| 1520483
|
|
Crash in mozilla::net::nsHttpTransaction::ReadSegments
|
Core
|
Networking: HTTP
|
dd.mozilla
|
RESO
|
FIXE
|
2019-08-07
|
| 1518331
|
|
Assertion failure: false (offset.isValid()), at js/src/jit/shared/Assembler-shared.h:286
|
Core
|
JavaScript: WebAssem
|
lhansen
|
RESO
|
FIXE
|
2020-04-06
|
| 1524335
|
|
Stack buffer overflow in IncomingRtpPacket when running mochitest
|
Core
|
WebRTC: Networking
|
dminor
|
RESO
|
FIXE
|
2020-06-30
|
| 1528199
|
|
XUL trees flush at an inappropriate time.
|
Core
|
Layout
|
emilio
|
RESO
|
FIXE
|
2020-04-06
|
| 1448505
|
|
Probable free of uninitialized pointer in ProxyAccessible::RelationByType()
|
Core
|
Disability Access AP
|
surkov.alexander
|
RESO
|
FIXE
|
2024-05-30
|
| 1525549
|
|
Intermittent GECKO(2696) | SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/4.9.4/../../../../include/c++/4.9.4/bits/atomic_base.h:618:16 in fetch_add
|
Core
|
Graphics
|
lsalzman
|
RESO
|
FIXE
|
2020-02-28
|
| 1512567
|
|
heap-use-after-free in [@ mozilla::a11y::DocAccessibleChildBase::ActorDestroy]
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
FIXE
|
2019-08-07
|
| 1519337
|
|
UTF8CharEnumerator: Off-by-one reads past the end of buffer when buffer ends after bytes that form a valid prefix for a 3-byte or 4-byte UTF-8 sequence
|
Core
|
Internationalization
|
hsivonen
|
RESO
|
FIXE
|
2019-08-07
|
| 1518821
|
|
Assertion failure: this->is<T>() with dead proxy in CallerGetterImpl / CallerSetterImpl
|
Core
|
JavaScript Engine
|
jdemooij
|
RESO
|
FIXE
|
2020-04-06
|
| 1526579
|
|
Assertion failure: IsWordAligned(pc_), at js/src/jit/arm64/vixl/MozSimulator-vixl.cpp:191 or Assertion failure: entryStack == exitStack, at js/src/jit/arm64/vixl/MozSimulator-vixl.cpp:279
|
Core
|
JavaScript: WebAssem
|
lhansen
|
RESO
|
FIXE
|
2019-08-07
|
| 1518524
|
|
Crash in SkBitmapCache::PrivateDeleteRec
|
Core
|
Web Painting
|
matt.woodrow
|
RESO
|
FIXE
|
2019-08-07
|
| 1516179
|
|
UAF (read) in mozilla::BackgroundHangAnnotators::GatherAnnotations()
|
Core
|
Performance: General
|
nika
|
RESO
|
FIXE
|
2020-04-06
|
| 1522987
|
|
<area>s don't get their frame pointers properly cleared if inside shadow trees.
|
Core
|
Layout: Images, Vide
|
emilio
|
VERI
|
FIXE
|
2020-04-06
|