| 1414829
|
|
IntermittentGECKO(3199) | SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/4.9.4/../../../../include/c++/4.9.4/bits/stl_iterator.h:729:20 in __normal_iterator
|
Core
|
WebRTC: Audio/Video
|
dminor
|
RESO
|
FIXE
|
2020-02-28
|
| 1467938
|
|
VP9 Missing Frame Processing Out-of-Bounds Memory Access
|
Core
|
WebRTC: Networking
|
drno
|
RESO
|
FIXE
|
2019-08-07
|
| 1438556
|
|
Avoid non-wrapper cross-compartment edges in ICs
|
Core
|
JavaScript Engine: J
|
mgaudet
|
RESO
|
FIXE
|
2019-08-07
|
| 1425930
|
|
Crash in @0x0 | nsScreenAndroid::GetDensity
|
GeckoView
|
General
|
rjesup
|
RESO
|
FIXE
|
2019-08-07
|
| 1395246
|
|
Crash in mozilla::TransportFlow::CheckThreadInt
|
Core
|
WebRTC: Networking
|
rjesup
|
RESO
|
FIXE
|
2019-08-07
|
| 1461619
|
|
Updating atom mark bits can race with object group sweeping
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2019-08-07
|
| 1454285
|
|
Crash [@ js::Shape::numFixedSlots] or [@ js::jit::BaselineCompiler::getEnvironmentCoordinateAddressFromObject]
|
Core
|
JavaScript Engine
|
arai.unmht
|
VERI
|
FIXE
|
2023-12-06
|
| 1459568
|
|
Assertion failure: InternalBarrierMethods<T>::thingIsNotGray(v) || CurrentThreadIsTouchingGrayThings(), at js/src/gc/Barrier.h:339
|
Core
|
JavaScript Engine
|
jcoppeard
|
VERI
|
FIXE
|
2023-12-06
|
| 1461324
|
|
Assertion failure: isObject(), at dist/include/js/Value.h:749 with OOM and __iterator__
|
Core
|
JavaScript Engine
|
jdemooij
|
VERI
|
FIXE
|
2023-12-06
|
| 1463884
|
|
Assertion failure: NS_IsMainThread() || sServoFFILock->LockedForWritingByCurrentThread()
|
Core
|
Layout
|
jfkthame
|
VERI
|
FIXE
|
2019-08-07
|