Sat Apr 19 2025 12:30:36 PDT
  • Bug ID: 1464872, 1463329, 1419373, 1412882, 1413033, 1444673, 1454448, 1453505, 1438671

ID Type Summary Product Comp Assignee Status Resolution Updated
1438671 Stringbuffer canary crash in safebrowsing code Toolkit Safe Browsing francois RESO FIXE 2018-06-28
1419373 XPConnect can access freed JSObjects during shutdown Core XPConnect jcoppeard RESO FIXE 2019-08-07
1444673 Probable write beyond bounds in CodeSegment::create() Core JavaScript Engine: J mail RESO FIXE 2024-05-30
1413033 Crash in js::ZoneGroup::enter called from AutoJSAPI::InitInternal() Core JavaScript Engine jdemooij RESO FIXE 2019-08-07
1463329 AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/RefPtr.h:92:25 in RefPtr Core WebVR kearwood RESO FIXE 2020-02-28
1454448 Free of static memory in ExecuteServiceCommand() Toolkit Application Update molly RESO FIXE 2024-05-30
1453505 Latent heap corruption on allocator mismatch in pk11_copyAttributes() NSS Libraries ttaubert RESO FIXE 2024-05-30
1412882 Crash in gfxFontUtils::MapCharToGlyphFormat4 Core Graphics: Text jfkthame VERI FIXE 2021-06-24
1464872 Assertion failure: !zone->isGCMarkingBlack() || zone->isAtomsZone(), at js/src/gc/Marking.cpp:253 with Debugger Core JavaScript Engine nobody VERI FIXE 2023-12-06
9 bugs found.