of size 8 in layout/generic/nsIFrame.h:1431:45 Core Layout xidorn+moz RESO FIXE 2020-02-28
1261175 crash in nsPresContext::GetRootPresContext or nsPresContext::GetParentPresContext (from nsRefreshDriver::IsWaitingForPaint()) Core Layout matt.woodrow RESO FIXE 2018-08-28
1412313 ParamTraits<nsAString> Deserialization - Integer Overflow Core IPC alex.gaynor RESO FIXE 2022-01-04
1413857 Crash in SkRefCntBase::unref Core Graphics bas RESO FIXE 2018-11-05
1371891 SEGV on unknown address in [@ ParseFTPList] Core Graveyard Networking: FTP continuation RESO FIXE 2024-02-08
1413143 Assertion failure nsContentUtils::IsSafeToRunScript() with non-default systemFontScale Core CSS Parsing and Comp emilio RESO FIXE 2018-11-05
1400912 AddressSanitizer: stack-use-after-scope when plugging in webcam (regression) Core WebRTC: Audio/Video jib RESO FIXE 2020-02-28
1412942 heap buffer overflow READ of size 4 when printing mozilla.org (ASAN) Core Graphics lsalzman RESO FIXE 2018-11-05
1281965 Hash table re-entrancy during shutdown with non-ASCII font names Core Graphics: Text milaninbugzilla RESO FIXE 2018-11-05
1415158 Crash in PLDHashTable::Search | nsTHashtable<T>::Contains | mozilla::dom::ContentParent::EnsurePermissionsByKey Core Permission Manager nika RESO FIXE 2018-08-28
1418841 WasmInstanceScope::Data has wrong DeletePolicy Core JavaScript: GC tcampbell RESO FIXE 2018-08-28
1412641 [Static Analysis] Uninitialized fields in some classes of accessibility Core Disability Access AP tristanbourvon RESO FIXE 2018-11-05
1412645 [Static Analysis] Uninitialized fields in some classes of widget/cocoa Core Widget: Cocoa tristanbourvon RESO FIXE 2018-11-05
1412648 [Static Analysis] Uninitialized fields in some classes of tools/profiler Core Gecko Profiler tristanbourvon RESO FIXE 2018-11-05
1412653 Assertion failure: blFrame->numValueSlots() <= script->nslots(), at js/src/jit/BaselineBailouts.cpp:1011 with Debugger and OOM Core JavaScript Engine nicolas.b.pierron VERI FIXE 2023-12-06
1427126 Assertion failure: !elements[i].isGCThing(), at js/src/gc/Marking.cpp:1669 with async Core JavaScript Engine jdemooij VERI FIXE 2023-12-06
35 bugs found.