| 1422631
|
|
suspect cubeb_data_callback called from refill_callback_duplex() while stream is draining
|
Core
|
Audio/Video: cubeb
|
achronop
|
RESO
|
FIXE
|
2018-11-05
|
| 1425691
|
|
Assertion failure: !unknownPropertiesDontCheckGeneration(), at js/src/vm/TypeInference-inl.h:1166 with async and debugger
|
Core
|
JavaScript Engine
|
arai.unmht
|
RESO
|
FIXE
|
2018-08-28
|
| 1416523
|
|
Crash [@ js::CanReuseScriptForClone] or Assertion failure: hasValue(), at jit/RegisterSets.h:210
|
Core
|
JavaScript Engine: J
|
bhackett1024
|
RESO
|
FIXE
|
2018-08-28
|
| 1426002
|
|
Assertion failure: JS_GetCompartmentPrincipals(js::GetObjectCompartment(wrapper)) == nsJSPrincipals::get(NodePrincipal()), at /builds/worker/workspace/build/src/dom/html/nsHTMLDocument.cpp:1797
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
| 1423173
|
|
Differential Testing: Different output message involving Object.freeze and __proto__
|
Core
|
JavaScript Engine: J
|
kvijayan
|
RESO
|
FIXE
|
2018-08-28
|
| 1404297
|
|
Crash in nsIDocument::FlushPendingLinkUpdates
|
Core
|
DOM: Core & HTML
|
mrbkap
|
RESO
|
FIXE
|
2019-03-13
|
| 1421963
|
|
Intermittent GECKO(3202) | ==3255==ERROR: AddressSanitizer: heap-use-after-free on address 0x61d000a582b4 at pc 0x7f1472493c22 bp 0x7f14688f2d30 sp 0x7f14688f2d28
|
Core
|
WebRTC: Audio/Video
|
rjesup
|
RESO
|
FIXE
|
2020-02-28
|
| 1297740
|
|
ASAN UAF in PerformAsyncLaunch (if MOZ_LOG/etc are set)
|
Core
|
IPC
|
gpascutto
|
RESO
|
FIXE
|
2018-11-05
|
| 1426603
|
|
Crash in mozilla::SystemClockDriver::WaitForNextIteration | mozilla::MediaStreamGraphImpl::UpdateMainThreadState
|
Core
|
Audio/Video: MediaSt
|
karlt
|
RESO
|
FIXE
|
2018-08-28
|
| 1373934
|
|
Crash in mozilla::detail::HashKnownLength<T>
|
Core
|
JavaScript Engine
|
tcampbell
|
RESO
|
FIXE
|
2018-08-28
|
| 1425257
|
|
Crash in mozilla::gfx::DrawTargetD2D1::Flush
|
Core
|
Graphics
|
bas
|
RESO
|
FIXE
|
2018-08-28
|
| 1429768
|
|
Intermittent AddressSanitizer: heap-use-after-free /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:458:3 in memcpy
|
Core
|
WebRTC
|
docfaraday
|
RESO
|
FIXE
|
2020-02-28
|
| 1433671
|
|
Crash in mozilla::AccessibleCaretManager::UpdateCarets
|
Core
|
CSS Parsing and Comp
|
emilio
|
RESO
|
FIXE
|
2018-11-05
|
| 1435566
|
|
Assertion failure: IsInUncomposedDoc() || IsInShadowTree() (This will end badly!), at /src/dom/base/nsIContentInlines.h:35
|
Core
|
Layout
|
emilio
|
RESO
|
FIXE
|
2019-03-12
|
| 1442318
|
|
mozilla::css::URLValueData::GetUTF16String is unsound.
|
Core
|
CSS Parsing and Comp
|
emilio
|
RESO
|
FIXE
|
2019-05-24
|
| 1416940
|
|
Reads beyond bounds and overflow/underflow in decode()
|
Firefox for Android
|
General
|
jimnchen+bmo
|
RESO
|
FIXE
|
2024-05-30
|
| 1432855
|
|
AddressSanitizer: heap-use-after-free in TelemetryHistogram.cpp when a test depends on an expired probe
|
Toolkit
|
Telemetry
|
chutten
|
VERI
|
FIXE
|
2020-02-28
|
| 1414768
|
|
Crash [@ JSObject::getClass] or Self-hosted JavaScript assertion info: "builtin/TypedArray.js:6: non-typed array asked for its buffer"
|
Core
|
JavaScript Engine
|
jorendorff
|
VERI
|
FIXE
|
2023-12-06
|
| 1441006
|
|
Assertion failure: clampedStart <= clampedEnd, at js/src/gc/Marking.cpp:2793
|
Core
|
JavaScript Engine
|
nobody
|
VERI
|
FIXE
|
2023-12-06
|