| 1490234
|
|
Shared memory should not allow executable images to be mapped on Windows.
|
Core
|
IPC
|
bobowencode
|
RESO
|
FIXE
|
2021-10-21
|
| 1483905
|
|
AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/Maybe.h:316:32 in isSome
|
Core
|
DOM: Device Interfac
|
dkeeler
|
RESO
|
FIXE
|
2020-02-28
|
| 1496340
|
|
Crash in nsSSLIOLayerHelpers::adjustForTLSIntolerance
|
Core
|
Security: PSM
|
dkeeler
|
RESO
|
FIXE
|
2019-08-07
|
| 1442010
|
|
Crash in nsMenuPopupFrame::ShouldFollowAnchor
|
Toolkit
|
UI Widgets
|
enndeakin
|
RESO
|
FIXE
|
2019-08-07
|
| 1443748
|
|
Crash in mozilla::ipc::IPDLParamTraits<T>::Write
|
Core
|
IPC
|
haftandilian
|
RESO
|
FIXE
|
2019-12-18
|
| 1490561
|
|
heap-use-after-free in [@ mozilla::ScrollFrameHelper::AsyncSmoothMSDScroll::~AsyncSmoothMSDScroll]
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2019-08-07
|
| 1493347
|
|
DataChannelConnection can be freed on wrong thread
|
Core
|
WebRTC: Networking
|
rjesup
|
RESO
|
FIXE
|
2019-08-07
|
| 1492524
|
|
[libfuzzer] heap-buffer-overflow in [@DoLiteralInternal]
|
Core
|
Networking: HTTP
|
u408661
|
RESO
|
FIXE
|
2019-08-07
|
| 1483699
|
|
Latent (?) read and write beyond bounds in nsTArray_Impl::AppendElements()
|
Core
|
XPCOM
|
froydnj+bz
|
RESO
|
FIXE
|
2024-05-30
|
| 1481844
|
|
Intermittent SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/js/src/vm/JSContext-inl.h:39:9 in fail
|
Core
|
JavaScript Engine
|
jcoppeard
|
RESO
|
FIXE
|
2020-02-28
|
| 1484905
|
|
Assertion failure: Length should be greater than 0., at js/src/jit/MacroAssembler.cpp:2031
|
Core
|
JavaScript Engine
|
jdemooij
|
RESO
|
FIXE
|
2019-08-07
|
| 1469486
|
|
Intermittent: AddressSanitizer: heap-use-after-free z:\build\build\src\gfx\cairo\cairo\src\cairo-region.c:377 in _moz_cairo_region_destroy
|
Core
|
Graphics
|
rhunt
|
RESO
|
FIXE
|
2020-02-28
|
| 1498482
|
|
stack buffer overflow in SkAlphaRuns::Break
|
Core
|
Graphics
|
ryanvm
|
RESO
|
FIXE
|
2019-08-07
|
| 1498701
|
|
Skia heap use-after-freed in SkPath::addPath
|
Core
|
Graphics
|
ryanvm
|
RESO
|
FIXE
|
2019-05-24
|
| 1495245
|
|
Crash in PLDHashTable::Iterator::Iterator | mozilla::plugins::PluginUtilsWin::AudioDeviceMessageRunnable::Run
|
Core
|
Security: Process Sa
|
davidp99
|
VERI
|
FIXE
|
2020-02-16
|
| 1487660
|
|
AddressSanitizer: heap-use-after-free [@ IsArray] with READ of size 4 with IndexedDB (again)
|
Core
|
Storage: IndexedDB
|
jan.varga
|
VERI
|
FIXE
|
2020-02-28
|
| 1496159
|
|
We can end up trying to load modules from the bytecode cache
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
VERI
|
FIXE
|
2020-06-05
|
| 1487098
|
|
AddressSanitizer: heap-buffer-overflow [@ mozEnglishWordUtils::FindNextWord] with off-by-two read
|
Core
|
Spelling checker
|
jfkthame
|
VERI
|
FIXE
|
2020-02-28
|
| 1488803
|
|
AddressSanitizer: heap-use-after-free [@ mozilla::widget::TSFTextStore::InsertTextAtSelectionInternal] with READ of size 4
|
Core
|
Widget
|
m_kato
|
VERI
|
FIXE
|
2024-05-30
|