1397642
|
|
Memory corruption issue - Access violation reading address
|
Core
|
DOM: Events
|
nobody
|
UNCO
|
---
|
2024-06-15
|
1417780
|
|
shutdown crash in DeliverStatsReportToPCObserver_m() because PeerConnectionCtx::GetInstance() in null
|
Core
|
WebRTC
|
nobody
|
NEW
|
---
|
2022-10-11
|
1431142
|
|
Crash in xul!icu_58::DecimalFormat::updatePrecision (likely OOM)
|
Core
|
JavaScript: Internat
|
nobody
|
NEW
|
---
|
2022-10-11
|
1584404
|
|
member call on null pointer of type 'MaiAtkObject' in src/accessible/atk/AccessibleWrap.cpp:1354
|
Core
|
Disability Access AP
|
nobody
|
NEW
|
---
|
2022-10-11
|
1810612
|
|
crash near null in [@ mozilla::gfx::DrawTargetOffset::Init]
|
Core
|
Graphics: WebRender
|
nobody
|
NEW
|
---
|
2024-03-26
|
1278975
|
|
Crash on RTPPayloadRegistry shutdown
|
Core
|
WebRTC
|
nobody
|
NEW
|
---
|
2022-10-11
|
1293523
|
|
Read Access Violation in nsTextBoxFrame::CalculateTitleForWidth
|
Core
|
Graphics
|
nobody
|
NEW
|
---
|
2024-05-30
|
1377134
|
|
AV Read crash @ mozilla::dom::TabChild::RecvSizeModeChanged
|
Core
|
DOM: Content Process
|
nobody
|
NEW
|
---
|
2022-10-11
|
1416910
|
|
crash at null in [@ nsWebBrowserFind::GetFrameSelection]
|
Core
|
DOM: Selection
|
nobody
|
NEW
|
---
|
2023-03-25
|
1421053
|
|
Null deref crash [@ nsFrameList::DestroyFrame]
|
Core
|
Layout
|
nobody
|
NEW
|
---
|
2022-10-26
|
1489764
|
|
crash near null [@ InsertChildToChildList]
|
Core
|
DOM: Editor
|
nobody
|
NEW
|
---
|
2022-10-26
|
1625252
|
|
[first-letter][bidi] SEGV in GetWritingMode from nsLineLayout::NewPerFrameData()
|
Core
|
Layout: Block and In
|
nobody
|
NEW
|
---
|
2023-01-05
|
1660156
|
|
null pointer dereference in nsColorPicker::Open
|
Core
|
Widget: Gtk
|
nobody
|
NEW
|
---
|
2024-02-27
|
1667047
|
|
Crash in [@ ssl3_SendClientHello | ssl_BeginClientHandshake | ssl_SecureRecv | ssl_Recv | PSMRecv]
|
NSS
|
Libraries
|
nobody
|
NEW
|
---
|
2024-05-08
|
1394516
|
|
crash in [@ nsRange::UnregisterCommonAncestor]
|
Core
|
DOM: Selection
|
nobody
|
NEW
|
---
|
2022-10-11
|
1829910
|
|
gecko/dom/canvas/TexUnpackBlob.cpp:615:37: runtime error: applying non-zero offset 1047552 to null pointer
|
Core
|
Graphics: CanvasWebG
|
nobody
|
NEW
|
---
|
2023-10-01
|
1277085
|
|
null pointer in nsHTMLEditRules::GetNodesForOperation
|
Core
|
DOM: Editor
|
nobody
|
NEW
|
---
|
2024-05-30
|
1748102
|
|
crash near null in [@ mozilla::layers::ClipManager::PopOverrideForASR]
|
Core
|
Graphics: WebRender
|
nobody
|
NEW
|
---
|
2024-06-27
|
1764205
|
|
crash near null in [@ nsBlockFrame::ReflowInlineFrame]
|
Core
|
Layout: Block and In
|
nobody
|
NEW
|
---
|
2023-06-08
|
1764863
|
|
crash at null in [@ mozilla::RetainedDisplayListBuilder::PreProcessDisplayList]
|
Core
|
Web Painting
|
nobody
|
NEW
|
---
|
Tue 04:41
|
1788965
|
|
src/xpcom/threads/BlockingResourceBase.cpp:221:26: runtime error: member call on null pointer of type 'mozilla::DeadlockDetector<mozilla::BlockingResourceBase>'
|
Core
|
XPCOM
|
nobody
|
NEW
|
---
|
2022-12-01
|
1795142
|
|
gecko/gfx/angle/checkout/src/libANGLE/renderer/d3d/FramebufferD3D.cpp:234:58: runtime error: applying non-zero offset 36 to null pointer
|
Core
|
Graphics: CanvasWebG
|
nobody
|
NEW
|
---
|
2023-04-25
|
1838888
|
|
crash at [@ atidxx64.dll | CContext::TID3D11DeviceContext_ClearRenderTargetView_<T> ]
|
Core
|
Graphics
|
nobody
|
NEW
|
---
|
2024-05-30
|
1790526
|
|
src/toolkit/components/sessionstore/SessionStoreParent.cpp:281:47: runtime error: member call on null pointer of type 'mozilla::dom::BrowsingContext'
|
Core
|
Storage: localStorag
|
peterv
|
ASSI
|
---
|
2024-06-18
|
1907382
|
|
Crash in [@ ZSTD_DCtx_setParameter]
|
Core
|
Networking: HTTP
|
rjesup
|
ASSI
|
---
|
14:05:20
|
1535810
|
|
Potential read of uninitialized memory in png_ensure_sequence_number
|
Core
|
Graphics: ImageLib
|
nobody
|
REOP
|
---
|
2024-05-30
|
1329075
|
|
Null-deref in [@ HTMLMediaElement::StreamCaptureTrackSource::GetCORSMode]
|
Core
|
Audio/Video: MediaSt
|
apehrson
|
RESO
|
FIXE
|
2017-01-12
|
1304948
|
|
SEGV near null in [@mozilla::dom::TextTrack::GetTrackElement]
|
Core
|
Audio/Video: Playbac
|
bechen
|
RESO
|
FIXE
|
2016-12-22
|
1416879
|
|
Crash in mozilla::net::HttpChannelParentListener::OnDataAvailable
|
Core
|
DOM: Service Workers
|
bugmail
|
RESO
|
FIXE
|
2018-01-18
|
1402766
|
|
stylo: crash near null [@ nsInlineFrame::UpdateStyleOfOwnedAnonBoxesForIBSplit]
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2018-01-19
|
1375050
|
|
Crash @[GetExistingSlots /home/worker/workspace/build/src/dom/base/nsINode.h:1905:12]
|
Core
|
DOM: Core & HTML
|
catalin.badea392
|
RESO
|
FIXE
|
2019-03-13
|
1506612
|
|
Crash in RtlAcquireSRWLockExclusive | mozilla::detail::MutexImpl::lock | mozilla::net::SpdyConnectTransaction::WebsocketWriteSegments
|
Core
|
Networking: HTTP
|
dd.mozilla
|
RESO
|
FIXE
|
2018-11-19
|
1296410
|
|
NULL pointer read [@xul!nsLineLayout::ReflowFrame]
|
Core
|
Graphics: Canvas2D
|
demo99
|
RESO
|
FIXE
|
2017-10-02
|
1280215
|
|
null pointer crashes in PeerConnectionMedia::EnsureIceGathering_s
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
FIXE
|
2017-01-05
|
1338696
|
|
Crash in nr_stun_server_process_request (probably caused by failure in nr_stun_message_create2)
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
FIXE
|
2017-02-27
|
1370723
|
|
Crash near null [@ mozilla::a11y::NotificationController::Shutdown]
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
DUPL
|
2017-09-08
|
1201704
|
|
ASan: NULL deref in PK11_SaveContextAlloc
|
NSS
|
Libraries
|
ekr
|
RESO
|
FIXE
|
2015-10-07
|
1458999
|
|
Crash in nsXULWindow::SyncAttributesToWidget
|
Core
|
XUL
|
emilio
|
RESO
|
FIXE
|
2018-05-30
|
1540074
|
|
Crash in nsFirstLetterFrame::CreateContinuationForFloatingParent
|
Core
|
Layout
|
emilio
|
RESO
|
FIXE
|
2024-05-30
|
1186716
|
|
Stagefright: NULL deref crash in DecodeSPSFromExtraData
|
Core
|
Audio/Video: Playbac
|
giles
|
RESO
|
FIXE
|
2015-09-16
|
1189531
|
|
Stagefright: NULL deref in call to libc from convertTimeToDate
|
Core
|
Audio/Video: Playbac
|
giles
|
RESO
|
FIXE
|
2015-11-05
|
1189974
|
|
Stagefright: crash [@stagefright::MPEG4Extractor::parseMetaData]
|
Core
|
Audio/Video: Playbac
|
giles
|
RESO
|
FIXE
|
2015-09-14
|
1330190
|
|
SEGV near null in [@ Get]
|
Core
|
DOM: Animation
|
hikezoe.birchill
|
RESO
|
FIXE
|
2017-01-27
|
1330513
|
|
Null-deref in [@ GetUnit] with Animation options composite: add and fill: forwards
|
Core
|
DOM: Animation
|
hikezoe.birchill
|
RESO
|
FIXE
|
2017-01-27
|
1395661
|
|
stylo: Jump to nullptr from list-style animation
|
Core
|
CSS Parsing and Comp
|
hikezoe.birchill
|
RESO
|
WORK
|
2020-01-09
|
1668197
|
|
[warp] Crash [@ WarpCacheIRTranspiler::emitMathHypot2NumberResult]
|
Core
|
JavaScript Engine
|
iireland
|
RESO
|
FIXE
|
2024-04-09
|
1507135
|
|
null pointer / crash in NSS_CMSMessage_IsSigned (can be used to crash Firefox addon installer or Thunderbird SMIME verification)
|
NSS
|
Libraries
|
jc
|
RESO
|
FIXE
|
2019-03-14
|
1507174
|
|
crash in NSS_CMSContentInfo_GetContentTypeTag
|
NSS
|
Libraries
|
jc
|
RESO
|
FIXE
|
2019-08-07
|
1207312
|
|
ASan: SEGV at NULL in MozPromise
|
Core
|
Audio/Video: Playbac
|
jya-moz
|
RESO
|
FIXE
|
2016-07-02
|
1226707
|
|
ASan: NULL deference in [@mozilla::FFmpegDataDecoder<54>::ProcessFlush()]
|
Core
|
Audio/Video: Playbac
|
jya-moz
|
RESO
|
FIXE
|
2016-08-11
|
1614530
|
|
member call on null pointer of type 'mozilla::net::nsIOService' in netwerk/base/SSLTokensCache.cpp:70
|
Core
|
Networking: Cache
|
kershaw
|
RESO
|
FIXE
|
2020-02-12
|
1313135
|
|
crash near NULL in [@SkDraw::drawPath]
|
Core
|
Graphics: Canvas2D
|
kev155266
|
RESO
|
FIXE
|
2017-01-05
|
1401709
|
|
Crash near null [@ FloatManager]
|
Core
|
Layout
|
kevin.hsieh
|
RESO
|
FIXE
|
2017-09-25
|
1375131
|
|
Crash [@nsAutoOwningThread::AssertCurrentThreadOwnsMe]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-07-11
|
1381541
|
|
Crash near null [@GetBoolFlag | mozilla::HTMLEditor::NodeIsBlockStatic]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-08-24
|
1383755
|
|
Crash [@hdr] in /home/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:525:32
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-07-31
|
1402196
|
|
crash near null in [@ nsContentSubtreeIterator::Init]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-10-25
|
1402469
|
|
crash near null in [@ mozilla::HTMLEditor::GetFirstEditableChild]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-10-02
|
1402904
|
|
crash near null [@ IsList]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-10-11
|
1457136
|
|
Crash in nsTArray_base<T>::SwapArrayElements<T> | MergeState::MergeState
|
Core
|
Web Painting
|
matt.woodrow
|
RESO
|
FIXE
|
2018-05-30
|
1605530
|
|
member call on null pointer of type 'mozilla::dom::BrowsingContext' in uriloader/exthandler/ExternalHelperAppParent.cpp:83
|
Firefox
|
File Handling
|
matt.woodrow
|
RESO
|
DUPL
|
2020-02-28
|
1453670
|
|
SEGV in IncrementPaintCount
|
Core
|
Web Painting
|
mikokm
|
RESO
|
WORK
|
2024-05-30
|
1181734
|
|
Stagefright: crash [@stagefright::MPEG4Extractor::parseTrackHeader]
|
Core
|
Audio/Video: Playbac
|
mozbugz
|
RESO
|
FIXE
|
2015-10-22
|
1186721
|
|
Stagefright: crash [@stagefright::SampleTable::setTimeToSampleParams]
|
Core
|
Audio/Video: Playbac
|
mozbugz
|
RESO
|
FIXE
|
2015-09-13
|
1187067
|
|
Stagefright: NULL deref [@stagefright::MPEG4Extractor::parseChunk]
|
Core
|
Audio/Video: Playbac
|
mozbugz
|
RESO
|
FIXE
|
2016-11-02
|
1237848
|
|
libvpx: NULL crash [@vp9_lookahead_pop]
|
Core
|
Audio/Video: Playbac
|
mozbugz
|
RESO
|
FIXE
|
2016-04-13
|
1509585
|
|
Crash in mozilla::dom::WorkerPrivate::Notify
|
Core
|
DOM: Workers
|
mrbkap
|
RESO
|
FIXE
|
2019-03-31
|
1191180
|
|
"Assertion failure: mCertificate" in mozilla::PeerConnectionImpl::GetFingerprint
|
Core
|
WebRTC: Networking
|
mt
|
RESO
|
FIXE
|
2015-08-08
|
1515342
|
|
Empty or malformed p256-ECDH public keys from project Wycheproof cause segfault
|
NSS
|
Libraries
|
mt
|
RESO
|
FIXE
|
2020-06-05
|
1364778
|
|
crash near null in [@ aaa_walk_convex_edges]
|
Core
|
Graphics
|
nobody
|
RESO
|
DUPL
|
2017-05-16
|
1452704
|
|
crash near null in [@ HandleValueChanged]
|
Core
|
DOM: Editor
|
nobody
|
RESO
|
DUPL
|
2018-05-15
|
1612573
|
|
crash near null in [@ mozilla::dom::ExternalHelperAppParent::Init]
|
Core
|
DOM: Navigation
|
nobody
|
RESO
|
DUPL
|
2020-02-14
|
1127697
|
|
Crash [@ mozilla::dom::HTMLMediaElement::EndSrcMediaStreamPlayback()]
|
Core
|
Web Audio
|
padenot
|
RESO
|
WORK
|
2015-11-06
|
1335029
|
|
Crash in mozilla::MediaStreamGraphImpl::ApplyAudioContextOperationImpl
|
Core
|
Audio/Video: MediaSt
|
padenot
|
RESO
|
FIXE
|
2017-09-05
|
1343550
|
|
Crash near null [@ mozilla::dom::AudioNode::AudioNode]
|
Core
|
Web Audio
|
padenot
|
RESO
|
FIXE
|
2017-04-01
|
1813063
|
|
crash at null in [@ Length]
|
Core
|
Audio/Video: Playbac
|
padenot
|
RESO
|
MOVE
|
2023-02-24
|
1319566
|
|
Crash in nsTArray_Impl<T>::DestructRange | nsTArray_Impl<T>::RemoveElementsAt | mozilla::MediaEngineSource::Deallocate
|
Core
|
WebRTC: Audio/Video
|
rjesup
|
RESO
|
FIXE
|
2020-07-21
|
1334840
|
|
We can Reconfigure the send codec before we create the SendStream
|
Core
|
WebRTC
|
rjesup
|
RESO
|
FIXE
|
2017-02-03
|
1322286
|
|
Crash near null [@nsSVGMaskFrame::GetMaskForMaskedFrame]
|
Core
|
SVG
|
u459114
|
RESO
|
FIXE
|
2017-03-10
|
1383780
|
|
Stylo: Crash [@nsIContent::GetBaseURIForStyleAttr()] in /home/worker/workspace/build/src/dom/base/FragmentOrElement.cpp:465
|
Core
|
CSS Parsing and Comp
|
xidorn+moz
|
RESO
|
FIXE
|
2017-08-06
|
1605536
|
|
member call on null pointer of type 'mozilla::dom::BrowsingContext' in dom/ipc/ContentParent.cpp:5927
|
Core
|
Audio/Video: Playbac
|
alwu
|
RESO
|
FIXE
|
2020-01-14
|
1348882
|
|
Null deref crash [@ nsStringRepr | mozilla::dom::FetchBody<mozilla::dom::Request>::ContinueConsumeBody]
|
Core
|
DOM: Core & HTML
|
amarchesini
|
RESO
|
FIXE
|
2017-10-12
|
1819493
|
|
heap-buffer-overflow in [@ AllocateSolidColorFrame]
|
Core
|
WebRTC: Audio/Video
|
apehrson
|
RESO
|
FIXE
|
2023-10-17
|
1383763
|
|
Crash [@GetChildAt] in /home/worker/workspace/build/src/dom/base/nsDocumentEncoder.cpp:1868:43
|
Core
|
DOM: Selection
|
ayg
|
RESO
|
FIXE
|
2017-10-12
|
1334244
|
|
null pointer dereference in sandbox::InitHeap
|
Core
|
Security: Process Sa
|
bobowencode
|
RESO
|
FIXE
|
2023-09-24
|
1402547
|
|
crash near null in [@ AddOrAccumulate]
|
Core
|
SVG
|
brian
|
RESO
|
FIXE
|
2017-10-03
|
1395591
|
|
stylo: Crash near null [@ mozilla::ServoRestyleManager::DoReparentStyleContext]
|
Core
|
CSS Parsing and Comp
|
bzbarsky
|
RESO
|
FIXE
|
2017-09-01
|
1340248
|
|
Crash [@nsFrame::DidSetStyleContext]
|
Core
|
Layout
|
cam
|
RESO
|
FIXE
|
2019-05-14
|
1596245
|
|
AddressSanitizer: access-violation z:\build\build\src\dom\webgpu\Device.cpp:27 in mozilla::webgpu::Device::~Device
|
Core
|
Graphics: WebGPU
|
dmalyshau
|
RESO
|
FIXE
|
2020-02-28
|
1397881
|
|
WebRTC crash: send_stream_impl is null
|
Core
|
WebRTC
|
dminor
|
RESO
|
WORK
|
2017-11-29
|
1663051
|
|
Check for in list requests before processing them immediately after off thread parsing is finished
|
Core
|
Performance
|
dpalmeiro
|
RESO
|
FIXE
|
2021-12-27
|
1535868
|
|
Negotiating DTLS without SRTP extension results in random crashes
|
Core
|
WebRTC: Networking
|
drno
|
RESO
|
FIXE
|
2019-07-01
|
1446043
|
|
Crash [@ GetNextSibling]
|
Core
|
Spelling checker
|
echen
|
RESO
|
DUPL
|
2018-11-02
|
1649448
|
|
Assertion failure: aGlobal, at /builds/worker/checkouts/gecko/dom/file/Blob.cpp:74
|
Core
|
DOM: File
|
echuang
|
RESO
|
FIXE
|
2024-01-04
|
1341657
|
|
Crash [@nsDocShell::InternalLoad]
|
Core
|
DOM: Navigation
|
ehsan.akhgari
|
RESO
|
FIXE
|
2021-09-13
|
1396267
|
|
crash near null in [@ mozilla::a11y::IDRefsIterator::IDRefsIterator]
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
FIXE
|
2017-10-05
|
1587688
|
|
crash near null in [@ nsMeterFrame::ReflowBarFrame]
|
Core
|
Layout: Form Control
|
emilio
|
RESO
|
FIXE
|
2020-07-10
|
1395635
|
|
Crash with JS module
|
Core
|
JavaScript Engine
|
jcoppeard
|
RESO
|
WORK
|
2017-12-19
|
1350972
|
|
Crash [@InvalidateAllFrames]
|
Core
|
DOM: Core & HTML
|
jdai
|
RESO
|
FIXE
|
2019-03-13
|
1362423
|
|
Crash @ [NewPerFrameData /home/worker/workspace/build/src/layout/generic/nsLineLayout.cpp:666]
|
Core
|
Layout
|
jfkthame
|
RESO
|
FIXE
|
2017-05-11
|
1606507
|
|
crash near null in [@ mozilla::MediaEngineTabVideoSource::Draw]
|
Core
|
WebRTC: Audio/Video
|
jib
|
RESO
|
FIXE
|
2020-01-08
|
1823330
|
|
[WASM] Assertion failure: producer_ != nullptr, js/src/jit/MIR.h:245
|
Core
|
JavaScript: WebAssem
|
jpages
|
RESO
|
DUPL
|
2023-10-30
|
1823384
|
|
[WASM][ARM64] SEGV in js::jit::MDefinition::type
|
Core
|
JavaScript: WebAssem
|
jseward
|
RESO
|
DUPL
|
2023-10-30
|
1684840
|
|
Crash in [@ nsTArray_Impl<T>::AppendElementsInternal<T> | mozilla::net::DocumentLoadListener::AttachStreamFilter]
|
Core
|
Networking: HTTP
|
kershaw
|
RESO
|
FIXE
|
2021-01-14
|
1343918
|
|
Crash [@nsCOMPtr_base /home/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-06-23
|
1345015
|
|
Crash [@mozilla::HTMLEditRules::GetPromotedPoint]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-09-25
|
1542077
|
|
mp_set_ulong and mp_set_int should return errors on bad values
|
NSS
|
Libraries
|
marcus.apb
|
RESO
|
FIXE
|
2019-08-13
|
1115055
|
|
Crash @ nsEditorEventListener::MouseDown(nsIDOMMouseEvent*)
|
Core
|
DOM: Editor
|
masayuki
|
RESO
|
FIXE
|
2017-02-02
|
1315450
|
|
Crash in mozilla::EditorEventListener::MouseClick
|
Core
|
DOM: Editor
|
masayuki
|
RESO
|
FIXE
|
2017-02-13
|
1578916
|
|
crash near null in [@ mozilla::HTMLEditor::InsertBRElementIfHardLineIsEmptyAndEndsWithBlockBoundary]
|
Core
|
DOM: Editor
|
masayuki
|
RESO
|
FIXE
|
2020-11-10
|
1381134
|
|
Null deref crash [@ GetParentNode]
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2017-10-11
|
1382932
|
|
Crash in mozilla::MediaPipelineTransmit::PipelineListener::NewData
|
Core
|
WebRTC
|
mfroman
|
RESO
|
FIXE
|
2020-08-08
|
1389793
|
|
Crash in mozilla::MediaPipeline::RtpPacketReceived
|
Core
|
WebRTC: Signaling
|
mfroman
|
RESO
|
FIXE
|
2018-03-29
|
1396319
|
|
Crash in mozilla::MediaPipeline::RtcpPacketReceived
|
Core
|
WebRTC: Signaling
|
na-g
|
RESO
|
FIXE
|
2018-08-28
|
1479588
|
|
No null-check on mParentContent when creating remote browsers
|
Core
|
DOM: Core & HTML
|
nika
|
RESO
|
FIXE
|
2019-04-11
|
1323116
|
|
Crash at @ nsACString_internal::Assign | nsACString_internal::Assign | mozilla::gmp::GetContentParentFromDone::Done
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
DUPL
|
2017-12-03
|
1329449
|
|
[e10s] Crash in mozilla::SingletonThreadHolder::ReleaseUse
|
Core
|
WebRTC: Networking
|
nobody
|
RESO
|
WORK
|
2018-02-16
|
1375595
|
|
Crash [@GetWritingMode]
|
Core
|
Layout
|
nobody
|
RESO
|
WORK
|
2017-09-25
|
1384126
|
|
Null deref [@ nsIFrame::Type | nsAccessibilityService::CreateAccessibleByFrameType]
|
Core
|
Disability Access AP
|
nobody
|
RESO
|
WORK
|
2019-10-15
|
1399975
|
|
Crash in shutdownhang | __psynch_cvwait | <name omitted> | mozilla::ThreadEventQueue<T>::GetEvent
|
Core
|
DOM: Workers
|
nobody
|
RESO
|
WONT
|
2018-10-01
|
1402434
|
|
crash near null in [@ mozilla::FrameLayerBuilder::DrawPaintedLayer]
|
Core
|
Web Painting
|
nobody
|
RESO
|
WORK
|
2022-09-21
|
1415605
|
|
crash near null [@ mozilla::PresShell::FrameNeedsReflow]
|
Core
|
Layout
|
nobody
|
RESO
|
WORK
|
2020-10-26
|
1419461
|
|
Crash in nsWindow::NativePtr<T>::Detach
|
Core Graveyard
|
Widget: Android
|
nobody
|
RESO
|
WORK
|
2021-11-04
|
1448312
|
|
crash [@ nsIContent::IsHTMLElement ]
|
Core
|
Layout
|
nobody
|
RESO
|
INCO
|
2018-12-27
|
1461180
|
|
Crash in nsFont::CalcDifference
|
Core
|
CSS Parsing and Comp
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
1481891
|
|
null pointer dereference and segfault on startup with crafted omni.ja
|
Core
|
XPConnect
|
nobody
|
RESO
|
WORK
|
2021-07-19
|
1490106
|
|
[libFuzzer] Null-deref crash [@ mozilla::gfx::RecordedSnapshot::PlayEvent]
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
INCO
|
2023-02-28
|
1490157
|
|
[libFuzzer] Null-deref crash [@ mozilla::gfx::InlineTranslator::TranslateRecording]
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
INCO
|
2023-02-28
|
1490418
|
|
[libFuzzer] Null-deref crash [@ mozilla::gfx::InlineTranslator::TranslateRecording]
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
INCO
|
2023-02-28
|
1490423
|
|
[libFuzzer] Null-deref crash [@ mozilla::gfx::RecordedFill::PlayEvent | mozilla::gfx::InlineTranslator::TranslateRecording]
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
INCO
|
2023-02-28
|
1495646
|
|
Intermittent SUMMARY: AddressSanitizer: access-violation z:\build\build\src\mozglue\misc\TimeStamp_windows.cpp:307 in mozilla::TimeStampValue::CheckQPC
|
Core
|
WebVR
|
nobody
|
RESO
|
WONT
|
2022-02-25
|
1532323
|
|
Crash in [@ mozilla::net::TLSFilterTransaction::OnReadSegment]
|
Core
|
Networking: HTTP
|
nobody
|
RESO
|
DUPL
|
2023-12-02
|
1545601
|
|
Crash on OSX when unplugging USBC->HDMI/USB adapter to USB camera
|
Core
|
WebRTC: Audio/Video
|
nobody
|
RESO
|
DUPL
|
2019-04-24
|
1556588
|
|
Possible null-dereference in PK11_EnterSlotMonitor
|
NSS
|
Libraries
|
nobody
|
RESO
|
INVA
|
2020-01-09
|
1591323
|
|
crash tab using mousemove in input type password to convert it to text type
|
Core
|
Layout
|
nobody
|
RESO
|
DUPL
|
2019-12-05
|
1799568
|
|
Crash in [@ nsZipArchive::BuildSynthetics]
|
Core
|
Networking: JAR
|
rjesup
|
RESO
|
INCO
|
2024-02-10
|
1840160
|
|
Crash in [@ mozilla::net::HttpChannelParent::ContinueVerification]
|
Core
|
Networking: HTTP
|
rjesup
|
RESO
|
FIXE
|
2023-10-12
|
1620917
|
|
Crash in [@ mozilla::dom::quota::QuotaObject::EnableQuotaCheck]
|
Core
|
Storage: IndexedDB
|
simon.giesecke
|
RESO
|
FIXE
|
2020-03-30
|
1685923
|
|
Crash in [@ mozilla::net::nsHttpTransaction::Finish0RTT] and [@ mozilla::net::nsHttpTransaction::ReadSegments]
|
Core
|
Networking: HTTP
|
valentin.gosu
|
RESO
|
DUPL
|
2021-02-17
|
1849518
|
|
crash at null [@ nsZipHandle::findDataStart]
|
Core
|
Networking: JAR
|
valentin.gosu
|
RESO
|
FIXE
|
2023-09-14
|
1671527
|
|
crash near null in [@ nsInlineFrame::ReflowFrames]
|
Core
|
Layout: Columns
|
aethanyc
|
RESO
|
FIXE
|
2021-07-29
|
1607051
|
|
crash near null in [@ mozilla::dom::BrowsingContext::Get]
|
Core
|
Audio/Video: Playbac
|
alwu
|
RESO
|
FIXE
|
2020-03-11
|
1341319
|
|
Crash [@nsStyleBorder::Destroy]
|
Core
|
Layout
|
cam
|
RESO
|
DUPL
|
2018-04-03
|
1507961
|
|
ASan: null pointer dereference in mozilla::DOMSVGLength::SetValueInSpecifiedUnits
|
Core
|
SVG
|
cam
|
RESO
|
FIXE
|
2019-04-03
|
1587963
|
|
member call on null pointer of type 'mozilla::dom::WindowGlobalParent' in dom/base/nsFrameLoader.cpp:2582
|
Core
|
DOM: Navigation
|
D.O.Teller+bugspam
|
RESO
|
FIXE
|
2020-02-12
|
1352453
|
|
Crash [@ComputeBorderSpacedRepeatSize] Divide-by-Zero
|
Core
|
Web Painting
|
demo99
|
RESO
|
FIXE
|
2017-09-29
|
1601819
|
|
member call on null pointer in layout/generic/nsGridContainerFrame.cpp:8455
|
Core
|
Layout: Grid
|
dholbert
|
RESO
|
WORK
|
2023-01-17
|
1244338
|
|
crash in nr_ice_ctx_destroy_cb
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
FIXE
|
2016-02-04
|
1370737
|
|
Crash in [@ nsPlainTextSerializer::AppendElementStart]
|
Core
|
DOM: Serializers
|
ehsan.akhgari
|
RESO
|
FIXE
|
2017-06-14
|
1402999
|
|
crash near null in [@ mozilla::a11y::DocAccessible::GetAccessibleOrContainer]
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
FIXE
|
2018-03-08
|
1606485
|
|
crash near null in [@ mozilla::ReflowInput::InitConstraints]
|
Core
|
Layout: Grid
|
emcdonough
|
RESO
|
FIXE
|
2020-01-14
|
1818799
|
|
crash at null in [@ nsRefreshDriver::ScheduleViewManagerFlush]
|
Core
|
Layout
|
emilio
|
RESO
|
DUPL
|
2024-01-28
|
1685145
|
|
attempting to call malloc_usable_size() for pointer which is not owned
|
Core
|
Graphics: WebRender
|
gwatson
|
RESO
|
FIXE
|
2024-05-30
|
1286984
|
|
NULL_POINTER_WRITE_AVRF_c0000005_xul.dll!mozilla::WebGLTexture::CopyTexImage2D
|
Core
|
Graphics: CanvasWebG
|
jgilbert
|
RESO
|
WORK
|
2021-02-22
|
1504918
|
|
null pointer derefernce in mozilla::TextNodeCorrespondenceRecorder::TraverseAndRecord(class nsIFrame *)
|
Core
|
SVG
|
jwatt
|
RESO
|
FIXE
|
2018-12-15
|
1610375
|
|
crash at null [@ mozilla::WebMContainerParser::ParseStartAndEndTimestamps]
|
Core
|
Audio/Video: Playbac
|
jya-moz
|
RESO
|
FIXE
|
2020-03-18
|
1506329
|
|
crash in [@ js::jit::JitcodeGlobalTable::lookupForSamplerInfallible ] while scrolling on msn.com and profiler enabled
|
Core
|
JavaScript Engine: J
|
kvijayan
|
RESO
|
FIXE
|
2020-03-16
|
1422226
|
|
crash near null in [@ mozilla::SVGGeometryFrame::GetCanvasTM]
|
Core
|
SVG
|
longsonr
|
RESO
|
FIXE
|
2018-05-13
|
1678947
|
|
[Layout] [Generic] SEGV on unknown address 0x000000000058 HasAnyStateBits
|
Core
|
SVG
|
longsonr
|
RESO
|
FIXE
|
2024-05-30
|
1348976
|
|
Crash near null [@ HasWrapperFlag | mozilla::dom::OffscreenCanvasBinding::transferToImageBitmap]
|
Core
|
Graphics: CanvasWebG
|
lsalzman
|
RESO
|
FIXE
|
2017-10-13
|
1361052
|
|
Near-Null Crash @ [mozilla::EditorBase::DeleteSelectionAndPrepareToCreateNode]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2021-02-25
|
1364133
|
|
Crash [@ mozilla::HTMLEditor::SetInlinePropertyOnTextNode]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2017-10-12
|
1605741
|
|
crash near null in [@ mozilla::HTMLEditor::NodeIsBlockStatic]
|
Core
|
DOM: Editor
|
masayuki
|
RESO
|
FIXE
|
2020-11-10
|
1346454
|
|
Null deref [@ nsContainerFrame::RenumberFrameAndDescendants]
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2019-06-06
|
1246241
|
|
[e10s] crash in mozilla::dom::quota::QuotaManager::GetQuotaObject
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
WONT
|
2022-06-01
|
1263519
|
|
crashes in mfksproxy.dll@0x15d2c (mfksproxy.dll!DumpDSMediaType)
|
Core
|
WebRTC: Audio/Video
|
nobody
|
RESO
|
WONT
|
2018-10-01
|
1278305
|
|
NULL deref crash [@ gfxContext::ChangeTransform]
|
Core
|
Graphics: Layers
|
nobody
|
RESO
|
WORK
|
2017-10-12
|
1335023
|
|
Crash in ID2D1Effect::SetInputEffect, called from gfx::FilterNodePremultiplyAdapterD2D1
|
Core
|
Graphics
|
nobody
|
RESO
|
WORK
|
2020-09-10
|
1336600
|
|
[harfbuzz] reference binding to null pointer of type 'const hb_ot_map_t::lookup_map_t' [@hb_ot_map_t::get_stage_lookups]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2017-10-26
|
1344097
|
|
Crash [@nsCOMPtr] | mozilla::CSSEditUtils::CreateCSSPropertyTxn
|
Core
|
DOM: Editor
|
nobody
|
RESO
|
WORK
|
2017-10-20
|
1379542
|
|
ASAN: null pointer deref in HasWrapperFlag()
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
WORK
|
2021-06-29
|
1381118
|
|
Null deref crash [@ GetStateBits]
|
Core
|
Layout
|
nobody
|
RESO
|
WORK
|
2021-07-05
|
1394521
|
|
crash at null in [@ UnoptimizableCCNode]
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
DUPL
|
2020-08-08
|
1402364
|
|
crash near null in [@ mozilla::IMEStateManager::SetIMEState]
|
Core
|
DOM: Events
|
nobody
|
RESO
|
WORK
|
2023-02-23
|
1415197
|
|
Crash near null [@ nsDocumentViewer::Show]
|
Core
|
Layout
|
nobody
|
RESO
|
WORK
|
2020-01-09
|
1460615
|
|
Crash in nsStyleTable::CalcDifference const
|
Core
|
CSS Parsing and Comp
|
nobody
|
RESO
|
WONT
|
2018-11-19
|
1495244
|
|
Crash in icu_62::DecimalFormat::setGroupingUsed
|
Core
|
JavaScript: Internat
|
nobody
|
RESO
|
WORK
|
2021-06-15
|
1525455
|
|
crash near null in [@ mozilla::a11y::DocAccessibleParent::ParentDoc]
|
Core
|
Disability Access AP
|
nobody
|
RESO
|
WORK
|
2020-07-16
|
1549546
|
|
crash near null [@ GetBoolFlag | @ nsAccessibilityService::CreateAccessible]
|
Core
|
Disability Access AP
|
nobody
|
RESO
|
WORK
|
2022-04-29
|
1571577
|
|
Invalid write crashes Firefox when clicking inside reCAPTCHA iframe
|
Core
|
DOM: Navigation
|
nobody
|
RESO
|
WORK
|
2020-03-06
|
1573216
|
|
crash near null in [@ nsLineLayout::NewPerFrameData]
|
Core
|
Layout: Columns
|
nobody
|
RESO
|
DUPL
|
2019-08-26
|
1605533
|
|
member call on null pointer of type 'mozilla::dom::BrowsingContext' in dom/ipc/ContentParent.cpp:5794
|
Core
|
DOM: Content Process
|
nobody
|
RESO
|
DUPL
|
2020-02-28
|
1736222
|
|
usrsctp: Crash in [@ memcpy | uiomove]
|
Core
|
WebRTC: Networking
|
nobody
|
RESO
|
WORK
|
Mon 17:40
|
1748021
|
|
Intermittent netwerk/test/unit/test_websocket_with_h3_active.js | application crashed [@ RustMozCrash]
|
Core
|
Networking
|
nobody
|
RESO
|
INCO
|
2023-05-04
|
1399739
|
|
crash near null in [@ ResetAutoDirection]
|
Core
|
DOM: Core & HTML
|
smaug
|
RESO
|
WORK
|
2021-02-23
|
1614210
|
|
member call on null pointer of type 'mozilla::widget::nsWaylandDisplay' in widget/gtk/WaylandDMABufSurface.cpp:229
|
Core
|
Graphics: Layers
|
stransky
|
RESO
|
FIXE
|
2020-02-13
|
1526717
|
|
Invalid write decoding crafted PNG crashes tab
|
Core
|
Graphics: ImageLib
|
tnikkel
|
RESO
|
FIXE
|
2019-03-19
|
1761085
|
|
Intermittent SUMMARY: AddressSanitizer: access-violation /builds/worker/checkouts/gecko/extensions/spellcheck/hunspell/glue/RemoteSpellCheckEngineChild.cpp:46 in mozilla::RemoteSpellcheckEngineChild::SetCurrentDictionaryFromList
|
Core
|
Spelling checker
|
dminor
|
RESO
|
FIXE
|
2022-03-29
|
933825
|
|
IPC: crash with PContentPermissionRequest::Msg_prompt [@nsContentPermissionRequestProxy::GetPrincipal]
|
Core
|
DOM: Content Process
|
nobody
|
RESO
|
INCO
|
2021-06-25
|
1338864
|
|
ASAN: null pointer deref in in ShiftData<nsTArrayInfallibleAllocator> (nsTArray-inl.h:260)
|
Core
|
Storage: IndexedDB
|
nobody
|
RESO
|
INCO
|
2020-03-03
|
1469588
|
|
Intermittent GECKO(2508) | SUMMARY: AddressSanitizer: access-violation z:\build\build\src\xpcom\threads\PerformanceCounter.cpp:58 in snappy::ByteArraySource::Available(void)const
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
INCO
|
2019-03-13
|
1510538
|
|
Intermittent GECKO(1588) | SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/dom/base/nsINode.h:1933:12 in GetExistingSlots
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
DUPL
|
2019-03-13
|
1331295
|
|
crash near null [@nsNullPrincipal::CreateWithInheritedAttributes]
|
Core
|
Security: CAPS
|
amarchesini
|
RESO
|
FIXE
|
2017-06-19
|
1799198
|
|
crash at null in [@ Gecko_AddRefURLExtraDataArbitraryThread] from a worker
|
Core
|
CSS Parsing and Comp
|
aosmond
|
RESO
|
FIXE
|
2022-11-09
|
1324815
|
|
Crash in mozilla::dom::HTMLCanvasElement::SetFrameCapture
|
Core
|
WebRTC: Audio/Video
|
apehrson
|
RESO
|
DUPL
|
2016-12-28
|
1151361
|
|
37.0.1 crashes on startup during gfxWindowsPlatform::InitD3D11Devices() when creating WARP device
|
Core
|
Graphics
|
bas
|
RESO
|
FIXE
|
2015-04-20
|
1234458
|
|
Cache API crash by NULL pointer write in CacheChild::ExecuteOp()
|
Core
|
DOM: Core & HTML
|
ben
|
RESO
|
FIXE
|
2019-03-13
|
1343937
|
|
Crash [@HasFlag in nsWrapperCache.h]
|
Core
|
Layout
|
bholley
|
RESO
|
FIXE
|
2017-03-15
|
1252414
|
|
handle lost context for webgl2 ClearBufferXXX function
|
Core
|
Graphics: CanvasWebG
|
bignose1007+bugzilla
|
RESO
|
FIXE
|
2016-04-08
|
1545086
|
|
Crash when the start function is added to the table in webassembly
|
Core
|
JavaScript: WebAssem
|
bugzilla
|
RESO
|
FIXE
|
2019-04-26
|
1343886
|
|
Crash [@nsTextControlFrame::EnsureEditorInitialized]
|
Core
|
Layout: Form Control
|
bzbarsky
|
RESO
|
FIXE
|
2017-03-09
|
1344210
|
|
Crash [@nsStyleBorder::CalcDifference]
|
Core
|
Layout
|
cam
|
RESO
|
FIXE
|
2017-10-11
|
1356601
|
|
Crash with ::first-line, CSS variables and CSS animations
|
Core
|
CSS Parsing and Comp
|
cam
|
RESO
|
FIXE
|
2017-05-18
|
1377256
|
|
crash at null [@ mozilla::HTMLEditor::DeleteRefToAnonymousNode]
|
Core
|
DOM: Core & HTML
|
cam
|
RESO
|
FIXE
|
2019-03-13
|
819513
|
|
Crashes due to null media() during PeerCOnnection shutdown
|
Core
|
WebRTC
|
cdiehl
|
RESO
|
DUPL
|
2015-06-17
|
1354197
|
|
WebGL EXCEPTION_ACCESS_VIOLATION_READ in sh::CollectVariables::visitDeclaration
|
Core
|
Graphics: CanvasWebG
|
cleu
|
RESO
|
FIXE
|
2017-10-13
|
1330484
|
|
crash near NULL [mozilla::a11y::NotificationController::WillRefresh]
|
Core
|
Disability Access AP
|
davidp99
|
RESO
|
FIXE
|
2017-05-26
|
1167782
|
|
crash in nsHTMLCSSStyleSheet::RulesMatching(PseudoElementRuleProcessorData*)
|
Core
|
Layout
|
dholbert
|
RESO
|
FIXE
|
2015-06-19
|
1881375
|
|
crash near null in [@ nsIFrame::BuildDisplayListForChild]
|
Core
|
Layout
|
dholbert
|
RESO
|
DUPL
|
2024-04-21
|
858034
|
|
navigator.getDeviceStorage('') crashes on platforms device storage isn't supported on
|
Core
|
DOM: Device Interfac
|
dhylands
|
RESO
|
FIXE
|
2013-04-08
|
1341693
|
|
Crash [@mozilla::dom::WindowBinding::get_customElements]
|
Core
|
DOM: Core & HTML
|
echen
|
RESO
|
FIXE
|
2021-09-13
|
1072817
|
|
Crash with Proxy.revocable
|
Core
|
JavaScript Engine
|
efaustbmo
|
RESO
|
FIXE
|
2014-10-23
|
1339930
|
|
Crash in mozilla::dom::AudioChannelService::GetOrCreateWindowData
|
Core
|
DOM: Core & HTML
|
ehsan.akhgari
|
RESO
|
FIXE
|
2019-03-13
|
1330765
|
|
crash near null [@mozilla::a11y::DocManager::RemoveListeners]
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
FIXE
|
2017-09-12
|
1400628
|
|
crash near null in [@ mozilla::a11y::HTMLSelectListAccessible::IsAcceptableChild]
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
FIXE
|
2017-10-05
|
1502061
|
|
Crash in mozilla::a11y::RootAccessible::ProcessDOMEvent
|
Core
|
Disability Access AP
|
eitan
|
RESO
|
FIXE
|
2019-01-09
|
1457985
|
|
Crash near null [@ nsStyleContentData::nsStyleContentData]
|
Core
|
CSS Parsing and Comp
|
emilio
|
RESO
|
FIXE
|
2018-05-01
|
1187545
|
|
AddressSanitizer: SEGV on unknown address PL_HashTableLookupConst
|
NSS
|
Tools
|
franziskuskiefer
|
RESO
|
FIXE
|
2020-02-28
|
1260046
|
|
Remotely-triggered crash due to insufficient validation of ECDH key material
|
NSS
|
Libraries
|
franziskuskiefer
|
RESO
|
FIXE
|
2023-02-07
|
1309578
|
|
Invalid memory read in PR_FindSymbol (prlink.c)
|
NSS
|
Tools
|
franziskuskiefer
|
RESO
|
FIXE
|
2019-03-24
|
1339722
|
|
Crash in nsGlobalWindow::DispatchDOMWindowCreated
|
Core
|
DOM: Core & HTML
|
freesamael
|
RESO
|
FIXE
|
2019-03-13
|
830063
|
|
Browser crashed on looping when jit is on and table length specified externally
|
Core
|
JavaScript Engine
|
general
|
RESO
|
WORK
|
2024-05-30
|
1308090
|
|
Out of bounds read/null ptr dereference when combining a data URI f or a video element injected into the about:feeds context, and createImageBitmap for that video element.
|
Core
|
Graphics: Canvas2D
|
gijskruitbosch+bugs
|
RESO
|
FIXE
|
2024-05-30
|
1323837
|
|
Crash at null [@mozilla::gfx::DrawTargetD2D1::FinalizeDrawing]
|
Core
|
Graphics: Canvas2D
|
howareyou322
|
RESO
|
FIXE
|
2017-01-15
|
1336836
|
|
NULL deref at nsNCRFallbackEncoderWrapper::Encode during XPCOM shutdown after XSLT processing
|
Core
|
Internationalization
|
hsivonen
|
RESO
|
FIXE
|
2024-05-30
|
1340571
|
|
Crash [@nsCSSFrameConstructor::RecreateFramesForContent]
|
Core
|
Layout
|
jkratzer
|
RESO
|
FIXE
|
2018-06-05
|
1894623
|
|
Null-deref in WasmIonCompile.cpp:5009
|
Core
|
JavaScript: WebAssem
|
jpages
|
RESO
|
FIXE
|
2024-05-13
|
1800731
|
|
crash near null in [@ _$LT$servo_arc..RawOffsetArc$LT$T$GT$$u20$as$u20$core..ops..deref..Deref$GT$::deref]
|
Core
|
Disability Access AP
|
jteh
|
RESO
|
FIXE
|
2022-12-13
|
1800780
|
|
crash near null in [@ mozilla::a11y::TableAccessible::IsProbablyLayoutTable]
|
Core
|
Disability Access AP
|
jteh
|
RESO
|
FIXE
|
2022-11-19
|
1254731
|
|
Crash [@ convertTimeToDate] due to a bug in libstagefright.
|
Core
|
Audio/Video: Playbac
|
jya-moz
|
RESO
|
FIXE
|
2016-04-06
|
1325707
|
|
Crash in opus_packet_get_samples_per_frame
|
Core
|
Audio/Video: Playbac
|
jya-moz
|
RESO
|
FIXE
|
2017-02-24
|
1407470
|
|
crash at null in [@ mozilla::nsImageRenderer::Draw]
|
Core
|
Web Painting
|
lsalzman
|
RESO
|
FIXE
|
2017-10-13
|
1418477
|
|
crash at null in [@ unum_setAttribute_60]
|
Core
|
Internationalization
|
m_kato
|
RESO
|
FIXE
|
2017-11-27
|
854448
|
|
OdinMonkey: Crash [@ name]
|
Core
|
JavaScript Engine
|
mail
|
RESO
|
FIXE
|
2013-06-23
|
1282130
|
|
SEGV in icalproperty_new_clone
|
Calendar
|
Internal Components
|
makemyday
|
RESO
|
FIXE
|
2016-10-10
|
1379797
|
|
Write near null [@ GetEditCommandsRemapped]
|
Core
|
Widget: Gtk
|
masayuki
|
RESO
|
FIXE
|
2017-07-27
|
730441
|
|
Crash in nsTreeColumns::RestoreNaturalOrder()
|
Core
|
XUL
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2013-04-23
|
837007
|
|
"ASSERTION: Out of flow frame doesn't have the expected parent" and crash with -moz-column, float
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2015-04-16
|
1316649
|
|
Null-deref in WritingModes::IsVertical with grid layout
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2016-12-22
|
1343606
|
|
Crash near null [@ nsSplittableFrame::GetNextInFlow]
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2019-05-07
|
1357092
|
|
Crash [@mozilla::dom::CanvasRenderingContext2D::BezierTo]
|
Core
|
Graphics: Canvas2D
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2017-05-03
|
1366176
|
|
crash in nsINode::IsEditableInternal
|
Core
|
DOM: Selection
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2017-05-25
|
1416544
|
|
Crash in nsPlaceholderFrame::RenumberFrameAndDescendants
|
Core
|
Layout: Floats
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2017-11-27
|
1458028
|
|
Crash near null in [@ mozilla::DetailsFrame::HasMainSummaryFrame]
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2018-05-08
|
1286664
|
|
mozilla::net::TLSFilterTransaction::WriteSegments crash
|
Core
|
Networking: HTTP
|
mcmanus
|
RESO
|
FIXE
|
2016-07-19
|
792342
|
|
Nightly crashed when trying to display site using custom kernel
|
Firefox for Android
|
General
|
nobody
|
RESO
|
INCO
|
2020-12-21
|
834569
|
|
Crash [@ nsIFrame::GetStyleDisplay] from nsBlockFrame::RenumberListsFor
|
Core
|
Layout: Block and In
|
nobody
|
RESO
|
WORK
|
2014-09-15
|
854086
|
|
WebVTT crash [@mozilla::dom::WebVTTLoadListener::ConvertNodeToCueTextContent]
|
Core
|
Audio/Video
|
nobody
|
RESO
|
WORK
|
2013-09-30
|
897883
|
|
SEGV in nsCellMapColumnIterator::GetNextFrame
|
Core
|
Layout: Tables
|
nobody
|
RESO
|
WORK
|
2022-10-31
|
1091428
|
|
near-null crash backspacing in contenteditable element
|
Core
|
DOM: Editor
|
nobody
|
RESO
|
WORK
|
2015-04-06
|
1145964
|
|
Missing check for malloc failure can cause segfault in WelsDec::AllocPicture (codec/decoder/core/src/pic_queue.cpp:92)
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1158429
|
|
Crash [@ @0x0 | MessageBuilder::WriteTraverseStateOut(TraverseStateOut*, IServerConnection*) ] | [@ MessageBuilder::WriteElement(IUiaNode*, IServerConnection*) ]
|
Core
|
XPCOM
|
nobody
|
RESO
|
WONT
|
2016-11-02
|
1168927
|
|
hang & OOM, with SVG path
|
Core
|
Graphics
|
nobody
|
RESO
|
DUPL
|
2015-05-27
|
1183350
|
|
OpenH264: NULL deref [@WelsRequestMem]
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1183756
|
|
OpenH264: NULL deref [@WelsDec::PrefetchPic]
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1185624
|
|
OpenH264: NULL deref [@OpeWelsDec::CheckRefPicturesComplete]
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1193084
|
|
ASan: crash in port_ArenaRelease
|
NSS
|
Libraries
|
nobody
|
RESO
|
DUPL
|
2016-11-02
|
1197878
|
|
Openh264: NULL crash [@WelsEnc::TagPicture::SetUnref]
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1198940
|
|
OpenH264: null deref [@WelsEnc::CWelsPreProcess::GetCurrentFrameFromOrigList]
|
Core Graveyard
|
Plug-ins
|
nobody
|
RESO
|
FIXE
|
2022-05-16
|
1198960
|
|
ASan: SEGV at NULL in ne_read_block
|
Core
|
Audio/Video: Playbac
|
nobody
|
RESO
|
DUPL
|
2015-08-26
|
1200819
|
|
Null Pointer Derefrencing in libstagefright
|
Core
|
Audio/Video
|
nobody
|
RESO
|
DUPL
|
2016-11-02
|
1216772
|
|
EXC_BAD_ACCESS / KERN_INVALID_ADDRESS when entering data-URI with application/futuresplash and character>=80 on OS X
|
Core Graveyard
|
Plug-ins
|
nobody
|
RESO
|
WORK
|
2022-05-16
|
1227324
|
|
OpenH264: SEGV at NULL in [@WelsDec::WelsInitRefList]
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1227375
|
|
OpenH264: SEGV on unknown address in [@WelsDec::DoErrorConSliceMVCopy]
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1234979
|
|
AddressSanitizer: SEGV /builds/slave/m-cen-l64-asan-000000000000000/build/src/js/src/jsobj.h:122
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2024-05-30
|
1243480
|
|
graphite2: crash around null in [@graphite2::SlotMap::collectGarbage] Pass.cpp:646
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1243832
|
|
graphite2: crash around null in [@graphite2::Slot::setGlyph]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-03-01
|
1249340
|
|
graphite2: SEGV near NULL in [@graphite2::Slot::setAttr]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1249344
|
|
graphite2: crash around null in [@graphite2::SlotMap::collectGarbage] Pass.cpp:654
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1249824
|
|
graphite2: crash around null in [@graphite2::SlotMap::collectGarbage] Pass.cpp:654
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1252133
|
|
graphite2: crash around null in [@graphite2::vm::Machine::run]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1252417
|
|
Graphite2 NULL pointer dereference in Slot::next
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1252421
|
|
Graphite2 NULL pointer dereference in Slot::isDeleted
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1252423
|
|
Graphite2 NULL pointer dereference in Slot::getJustify
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1252736
|
|
graphite2: SEGV near NULL in [@graphite2::Pass::collisionShift]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1252914
|
|
graphite2: SEGV near NULL in [@graphite2::Slot::getAttr]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1252918
|
|
graphite2: SEGV near NULL in [@graphite2::Pass::collisionKern]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1252943
|
|
graphite2: UBSan null pointer passed as argument 1, which is declared to never be null [@graphite2::Pass::readStates]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1253942
|
|
Null Pointer Exception in IndexedDB - mozilla::dom::indexedDB::(anonymous namespace)::DatabaseConnection::GetCachedStatement
|
Core
|
Storage: IndexedDB
|
nobody
|
RESO
|
DUPL
|
2016-03-31
|
1254196
|
|
graphite2: SEGV near NULL in [@graphite2::GlyphCache::GlyphCache]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1254434
|
|
crash with iframe sandbox and about: URLs (nsAString_internal::Assign | nsAString_internal::Assign | mozilla::dom::OriginAttributesDictionary::operator=)
|
Core
|
XPConnect
|
nobody
|
RESO
|
INAC
|
2024-06-07
|
1254883
|
|
graphite2: SEGV near NULL in [@graphite2::CachedFace::runGraphite]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2020-02-16
|
1255081
|
|
graphite2: SEGV near NULL in [@graphite2::Slot::setAttr]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1256496
|
|
hunspell: SEGV near NULL in [@SuggestMgr::leftcommonsubstring]
|
Core
|
Spelling checker
|
nobody
|
RESO
|
FIXE
|
2017-01-05
|
1260296
|
|
graphite2: SEGV near null in [@graphite2::Segment::justify]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1260328
|
|
graphite2: SEGV near null in [@graphite2::Slot::setJustify]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2016-09-22
|
1265667
|
|
Crash [@ js::TraceLoggerThread::getOrCreateEventPayload]
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
WONT
|
2016-04-19
|
1272170
|
|
freetype2: UBSan: null pointer passed as argument 2, which is declared to never be null [@cff_index_get_name] in cffload.c:605
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2017-01-24
|
1272173
|
|
freetype2: UBSan: null pointer passed as argument 1, which is declared to never be null [@ft_mem_realloc] in src/base/ftutil.c:105
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2020-02-16
|
1326500
|
|
Crash in _purecall | PresShell::GetPageSequenceFrame
|
Core
|
Printing: Output
|
nobody
|
RESO
|
WORK
|
2018-02-19
|
1329225
|
|
Null-deref in [@ mozilla::dom::Location::GetPathname]
|
Core
|
Networking
|
nobody
|
RESO
|
DUPL
|
2017-01-16
|
1332143
|
|
crash near null [@GetRootScrollFrame]
|
Core
|
Disability Access AP
|
nobody
|
RESO
|
DUPL
|
2017-09-12
|
1334002
|
|
After the Flood crashes FF51 release browser on OSX
|
Core
|
Graphics: CanvasWebG
|
nobody
|
RESO
|
DUPL
|
2019-08-07
|
1345579
|
|
Crash near null [@ PLDHashTable::Iterator::Iterator | mozilla::CSSVariableDeclarations::AddVariablesToResolver]
|
Core
|
DOM: Animation
|
nobody
|
RESO
|
DUPL
|
2017-04-18
|
1347870
|
|
null pointer dereference and crash when starting Nightly with framboise.py
|
Toolkit
|
Startup and Profile
|
nobody
|
RESO
|
INVA
|
2017-03-23
|
1351993
|
|
Crash in std::map<T>::_Try_emplace<T> called from GPUVideoTextureHost()
|
Core
|
Graphics: Layers
|
nobody
|
RESO
|
DUPL
|
2017-04-09
|
1358795
|
|
crash at null [@DataAtOffset] in gfx/2d/DataSurfaceHelpers.cpp:92
|
Core
|
Graphics
|
nobody
|
RESO
|
DUPL
|
2017-05-03
|
1359554
|
|
Null-deref crash [@ ToABIFunctionType]
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2017-04-26
|
1375066
|
|
Crash @ [mozilla::dom::IDBFactory::CreateForWindow]
|
Core
|
Storage: IndexedDB
|
nobody
|
RESO
|
DUPL
|
2019-10-23
|
1385585
|
|
Crash in mozalloc_abort | abort | webrender::frame::Frame::flatten_item
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
DUPL
|
2017-08-01
|
1385588
|
|
Crash in mozalloc_abort | abort | webrender::texture_cache::TextureCache::allocate_impl
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
DUPL
|
2017-08-01
|
1420764
|
|
crash near null in [@ nsCSSFrameConstructor::ContentRemoved]
|
Core
|
Layout
|
nobody
|
RESO
|
DUPL
|
2017-12-07
|
1421014
|
|
Crash near null [@ GetBoolFlag | nsCSSFrameConstructor::ContentRemoved]
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
DUPL
|
2019-03-13
|
1434448
|
|
Crash in `anonymous namespace'::TelemetryImpl::AsyncFetchTelemetryData
|
Toolkit
|
Telemetry
|
nobody
|
RESO
|
WORK
|
2019-05-13
|
1453601
|
|
Crash in TransformGfxRectToAncestor
|
Core
|
Web Painting
|
nobody
|
RESO
|
WORK
|
2018-06-06
|
1479669
|
|
OpenH264: member access within null pointer of type 'struct SPicture' in codec/decoder/core/src/mv_pred.cpp
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1479670
|
|
OpenH264: member access within null pointer of type 'struct TagSliceHeaders' in codec/decoder/core/src/decoder_core.cpp
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
FIXE
|
2022-09-09
|
1511248
|
|
Crash @ GetExistingSlots /builds/worker/workspace/build/src/dom/base/nsINode.h:1933:12
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
DUPL
|
2019-03-13
|
1512165
|
|
Crash in sogoutsf.ime@0x474a0
|
Core
|
Widget: Win32
|
nobody
|
RESO
|
WORK
|
2019-10-23
|
1533626
|
|
Invalid write crashes the browser after removing a profile containing Zalgo text
|
Toolkit
|
Startup and Profile
|
nobody
|
RESO
|
DUPL
|
2019-04-08
|
1568475
|
|
Intermittent AddressSanitizer: access-violation on unknown address 0x000000000000 (pc 0x7ff9220d0002 bp 0x01b5ad180000 sp 0x006de99cadc0 T0) | AddressSanitizer: access-violation z:\build\build\src\layout\base\nsPresContext.cpp:1974 in nsPresContext::Notif
|
Core
|
Web Painting
|
nobody
|
RESO
|
FIXE
|
2020-02-28
|
1578760
|
|
crash at null in [@ mozilla::BitReader::BitReader]
|
Core
|
Audio/Video: Playbac
|
nobody
|
RESO
|
DUPL
|
2019-09-18
|
1645755
|
|
Intermittent SUMMARY: AddressSanitizer: access-violation z:\build\workspace\obj-build\dist\include\nsThreadUtils.h:574 in mozilla::detail::RunnableFunction<`lambda at z:/build/build/src/dom/media/MediaTrackGraph.cpp:3595:47'>::Run
|
Core
|
WebRTC: Audio/Video
|
nobody
|
RESO
|
INCO
|
2024-06-06
|
1649765
|
|
Crash in [@ mozilla::dom::ScriptLoader::EncodeBytecode]
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
DUPL
|
2020-08-12
|
1651331
|
|
Crash in [@ mozilla::detail::nsTStringRepr<T>::Equals | mozilla::detail::RunnableFunction<T>::Run]
|
Core
|
Audio/Video
|
nobody
|
RESO
|
DUPL
|
2020-07-10
|
1670475
|
|
Invalid write (null pointer dereference) crashes entire browser
|
Core
|
Graphics: CanvasWebG
|
nobody
|
RESO
|
WORK
|
2022-09-08
|
1764216
|
|
crash near null in [@ getStats]
|
Core
|
WebRTC
|
nobody
|
RESO
|
DUPL
|
2022-04-12
|
1804522
|
|
Crash [@ GetClass]
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
DUPL
|
2023-02-13
|
1814557
|
|
crash near null in [@ mozilla::image::Dav1dDecoder::GetPicture]
|
Core
|
Graphics: ImageLib
|
nobody
|
RESO
|
DUPL
|
2023-02-07
|
1818397
|
|
crash near null in [@ mozilla::AutoRangeArray::ExtendAnchorFocusRangeFor]
|
Core
|
DOM: Editor
|
nobody
|
RESO
|
DUPL
|
2023-03-30
|
1872205
|
|
crash in [@ nsFrameIterator::nsFrameIterator]
|
Core
|
DOM: Selection
|
nobody
|
RESO
|
FIXE
|
2023-12-28
|
1388372
|
|
Fix assert and null check properly to account for the pass-through mode in gUM
|
Core
|
WebRTC: Audio/Video
|
padenot
|
RESO
|
FIXE
|
2017-08-15
|
1338277
|
|
NULL deref [@ txExpandedNameMap_base::removeItem]
|
Core
|
XSLT
|
peterv
|
RESO
|
FIXE
|
2018-02-01
|
1224442
|
|
Armor GMP Parent against late Shmem messages from the child
|
Core
|
Audio/Video: GMP
|
rjesup
|
RESO
|
FIXE
|
2015-12-08
|
1342730
|
|
MIPS cpu detection code in libyuv is buggy
|
Core
|
Graphics
|
rjesup
|
RESO
|
FIXE
|
2017-04-11
|
1761667
|
|
Crash in [@ mozilla::detail::MutexImpl::lock | nsZipArchive::GetItem]
|
Core
|
Networking: JAR
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
1097883
|
|
crash calling av.mozCaptureStreamUntilEnded() with audio already playing
|
Core
|
Audio/Video: Playbac
|
roc
|
RESO
|
WORK
|
2015-11-11
|
1122404
|
|
crash w/Personas Plus add-on in nsCOMPtr_base::assign_from_qi(nsQueryInterface, nsID const&) | imgRequestProxy::UnblockOnload()
|
Core
|
Graphics: ImageLib
|
seth.bugzilla
|
RESO
|
WORK
|
2016-07-28
|
1655632
|
|
AddressSanitizer: SEGV /gecko/js/src/vm/JSContext.h:344:37 in realm
|
Core
|
DOM: Service Workers
|
shes050117
|
RESO
|
FIXE
|
2020-10-26
|
849601
|
|
Crash with mutation listener, mutation observer, outerHTML
|
Core
|
DOM: Core & HTML
|
smaug
|
RESO
|
FIXE
|
2019-03-13
|
903106
|
|
ref_fuzz5 crashes Nightly [xul!mozilla::dom::HTMLTableRowElement::GetSection+0x12]
|
Core
|
DOM: Core & HTML
|
smaug
|
RESO
|
FIXE
|
2024-05-30
|
1180389
|
|
Crash [@ nsJSChannel::SetLoadInfo(nsILoadInfo*) ] | Firefox 39.0 crashes immediately by javascript
|
Core
|
DOM: Navigation
|
smaug
|
RESO
|
FIXE
|
2015-07-16
|
1372880
|
|
Crash in [@ mozilla::wr::WebRenderAPI::SetRootPipeline ]
|
Core
|
Graphics: WebRender
|
sotaro.ikeda.g
|
RESO
|
FIXE
|
2021-11-29
|
1516787
|
|
Crash in mozilla::gl::SharedSurface_ANGLEShareHandle::~SharedSurface_ANGLEShareHandle
|
Core
|
Graphics: CanvasWebG
|
sotaro.ikeda.g
|
RESO
|
FIXE
|
2019-08-07
|
1117165
|
|
Crash [@ js::jit::MDefinition::valueHash] or Assertion failure: producer_ != nullptr, at jit/MIR.h
|
Core
|
JavaScript Engine
|
sunfish
|
RESO
|
FIXE
|
2015-02-10
|
1275724
|
|
PNG with empty first IDAT chunk crashes FF process
|
Core
|
Graphics: ImageLib
|
tnikkel
|
RESO
|
FIXE
|
2016-07-24
|
1787684
|
|
Crash in [@ nsView::GetViewFor]
|
Core
|
Layout
|
tnikkel
|
RESO
|
FIXE
|
2022-11-01
|
1814279
|
|
crash at null in [@ nsContentUtils::ObjectPrincipal]
|
Core
|
DOM: Core & HTML
|
tom
|
RESO
|
FIXE
|
2023-02-15
|
1211543
|
|
UBSan: null pointer passed as argument in SECKEY_DestroyPrivateKeyInfo
|
NSS
|
Libraries
|
ttaubert
|
RESO
|
FIXE
|
2023-01-24
|
1348564
|
|
Null deref crash [@ nsSVGUtils::GetBBox]
|
Core
|
SVG
|
u459114
|
RESO
|
FIXE
|
2017-03-27
|
1329849
|
|
crash at null [@DataAtOffset] in gfx/2d/DataSurfaceHelpers.cpp:91
|
Core
|
Graphics
|
vincent.liu1013
|
RESO
|
FIXE
|
2017-10-09
|
1615502
|
|
crash near null in [@ mozilla::a11y::HTMLLIAccessible::HTMLLIAccessible]
|
Core
|
Disability Access AP
|
eitan
|
VERI
|
FIXE
|
2020-06-01
|
1333539
|
|
Null deref crash [@ AddAnimationForProperty]
|
Core
|
DOM: Animation
|
hikezoe.birchill
|
VERI
|
FIXE
|
2017-02-07
|
1798596
|
|
crash near null [@ mozilla::dom::PFileSystemAccessHandleChild::SendClose]
|
Core
|
DOM: File
|
jvarga
|
VERI
|
FIXE
|
2022-11-08
|
1652967
|
|
Crash in [@ nsPrintJob::DoPrint]
|
Core
|
Layout
|
jwatt
|
VERI
|
FIXE
|
2020-08-21
|
1799208
|
|
crash near null in [@ nsIFrame::IsFocusable]
|
Core
|
Disability Access AP
|
nlapre
|
VERI
|
FIXE
|
2022-11-15
|
1147857
|
|
crash in EverySecondTelemetryCallback_s on NSFW video site
|
Core
|
WebRTC: Signaling
|
rjesup
|
VERI
|
FIXE
|
2015-04-09
|
1304437
|
|
Null-deref in ComputeMaskGeometry with mask image property
|
Core
|
Layout
|
u459114
|
VERI
|
FIXE
|
2017-03-12
|
1413741
|
|
Crash - XHR - Null Pointer Write in XMLHttpRequestWorker::Open()
|
Core
|
DOM: Workers
|
amarchesini
|
VERI
|
FIXE
|
2018-08-28
|
1769572
|
|
Firefox crashes if a request is resent from the devtools with a CONNECT method.
|
DevTools
|
Netmonitor
|
hmanilla
|
VERI
|
FIXE
|
2024-05-30
|
1872410
|
|
crash near null in [@ FindLineContaining]
|
Core
|
DOM: Selection
|
masayuki
|
VERI
|
FIXE
|
2024-01-10
|
1604836
|
|
Crash [@ realm]
|
Core
|
DOM: Workers
|
me
|
VERI
|
FIXE
|
2020-12-18
|
1870404
|
|
Assertion failure: mRawPtr != nullptr (You can't dereference a NULL RefPtr with operator->().), at /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:354
|
Core
|
Widget: Win32
|
rkraesig
|
VERI
|
FIXE
|
2023-12-21
|
1192350
|
|
null crash in XMLHttpRequest::Open()
|
Core
|
DOM: Workers
|
amarchesini
|
VERI
|
FIXE
|
2016-07-02
|
789933
|
|
crash in mozilla::gfx::DrawTargetCairo::Stroke
|
Core
|
Graphics: Canvas2D
|
bas
|
VERI
|
FIXE
|
2014-02-26
|
1254853
|
|
IndexedDB - Crash in nsHostObjectProtocolHandler::AddRef()
|
Core
|
Storage: IndexedDB
|
bevistseng
|
VERI
|
FIXE
|
2024-05-30
|
1031542
|
|
Crash on https://admissions.tpa.edu.tw with mozilla::pkix enabled due to CheckKeyUsage null pointer dereference
|
Core
|
Security: PSM
|
brian
|
VERI
|
FIXE
|
2014-07-23
|
798011
|
|
mozMatchesSelectorStub crash with Proxy
|
Core
|
XPConnect
|
bzbarsky
|
VERI
|
FIXE
|
2013-03-18
|
945645
|
|
HTML5 audio with mp4 file instantly crashes browser
|
Core
|
Graphics: Layers
|
chris
|
VERI
|
FIXE
|
2024-05-30
|
1783781
|
|
Crash near null in [@ mozilla::dom::RTCRtpTransceiver::BreakCycles]
|
Core
|
WebRTC
|
docfaraday
|
VERI
|
FIXE
|
2022-08-21
|
1811950
|
|
crash at null in [@ Destroy]
|
Core
|
CSS Parsing and Comp
|
emilio
|
VERI
|
FIXE
|
2024-04-03
|
1812194
|
|
crash near null in [@ nsINode::IsInclusiveDescendantOf]
|
Core
|
DOM: Editor
|
emilio
|
VERI
|
FIXE
|
2023-02-10
|
1243843
|
|
graphite2: crash around null in [@graphite2::Pass::collisionShift]
|
Core
|
Graphics: Text
|
jfkthame
|
VERI
|
FIXE
|
2016-09-22
|
958723
|
|
Crash in WebGLContext::GetFramebufferAttachmentParameter when WEBGL_draw_buffers is enabled
|
Core
|
Graphics: CanvasWebG
|
jgilbert
|
VERI
|
FIXE
|
2014-06-05
|
1808046
|
|
crash near null in [@ mozilla::a11y::TreeMutation::BeforeRemoval]
|
Core
|
Disability Access AP
|
jteh
|
VERI
|
FIXE
|
2023-01-09
|
1810261
|
|
crash at null in [@ mozilla::dom::BodyStream::CancelCallback]
|
Core
|
DOM: Streams
|
krosylight
|
VERI
|
FIXE
|
2023-01-21
|
1222812
|
|
Heap-buffer-overflow in nsSVGPathGeometryFrame::DidSetStyleContext
|
Core
|
CSS Parsing and Comp
|
longsonr
|
VERI
|
FIXE
|
2016-07-02
|
1810260
|
|
layout/base/nsLayoutUtils.cpp:9476:49: runtime error: member call on null pointer of type 'mozilla::dom::SVGViewportElement'
|
Core
|
Layout
|
longsonr
|
VERI
|
FIXE
|
2023-10-07
|
1810619
|
|
crash at null in [@ nsDocShell::ValidateOrigin]
|
Core
|
DOM: Navigation
|
nika
|
VERI
|
FIXE
|
2023-03-29
|
1485698
|
|
Crash [@ JS::Value::setObject] or Assertion failure: metaObject, at jit/IonBuilder.cpp:13181 with ES6 Modules
|
Core
|
JavaScript Engine
|
nobody
|
VERI
|
FIXE
|
2023-12-06
|
1264613
|
|
Crash in js::GetBuiltinClass with web workers, typed arrays, console.log
|
Core
|
JavaScript Engine
|
pipcet
|
VERI
|
FIXE
|
2016-12-12
|
803086
|
|
Crash in mozilla::MediaPipelineTransmit::ProcessVideoChunk
|
Core
|
WebRTC
|
rjesup
|
VERI
|
FIXE
|
2014-05-05
|
837288
|
|
crash in nsBlockFrame::DestroyFrom @ nsIFrame::SetNextSibling
|
Core
|
Layout
|
roc
|
VERI
|
FIXE
|
2013-03-14
|
1818413
|
|
crash near null in [@ mozilla::a11y::HTMLImageMapAccessible::UpdateChildAreas]
|
Core
|
Disability Access AP
|
sefeng
|
VERI
|
FIXE
|
2023-03-09
|
1818836
|
|
crash near null in [@ mozilla::a11y::HTMLImageMapAccessible::GetChildAccessibleFor]
|
Core
|
Disability Access AP
|
sefeng
|
VERI
|
FIXE
|
2023-05-04
|
783923
|
|
Crash [@ js::ParallelArrayObject::toStringBufferImpl] or "Assertion failure: isObject(),"
|
Core
|
JavaScript Engine
|
shu
|
VERI
|
FIXE
|
2013-01-19
|
1836801
|
|
crash near null in [@ mozilla::MergeState::ProcessItemFromNewList]
|
Core
|
Web Painting
|
tnikkel
|
VERI
|
FIXE
|
2024-02-23
|