Thu Jul 18 2024 00:47:49 PDT
  • Keywords: csectype-nullptr

377 bugs found.
ID Type Summary Product Comp Assignee Status Resolution Updated
1397642 Memory corruption issue - Access violation reading address Core DOM: Events nobody UNCO --- 2024-06-15
1417780 shutdown crash in DeliverStatsReportToPCObserver_m() because PeerConnectionCtx::GetInstance() in null Core WebRTC nobody NEW --- 2022-10-11
1431142 Crash in xul!icu_58::DecimalFormat::updatePrecision (likely OOM) Core JavaScript: Internat nobody NEW --- 2022-10-11
1584404 member call on null pointer of type 'MaiAtkObject' in src/accessible/atk/AccessibleWrap.cpp:1354 Core Disability Access AP nobody NEW --- 2022-10-11
1810612 crash near null in [@ mozilla::gfx::DrawTargetOffset::Init] Core Graphics: WebRender nobody NEW --- 2024-03-26
1278975 Crash on RTPPayloadRegistry shutdown Core WebRTC nobody NEW --- 2022-10-11
1293523 Read Access Violation in nsTextBoxFrame::CalculateTitleForWidth Core Graphics nobody NEW --- 2024-05-30
1377134 AV Read crash @ mozilla::dom::TabChild::RecvSizeModeChanged Core DOM: Content Process nobody NEW --- 2022-10-11
1416910 crash at null in [@ nsWebBrowserFind::GetFrameSelection] Core DOM: Selection nobody NEW --- 2023-03-25
1421053 Null deref crash [@ nsFrameList::DestroyFrame] Core Layout nobody NEW --- 2022-10-26
1489764 crash near null [@ InsertChildToChildList] Core DOM: Editor nobody NEW --- 2022-10-26
1625252 [first-letter][bidi] SEGV in GetWritingMode from nsLineLayout::NewPerFrameData() Core Layout: Block and In nobody NEW --- 2023-01-05
1660156 null pointer dereference in nsColorPicker::Open Core Widget: Gtk nobody NEW --- 2024-02-27
1667047 Crash in [@ ssl3_SendClientHello | ssl_BeginClientHandshake | ssl_SecureRecv | ssl_Recv | PSMRecv] NSS Libraries nobody NEW --- 2024-05-08
1394516 crash in [@ nsRange::UnregisterCommonAncestor] Core DOM: Selection nobody NEW --- 2022-10-11
1829910 gecko/dom/canvas/TexUnpackBlob.cpp:615:37: runtime error: applying non-zero offset 1047552 to null pointer Core Graphics: CanvasWebG nobody NEW --- 2023-10-01
1277085 null pointer in nsHTMLEditRules::GetNodesForOperation Core DOM: Editor nobody NEW --- 2024-05-30
1748102 crash near null in [@ mozilla::layers::ClipManager::PopOverrideForASR] Core Graphics: WebRender nobody NEW --- 2024-06-27
1764205 crash near null in [@ nsBlockFrame::ReflowInlineFrame] Core Layout: Block and In nobody NEW --- 2023-06-08
1764863 crash at null in [@ mozilla::RetainedDisplayListBuilder::PreProcessDisplayList] Core Web Painting nobody NEW --- Tue 04:41
1788965 src/xpcom/threads/BlockingResourceBase.cpp:221:26: runtime error: member call on null pointer of type 'mozilla::DeadlockDetector<mozilla::BlockingResourceBase>' Core XPCOM nobody NEW --- 2022-12-01
1795142 gecko/gfx/angle/checkout/src/libANGLE/renderer/d3d/FramebufferD3D.cpp:234:58: runtime error: applying non-zero offset 36 to null pointer Core Graphics: CanvasWebG nobody NEW --- 2023-04-25
1838888 crash at [@ atidxx64.dll | CContext::TID3D11DeviceContext_ClearRenderTargetView_<T> ] Core Graphics nobody NEW --- 2024-05-30
1790526 src/toolkit/components/sessionstore/SessionStoreParent.cpp:281:47: runtime error: member call on null pointer of type 'mozilla::dom::BrowsingContext' Core Storage: localStorag peterv ASSI --- 2024-06-18
1907382 Crash in [@ ZSTD_DCtx_setParameter] Core Networking: HTTP rjesup ASSI --- 14:05:20
1535810 Potential read of uninitialized memory in png_ensure_sequence_number Core Graphics: ImageLib nobody REOP --- 2024-05-30
1329075 Null-deref in [@ HTMLMediaElement::StreamCaptureTrackSource::GetCORSMode] Core Audio/Video: MediaSt apehrson RESO FIXE 2017-01-12
1304948 SEGV near null in [@mozilla::dom::TextTrack::GetTrackElement] Core Audio/Video: Playbac bechen RESO FIXE 2016-12-22
1416879 Crash in mozilla::net::HttpChannelParentListener::OnDataAvailable Core DOM: Service Workers bugmail RESO FIXE 2018-01-18
1402766 stylo: crash near null [@ nsInlineFrame::UpdateStyleOfOwnedAnonBoxesForIBSplit] Core Layout bzbarsky RESO FIXE 2018-01-19
1375050 Crash @[GetExistingSlots /home/worker/workspace/build/src/dom/base/nsINode.h:1905:12] Core DOM: Core & HTML catalin.badea392 RESO FIXE 2019-03-13
1506612 Crash in RtlAcquireSRWLockExclusive | mozilla::detail::MutexImpl::lock | mozilla::net::SpdyConnectTransaction::WebsocketWriteSegments Core Networking: HTTP dd.mozilla RESO FIXE 2018-11-19
1296410 NULL pointer read [@xul!nsLineLayout::ReflowFrame] Core Graphics: Canvas2D demo99 RESO FIXE 2017-10-02
1280215 null pointer crashes in PeerConnectionMedia::EnsureIceGathering_s Core WebRTC: Networking docfaraday RESO FIXE 2017-01-05
1338696 Crash in nr_stun_server_process_request (probably caused by failure in nr_stun_message_create2) Core WebRTC: Networking docfaraday RESO FIXE 2017-02-27
1370723 Crash near null [@ mozilla::a11y::NotificationController::Shutdown] Core Disability Access AP eitan RESO DUPL 2017-09-08
1201704 ASan: NULL deref in PK11_SaveContextAlloc NSS Libraries ekr RESO FIXE 2015-10-07
1458999 Crash in nsXULWindow::SyncAttributesToWidget Core XUL emilio RESO FIXE 2018-05-30
1540074 Crash in nsFirstLetterFrame::CreateContinuationForFloatingParent Core Layout emilio RESO FIXE 2024-05-30
1186716 Stagefright: NULL deref crash in DecodeSPSFromExtraData Core Audio/Video: Playbac giles RESO FIXE 2015-09-16
1189531 Stagefright: NULL deref in call to libc from convertTimeToDate Core Audio/Video: Playbac giles RESO FIXE 2015-11-05
1189974 Stagefright: crash [@stagefright::MPEG4Extractor::parseMetaData] Core Audio/Video: Playbac giles RESO FIXE 2015-09-14
1330190 SEGV near null in [@ Get] Core DOM: Animation hikezoe.birchill RESO FIXE 2017-01-27
1330513 Null-deref in [@ GetUnit] with Animation options composite: add and fill: forwards Core DOM: Animation hikezoe.birchill RESO FIXE 2017-01-27
1395661 stylo: Jump to nullptr from list-style animation Core CSS Parsing and Comp hikezoe.birchill RESO WORK 2020-01-09
1668197 [warp] Crash [@ WarpCacheIRTranspiler::emitMathHypot2NumberResult] Core JavaScript Engine iireland RESO FIXE 2024-04-09
1507135 null pointer / crash in NSS_CMSMessage_IsSigned (can be used to crash Firefox addon installer or Thunderbird SMIME verification) NSS Libraries jc RESO FIXE 2019-03-14
1507174 crash in NSS_CMSContentInfo_GetContentTypeTag NSS Libraries jc RESO FIXE 2019-08-07
1207312 ASan: SEGV at NULL in MozPromise Core Audio/Video: Playbac jya-moz RESO FIXE 2016-07-02
1226707 ASan: NULL deference in [@mozilla::FFmpegDataDecoder<54>::ProcessFlush()] Core Audio/Video: Playbac jya-moz RESO FIXE 2016-08-11
1614530 member call on null pointer of type 'mozilla::net::nsIOService' in netwerk/base/SSLTokensCache.cpp:70 Core Networking: Cache kershaw RESO FIXE 2020-02-12
1313135 crash near NULL in [@SkDraw::drawPath] Core Graphics: Canvas2D kev155266 RESO FIXE 2017-01-05
1401709 Crash near null [@ FloatManager] Core Layout kevin.hsieh RESO FIXE 2017-09-25
1375131 Crash [@nsAutoOwningThread::AssertCurrentThreadOwnsMe] Core DOM: Editor m_kato RESO FIXE 2017-07-11
1381541 Crash near null [@GetBoolFlag | mozilla::HTMLEditor::NodeIsBlockStatic] Core DOM: Editor m_kato RESO FIXE 2017-08-24
1383755 Crash [@hdr] in /home/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:525:32 Core DOM: Editor m_kato RESO FIXE 2017-07-31
1402196 crash near null in [@ nsContentSubtreeIterator::Init] Core DOM: Editor m_kato RESO FIXE 2017-10-25
1402469 crash near null in [@ mozilla::HTMLEditor::GetFirstEditableChild] Core DOM: Editor m_kato RESO FIXE 2017-10-02
1402904 crash near null [@ IsList] Core DOM: Editor m_kato RESO FIXE 2017-10-11
1457136 Crash in nsTArray_base<T>::SwapArrayElements<T> | MergeState::MergeState Core Web Painting matt.woodrow RESO FIXE 2018-05-30
1605530 member call on null pointer of type 'mozilla::dom::BrowsingContext' in uriloader/exthandler/ExternalHelperAppParent.cpp:83 Firefox File Handling matt.woodrow RESO DUPL 2020-02-28
1453670 SEGV in IncrementPaintCount Core Web Painting mikokm RESO WORK 2024-05-30
1181734 Stagefright: crash [@stagefright::MPEG4Extractor::parseTrackHeader] Core Audio/Video: Playbac mozbugz RESO FIXE 2015-10-22
1186721 Stagefright: crash [@stagefright::SampleTable::setTimeToSampleParams] Core Audio/Video: Playbac mozbugz RESO FIXE 2015-09-13
1187067 Stagefright: NULL deref [@stagefright::MPEG4Extractor::parseChunk] Core Audio/Video: Playbac mozbugz RESO FIXE 2016-11-02
1237848 libvpx: NULL crash [@vp9_lookahead_pop] Core Audio/Video: Playbac mozbugz RESO FIXE 2016-04-13
1509585 Crash in mozilla::dom::WorkerPrivate::Notify Core DOM: Workers mrbkap RESO FIXE 2019-03-31
1191180 "Assertion failure: mCertificate" in mozilla::PeerConnectionImpl::GetFingerprint Core WebRTC: Networking mt RESO FIXE 2015-08-08
1515342 Empty or malformed p256-ECDH public keys from project Wycheproof cause segfault NSS Libraries mt RESO FIXE 2020-06-05
1364778 crash near null in [@ aaa_walk_convex_edges] Core Graphics nobody RESO DUPL 2017-05-16
1452704 crash near null in [@ HandleValueChanged] Core DOM: Editor nobody RESO DUPL 2018-05-15
1612573 crash near null in [@ mozilla::dom::ExternalHelperAppParent::Init] Core DOM: Navigation nobody RESO DUPL 2020-02-14
1127697 Crash [@ mozilla::dom::HTMLMediaElement::EndSrcMediaStreamPlayback()] Core Web Audio padenot RESO WORK 2015-11-06
1335029 Crash in mozilla::MediaStreamGraphImpl::ApplyAudioContextOperationImpl Core Audio/Video: MediaSt padenot RESO FIXE 2017-09-05
1343550 Crash near null [@ mozilla::dom::AudioNode::AudioNode] Core Web Audio padenot RESO FIXE 2017-04-01
1813063 crash at null in [@ Length] Core Audio/Video: Playbac padenot RESO MOVE 2023-02-24
1319566 Crash in nsTArray_Impl<T>::DestructRange | nsTArray_Impl<T>::RemoveElementsAt | mozilla::MediaEngineSource::Deallocate Core WebRTC: Audio/Video rjesup RESO FIXE 2020-07-21
1334840 We can Reconfigure the send codec before we create the SendStream Core WebRTC rjesup RESO FIXE 2017-02-03
1322286 Crash near null [@nsSVGMaskFrame::GetMaskForMaskedFrame] Core SVG u459114 RESO FIXE 2017-03-10
1383780 Stylo: Crash [@nsIContent::GetBaseURIForStyleAttr()] in /home/worker/workspace/build/src/dom/base/FragmentOrElement.cpp:465 Core CSS Parsing and Comp xidorn+moz RESO FIXE 2017-08-06
1605536 member call on null pointer of type 'mozilla::dom::BrowsingContext' in dom/ipc/ContentParent.cpp:5927 Core Audio/Video: Playbac alwu RESO FIXE 2020-01-14
1348882 Null deref crash [@ nsStringRepr | mozilla::dom::FetchBody<mozilla::dom::Request>::ContinueConsumeBody] Core DOM: Core & HTML amarchesini RESO FIXE 2017-10-12
1819493 heap-buffer-overflow in [@ AllocateSolidColorFrame] Core WebRTC: Audio/Video apehrson RESO FIXE 2023-10-17
1383763 Crash [@GetChildAt] in /home/worker/workspace/build/src/dom/base/nsDocumentEncoder.cpp:1868:43 Core DOM: Selection ayg RESO FIXE 2017-10-12
1334244 null pointer dereference in sandbox::InitHeap Core Security: Process Sa bobowencode RESO FIXE 2023-09-24
1402547 crash near null in [@ AddOrAccumulate] Core SVG brian RESO FIXE 2017-10-03
1395591 stylo: Crash near null [@ mozilla::ServoRestyleManager::DoReparentStyleContext] Core CSS Parsing and Comp bzbarsky RESO FIXE 2017-09-01
1340248 Crash [@nsFrame::DidSetStyleContext] Core Layout cam RESO FIXE 2019-05-14
1596245 AddressSanitizer: access-violation z:\build\build\src\dom\webgpu\Device.cpp:27 in mozilla::webgpu::Device::~Device Core Graphics: WebGPU dmalyshau RESO FIXE 2020-02-28
1397881 WebRTC crash: send_stream_impl is null Core WebRTC dminor RESO WORK 2017-11-29
1663051 Check for in list requests before processing them immediately after off thread parsing is finished Core Performance dpalmeiro RESO FIXE 2021-12-27
1535868 Negotiating DTLS without SRTP extension results in random crashes Core WebRTC: Networking drno RESO FIXE 2019-07-01
1446043 Crash [@ GetNextSibling] Core Spelling checker echen RESO DUPL 2018-11-02
1649448 Assertion failure: aGlobal, at /builds/worker/checkouts/gecko/dom/file/Blob.cpp:74 Core DOM: File echuang RESO FIXE 2024-01-04
1341657 Crash [@nsDocShell::InternalLoad] Core DOM: Navigation ehsan.akhgari RESO FIXE 2021-09-13
1396267 crash near null in [@ mozilla::a11y::IDRefsIterator::IDRefsIterator] Core Disability Access AP eitan RESO FIXE 2017-10-05
1587688 crash near null in [@ nsMeterFrame::ReflowBarFrame] Core Layout: Form Control emilio RESO FIXE 2020-07-10
1395635 Crash with JS module Core JavaScript Engine jcoppeard RESO WORK 2017-12-19
1350972 Crash [@InvalidateAllFrames] Core DOM: Core & HTML jdai RESO FIXE 2019-03-13
1362423 Crash @ [NewPerFrameData /home/worker/workspace/build/src/layout/generic/nsLineLayout.cpp:666] Core Layout jfkthame RESO FIXE 2017-05-11
1606507 crash near null in [@ mozilla::MediaEngineTabVideoSource::Draw] Core WebRTC: Audio/Video jib RESO FIXE 2020-01-08
1823330 [WASM] Assertion failure: producer_ != nullptr, js/src/jit/MIR.h:245 Core JavaScript: WebAssem jpages RESO DUPL 2023-10-30
1823384 [WASM][ARM64] SEGV in js::jit::MDefinition::type Core JavaScript: WebAssem jseward RESO DUPL 2023-10-30
1684840 Crash in [@ nsTArray_Impl<T>::AppendElementsInternal<T> | mozilla::net::DocumentLoadListener::AttachStreamFilter] Core Networking: HTTP kershaw RESO FIXE 2021-01-14
1343918 Crash [@nsCOMPtr_base /home/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h] Core DOM: Editor m_kato RESO FIXE 2017-06-23
1345015 Crash [@mozilla::HTMLEditRules::GetPromotedPoint] Core DOM: Editor m_kato RESO FIXE 2017-09-25
1542077 mp_set_ulong and mp_set_int should return errors on bad values NSS Libraries marcus.apb RESO FIXE 2019-08-13
1115055 Crash @ nsEditorEventListener::MouseDown(nsIDOMMouseEvent*) Core DOM: Editor masayuki RESO FIXE 2017-02-02
1315450 Crash in mozilla::EditorEventListener::MouseClick Core DOM: Editor masayuki RESO FIXE 2017-02-13
1578916 crash near null in [@ mozilla::HTMLEditor::InsertBRElementIfHardLineIsEmptyAndEndsWithBlockBoundary] Core DOM: Editor masayuki RESO FIXE 2020-11-10
1381134 Null deref crash [@ GetParentNode] Core Layout MatsPalmgren_bugz RESO FIXE 2017-10-11
1382932 Crash in mozilla::MediaPipelineTransmit::PipelineListener::NewData Core WebRTC mfroman RESO FIXE 2020-08-08
1389793 Crash in mozilla::MediaPipeline::RtpPacketReceived Core WebRTC: Signaling mfroman RESO FIXE 2018-03-29
1396319 Crash in mozilla::MediaPipeline::RtcpPacketReceived Core WebRTC: Signaling na-g RESO FIXE 2018-08-28
1479588 No null-check on mParentContent when creating remote browsers Core DOM: Core & HTML nika RESO FIXE 2019-04-11
1323116 Crash at @ nsACString_internal::Assign | nsACString_internal::Assign | mozilla::gmp::GetContentParentFromDone::Done Core Audio/Video: GMP nobody RESO DUPL 2017-12-03
1329449 [e10s] Crash in mozilla::SingletonThreadHolder::ReleaseUse Core WebRTC: Networking nobody RESO WORK 2018-02-16
1375595 Crash [@GetWritingMode] Core Layout nobody RESO WORK 2017-09-25
1384126 Null deref [@ nsIFrame::Type | nsAccessibilityService::CreateAccessibleByFrameType] Core Disability Access AP nobody RESO WORK 2019-10-15
1399975 Crash in shutdownhang | __psynch_cvwait | <name omitted> | mozilla::ThreadEventQueue<T>::GetEvent Core DOM: Workers nobody RESO WONT 2018-10-01
1402434 crash near null in [@ mozilla::FrameLayerBuilder::DrawPaintedLayer] Core Web Painting nobody RESO WORK 2022-09-21
1415605 crash near null [@ mozilla::PresShell::FrameNeedsReflow] Core Layout nobody RESO WORK 2020-10-26
1419461 Crash in nsWindow::NativePtr<T>::Detach Core Graveyard Widget: Android nobody RESO WORK 2021-11-04
1448312 crash [@ nsIContent::IsHTMLElement ] Core Layout nobody RESO INCO 2018-12-27
1461180 Crash in nsFont::CalcDifference Core CSS Parsing and Comp nobody RESO INCO 2024-02-10
1481891 null pointer dereference and segfault on startup with crafted omni.ja Core XPConnect nobody RESO WORK 2021-07-19
1490106 [libFuzzer] Null-deref crash [@ mozilla::gfx::RecordedSnapshot::PlayEvent] Core Graphics: WebRender nobody RESO INCO 2023-02-28
1490157 [libFuzzer] Null-deref crash [@ mozilla::gfx::InlineTranslator::TranslateRecording] Core Graphics: WebRender nobody RESO INCO 2023-02-28
1490418 [libFuzzer] Null-deref crash [@ mozilla::gfx::InlineTranslator::TranslateRecording] Core Graphics: WebRender nobody RESO INCO 2023-02-28
1490423 [libFuzzer] Null-deref crash [@ mozilla::gfx::RecordedFill::PlayEvent | mozilla::gfx::InlineTranslator::TranslateRecording] Core Graphics: WebRender nobody RESO INCO 2023-02-28
1495646 Intermittent SUMMARY: AddressSanitizer: access-violation z:\build\build\src\mozglue\misc\TimeStamp_windows.cpp:307 in mozilla::TimeStampValue::CheckQPC Core WebVR nobody RESO WONT 2022-02-25
1532323 Crash in [@ mozilla::net::TLSFilterTransaction::OnReadSegment] Core Networking: HTTP nobody RESO DUPL 2023-12-02
1545601 Crash on OSX when unplugging USBC->HDMI/USB adapter to USB camera Core WebRTC: Audio/Video nobody RESO DUPL 2019-04-24
1556588 Possible null-dereference in PK11_EnterSlotMonitor NSS Libraries nobody RESO INVA 2020-01-09
1591323 crash tab using mousemove in input type password to convert it to text type Core Layout nobody RESO DUPL 2019-12-05
1799568 Crash in [@ nsZipArchive::BuildSynthetics] Core Networking: JAR rjesup RESO INCO 2024-02-10
1840160 Crash in [@ mozilla::net::HttpChannelParent::ContinueVerification] Core Networking: HTTP rjesup RESO FIXE 2023-10-12
1620917 Crash in [@ mozilla::dom::quota::QuotaObject::EnableQuotaCheck] Core Storage: IndexedDB simon.giesecke RESO FIXE 2020-03-30
1685923 Crash in [@ mozilla::net::nsHttpTransaction::Finish0RTT] and [@ mozilla::net::nsHttpTransaction::ReadSegments] Core Networking: HTTP valentin.gosu RESO DUPL 2021-02-17
1849518 crash at null [@ nsZipHandle::findDataStart] Core Networking: JAR valentin.gosu RESO FIXE 2023-09-14
1671527 crash near null in [@ nsInlineFrame::ReflowFrames] Core Layout: Columns aethanyc RESO FIXE 2021-07-29
1607051 crash near null in [@ mozilla::dom::BrowsingContext::Get] Core Audio/Video: Playbac alwu RESO FIXE 2020-03-11
1341319 Crash [@nsStyleBorder::Destroy] Core Layout cam RESO DUPL 2018-04-03
1507961 ASan: null pointer dereference in mozilla::DOMSVGLength::SetValueInSpecifiedUnits Core SVG cam RESO FIXE 2019-04-03
1587963 member call on null pointer of type 'mozilla::dom::WindowGlobalParent' in dom/base/nsFrameLoader.cpp:2582 Core DOM: Navigation D.O.Teller+bugspam RESO FIXE 2020-02-12
1352453 Crash [@ComputeBorderSpacedRepeatSize] Divide-by-Zero Core Web Painting demo99 RESO FIXE 2017-09-29
1601819 member call on null pointer in layout/generic/nsGridContainerFrame.cpp:8455 Core Layout: Grid dholbert RESO WORK 2023-01-17
1244338 crash in nr_ice_ctx_destroy_cb Core WebRTC: Networking docfaraday RESO FIXE 2016-02-04
1370737 Crash in [@ nsPlainTextSerializer::AppendElementStart] Core DOM: Serializers ehsan.akhgari RESO FIXE 2017-06-14
1402999 crash near null in [@ mozilla::a11y::DocAccessible::GetAccessibleOrContainer] Core Disability Access AP eitan RESO FIXE 2018-03-08
1606485 crash near null in [@ mozilla::ReflowInput::InitConstraints] Core Layout: Grid emcdonough RESO FIXE 2020-01-14
1818799 crash at null in [@ nsRefreshDriver::ScheduleViewManagerFlush] Core Layout emilio RESO DUPL 2024-01-28
1685145 attempting to call malloc_usable_size() for pointer which is not owned Core Graphics: WebRender gwatson RESO FIXE 2024-05-30
1286984 NULL_POINTER_WRITE_AVRF_c0000005_xul.dll!mozilla::WebGLTexture::CopyTexImage2D Core Graphics: CanvasWebG jgilbert RESO WORK 2021-02-22
1504918 null pointer derefernce in mozilla::TextNodeCorrespondenceRecorder::TraverseAndRecord(class nsIFrame *) Core SVG jwatt RESO FIXE 2018-12-15
1610375 crash at null [@ mozilla::WebMContainerParser::ParseStartAndEndTimestamps] Core Audio/Video: Playbac jya-moz RESO FIXE 2020-03-18
1506329 crash in [@ js::jit::JitcodeGlobalTable::lookupForSamplerInfallible ] while scrolling on msn.com and profiler enabled Core JavaScript Engine: J kvijayan RESO FIXE 2020-03-16
1422226 crash near null in [@ mozilla::SVGGeometryFrame::GetCanvasTM] Core SVG longsonr RESO FIXE 2018-05-13
1678947 [Layout] [Generic] SEGV on unknown address 0x000000000058 HasAnyStateBits Core SVG longsonr RESO FIXE 2024-05-30
1348976 Crash near null [@ HasWrapperFlag | mozilla::dom::OffscreenCanvasBinding::transferToImageBitmap] Core Graphics: CanvasWebG lsalzman RESO FIXE 2017-10-13
1361052 Near-Null Crash @ [mozilla::EditorBase::DeleteSelectionAndPrepareToCreateNode] Core DOM: Editor m_kato RESO FIXE 2021-02-25
1364133 Crash [@ mozilla::HTMLEditor::SetInlinePropertyOnTextNode] Core DOM: Editor m_kato RESO FIXE 2017-10-12
1605741 crash near null in [@ mozilla::HTMLEditor::NodeIsBlockStatic] Core DOM: Editor masayuki RESO FIXE 2020-11-10
1346454 Null deref [@ nsContainerFrame::RenumberFrameAndDescendants] Core Layout MatsPalmgren_bugz RESO FIXE 2019-06-06
1246241 [e10s] crash in mozilla::dom::quota::QuotaManager::GetQuotaObject Core DOM: Core & HTML nobody RESO WONT 2022-06-01
1263519 crashes in mfksproxy.dll@0x15d2c (mfksproxy.dll!DumpDSMediaType) Core WebRTC: Audio/Video nobody RESO WONT 2018-10-01
1278305 NULL deref crash [@ gfxContext::ChangeTransform] Core Graphics: Layers nobody RESO WORK 2017-10-12
1335023 Crash in ID2D1Effect::SetInputEffect, called from gfx::FilterNodePremultiplyAdapterD2D1 Core Graphics nobody RESO WORK 2020-09-10
1336600 [harfbuzz] reference binding to null pointer of type 'const hb_ot_map_t::lookup_map_t' [@hb_ot_map_t::get_stage_lookups] Core Graphics: Text nobody RESO FIXE 2017-10-26
1344097 Crash [@nsCOMPtr] | mozilla::CSSEditUtils::CreateCSSPropertyTxn Core DOM: Editor nobody RESO WORK 2017-10-20
1379542 ASAN: null pointer deref in HasWrapperFlag() Core DOM: Core & HTML nobody RESO WORK 2021-06-29
1381118 Null deref crash [@ GetStateBits] Core Layout nobody RESO WORK 2021-07-05
1394521 crash at null in [@ UnoptimizableCCNode] Core DOM: Core & HTML nobody RESO DUPL 2020-08-08
1402364 crash near null in [@ mozilla::IMEStateManager::SetIMEState] Core DOM: Events nobody RESO WORK 2023-02-23
1415197 Crash near null [@ nsDocumentViewer::Show] Core Layout nobody RESO WORK 2020-01-09
1460615 Crash in nsStyleTable::CalcDifference const Core CSS Parsing and Comp nobody RESO WONT 2018-11-19
1495244 Crash in icu_62::DecimalFormat::setGroupingUsed Core JavaScript: Internat nobody RESO WORK 2021-06-15
1525455 crash near null in [@ mozilla::a11y::DocAccessibleParent::ParentDoc] Core Disability Access AP nobody RESO WORK 2020-07-16
1549546 crash near null [@ GetBoolFlag | @ nsAccessibilityService::CreateAccessible] Core Disability Access AP nobody RESO WORK 2022-04-29
1571577 Invalid write crashes Firefox when clicking inside reCAPTCHA iframe Core DOM: Navigation nobody RESO WORK 2020-03-06
1573216 crash near null in [@ nsLineLayout::NewPerFrameData] Core Layout: Columns nobody RESO DUPL 2019-08-26
1605533 member call on null pointer of type 'mozilla::dom::BrowsingContext' in dom/ipc/ContentParent.cpp:5794 Core DOM: Content Process nobody RESO DUPL 2020-02-28
1736222 usrsctp: Crash in [@ memcpy | uiomove] Core WebRTC: Networking nobody RESO WORK Mon 17:40
1748021 Intermittent netwerk/test/unit/test_websocket_with_h3_active.js | application crashed [@ RustMozCrash] Core Networking nobody RESO INCO 2023-05-04
1399739 crash near null in [@ ResetAutoDirection] Core DOM: Core & HTML smaug RESO WORK 2021-02-23
1614210 member call on null pointer of type 'mozilla::widget::nsWaylandDisplay' in widget/gtk/WaylandDMABufSurface.cpp:229 Core Graphics: Layers stransky RESO FIXE 2020-02-13
1526717 Invalid write decoding crafted PNG crashes tab Core Graphics: ImageLib tnikkel RESO FIXE 2019-03-19
1761085 Intermittent SUMMARY: AddressSanitizer: access-violation /builds/worker/checkouts/gecko/extensions/spellcheck/hunspell/glue/RemoteSpellCheckEngineChild.cpp:46 in mozilla::RemoteSpellcheckEngineChild::SetCurrentDictionaryFromList Core Spelling checker dminor RESO FIXE 2022-03-29
933825 IPC: crash with PContentPermissionRequest::Msg_prompt [@nsContentPermissionRequestProxy::GetPrincipal] Core DOM: Content Process nobody RESO INCO 2021-06-25
1338864 ASAN: null pointer deref in in ShiftData<nsTArrayInfallibleAllocator> (nsTArray-inl.h:260) Core Storage: IndexedDB nobody RESO INCO 2020-03-03
1469588 Intermittent GECKO(2508) | SUMMARY: AddressSanitizer: access-violation z:\build\build\src\xpcom\threads\PerformanceCounter.cpp:58 in snappy::ByteArraySource::Available(void)const Core DOM: Core & HTML nobody RESO INCO 2019-03-13
1510538 Intermittent GECKO(1588) | SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/dom/base/nsINode.h:1933:12 in GetExistingSlots Core DOM: Core & HTML nobody RESO DUPL 2019-03-13
1331295 crash near null [@nsNullPrincipal::CreateWithInheritedAttributes] Core Security: CAPS amarchesini RESO FIXE 2017-06-19
1799198 crash at null in [@ Gecko_AddRefURLExtraDataArbitraryThread] from a worker Core CSS Parsing and Comp aosmond RESO FIXE 2022-11-09
1324815 Crash in mozilla::dom::HTMLCanvasElement::SetFrameCapture Core WebRTC: Audio/Video apehrson RESO DUPL 2016-12-28
1151361 37.0.1 crashes on startup during gfxWindowsPlatform::InitD3D11Devices() when creating WARP device Core Graphics bas RESO FIXE 2015-04-20
1234458 Cache API crash by NULL pointer write in CacheChild::ExecuteOp() Core DOM: Core & HTML ben RESO FIXE 2019-03-13
1343937 Crash [@HasFlag in nsWrapperCache.h] Core Layout bholley RESO FIXE 2017-03-15
1252414 handle lost context for webgl2 ClearBufferXXX function Core Graphics: CanvasWebG bignose1007+bugzilla RESO FIXE 2016-04-08
1545086 Crash when the start function is added to the table in webassembly Core JavaScript: WebAssem bugzilla RESO FIXE 2019-04-26
1343886 Crash [@nsTextControlFrame::EnsureEditorInitialized] Core Layout: Form Control bzbarsky RESO FIXE 2017-03-09
1344210 Crash [@nsStyleBorder::CalcDifference] Core Layout cam RESO FIXE 2017-10-11
1356601 Crash with ::first-line, CSS variables and CSS animations Core CSS Parsing and Comp cam RESO FIXE 2017-05-18
1377256 crash at null [@ mozilla::HTMLEditor::DeleteRefToAnonymousNode] Core DOM: Core & HTML cam RESO FIXE 2019-03-13
819513 Crashes due to null media() during PeerCOnnection shutdown Core WebRTC cdiehl RESO DUPL 2015-06-17
1354197 WebGL EXCEPTION_ACCESS_VIOLATION_READ in sh::CollectVariables::visitDeclaration Core Graphics: CanvasWebG cleu RESO FIXE 2017-10-13
1330484 crash near NULL [mozilla::a11y::NotificationController::WillRefresh] Core Disability Access AP davidp99 RESO FIXE 2017-05-26
1167782 crash in nsHTMLCSSStyleSheet::RulesMatching(PseudoElementRuleProcessorData*) Core Layout dholbert RESO FIXE 2015-06-19
1881375 crash near null in [@ nsIFrame::BuildDisplayListForChild] Core Layout dholbert RESO DUPL 2024-04-21
858034 navigator.getDeviceStorage('') crashes on platforms device storage isn't supported on Core DOM: Device Interfac dhylands RESO FIXE 2013-04-08
1341693 Crash [@mozilla::dom::WindowBinding::get_customElements] Core DOM: Core & HTML echen RESO FIXE 2021-09-13
1072817 Crash with Proxy.revocable Core JavaScript Engine efaustbmo RESO FIXE 2014-10-23
1339930 Crash in mozilla::dom::AudioChannelService::GetOrCreateWindowData Core DOM: Core & HTML ehsan.akhgari RESO FIXE 2019-03-13
1330765 crash near null [@mozilla::a11y::DocManager::RemoveListeners] Core Disability Access AP eitan RESO FIXE 2017-09-12
1400628 crash near null in [@ mozilla::a11y::HTMLSelectListAccessible::IsAcceptableChild] Core Disability Access AP eitan RESO FIXE 2017-10-05
1502061 Crash in mozilla::a11y::RootAccessible::ProcessDOMEvent Core Disability Access AP eitan RESO FIXE 2019-01-09
1457985 Crash near null [@ nsStyleContentData::nsStyleContentData] Core CSS Parsing and Comp emilio RESO FIXE 2018-05-01
1187545 AddressSanitizer: SEGV on unknown address PL_HashTableLookupConst NSS Tools franziskuskiefer RESO FIXE 2020-02-28
1260046 Remotely-triggered crash due to insufficient validation of ECDH key material NSS Libraries franziskuskiefer RESO FIXE 2023-02-07
1309578 Invalid memory read in PR_FindSymbol (prlink.c) NSS Tools franziskuskiefer RESO FIXE 2019-03-24
1339722 Crash in nsGlobalWindow::DispatchDOMWindowCreated Core DOM: Core & HTML freesamael RESO FIXE 2019-03-13
830063 Browser crashed on looping when jit is on and table length specified externally Core JavaScript Engine general RESO WORK 2024-05-30
1308090 Out of bounds read/null ptr dereference when combining a data URI f or a video element injected into the about:feeds context, and createImageBitmap for that video element. Core Graphics: Canvas2D gijskruitbosch+bugs RESO FIXE 2024-05-30
1323837 Crash at null [@mozilla::gfx::DrawTargetD2D1::FinalizeDrawing] Core Graphics: Canvas2D howareyou322 RESO FIXE 2017-01-15
1336836 NULL deref at nsNCRFallbackEncoderWrapper::Encode during XPCOM shutdown after XSLT processing Core Internationalization hsivonen RESO FIXE 2024-05-30
1340571 Crash [@nsCSSFrameConstructor::RecreateFramesForContent] Core Layout jkratzer RESO FIXE 2018-06-05
1894623 Null-deref in WasmIonCompile.cpp:5009 Core JavaScript: WebAssem jpages RESO FIXE 2024-05-13
1800731 crash near null in [@ _$LT$servo_arc..RawOffsetArc$LT$T$GT$$u20$as$u20$core..ops..deref..Deref$GT$::deref] Core Disability Access AP jteh RESO FIXE 2022-12-13
1800780 crash near null in [@ mozilla::a11y::TableAccessible::IsProbablyLayoutTable] Core Disability Access AP jteh RESO FIXE 2022-11-19
1254731 Crash [@ convertTimeToDate] due to a bug in libstagefright. Core Audio/Video: Playbac jya-moz RESO FIXE 2016-04-06
1325707 Crash in opus_packet_get_samples_per_frame Core Audio/Video: Playbac jya-moz RESO FIXE 2017-02-24
1407470 crash at null in [@ mozilla::nsImageRenderer::Draw] Core Web Painting lsalzman RESO FIXE 2017-10-13
1418477 crash at null in [@ unum_setAttribute_60] Core Internationalization m_kato RESO FIXE 2017-11-27
854448 OdinMonkey: Crash [@ name] Core JavaScript Engine mail RESO FIXE 2013-06-23
1282130 SEGV in icalproperty_new_clone Calendar Internal Components makemyday RESO FIXE 2016-10-10
1379797 Write near null [@ GetEditCommandsRemapped] Core Widget: Gtk masayuki RESO FIXE 2017-07-27
730441 Crash in nsTreeColumns::RestoreNaturalOrder() Core XUL MatsPalmgren_bugz RESO FIXE 2013-04-23
837007 "ASSERTION: Out of flow frame doesn't have the expected parent" and crash with -moz-column, float Core Layout MatsPalmgren_bugz RESO FIXE 2015-04-16
1316649 Null-deref in WritingModes::IsVertical with grid layout Core Layout MatsPalmgren_bugz RESO FIXE 2016-12-22
1343606 Crash near null [@ nsSplittableFrame::GetNextInFlow] Core Layout MatsPalmgren_bugz RESO FIXE 2019-05-07
1357092 Crash [@mozilla::dom::CanvasRenderingContext2D::BezierTo] Core Graphics: Canvas2D MatsPalmgren_bugz RESO FIXE 2017-05-03
1366176 crash in nsINode::IsEditableInternal Core DOM: Selection MatsPalmgren_bugz RESO FIXE 2017-05-25
1416544 Crash in nsPlaceholderFrame::RenumberFrameAndDescendants Core Layout: Floats MatsPalmgren_bugz RESO FIXE 2017-11-27
1458028 Crash near null in [@ mozilla::DetailsFrame::HasMainSummaryFrame] Core Layout MatsPalmgren_bugz RESO FIXE 2018-05-08
1286664 mozilla::net::TLSFilterTransaction::WriteSegments crash Core Networking: HTTP mcmanus RESO FIXE 2016-07-19
792342 Nightly crashed when trying to display site using custom kernel Firefox for Android General nobody RESO INCO 2020-12-21
834569 Crash [@ nsIFrame::GetStyleDisplay] from nsBlockFrame::RenumberListsFor Core Layout: Block and In nobody RESO WORK 2014-09-15
854086 WebVTT crash [@mozilla::dom::WebVTTLoadListener::ConvertNodeToCueTextContent] Core Audio/Video nobody RESO WORK 2013-09-30
897883 SEGV in nsCellMapColumnIterator::GetNextFrame Core Layout: Tables nobody RESO WORK 2022-10-31
1091428 near-null crash backspacing in contenteditable element Core DOM: Editor nobody RESO WORK 2015-04-06
1145964 Missing check for malloc failure can cause segfault in WelsDec::AllocPicture (codec/decoder/core/src/pic_queue.cpp:92) Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1158429 Crash [@ @0x0 | MessageBuilder::WriteTraverseStateOut(TraverseStateOut*, IServerConnection*) ] | [@ MessageBuilder::WriteElement(IUiaNode*, IServerConnection*) ] Core XPCOM nobody RESO WONT 2016-11-02
1168927 hang & OOM, with SVG path Core Graphics nobody RESO DUPL 2015-05-27
1183350 OpenH264: NULL deref [@WelsRequestMem] Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1183756 OpenH264: NULL deref [@WelsDec::PrefetchPic] Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1185624 OpenH264: NULL deref [@OpeWelsDec::CheckRefPicturesComplete] Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1193084 ASan: crash in port_ArenaRelease NSS Libraries nobody RESO DUPL 2016-11-02
1197878 Openh264: NULL crash [@WelsEnc::TagPicture::SetUnref] Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1198940 OpenH264: null deref [@WelsEnc::CWelsPreProcess::GetCurrentFrameFromOrigList] Core Graveyard Plug-ins nobody RESO FIXE 2022-05-16
1198960 ASan: SEGV at NULL in ne_read_block Core Audio/Video: Playbac nobody RESO DUPL 2015-08-26
1200819 Null Pointer Derefrencing in libstagefright Core Audio/Video nobody RESO DUPL 2016-11-02
1216772 EXC_BAD_ACCESS / KERN_INVALID_ADDRESS when entering data-URI with application/futuresplash and character>=80 on OS X Core Graveyard Plug-ins nobody RESO WORK 2022-05-16
1227324 OpenH264: SEGV at NULL in [@WelsDec::WelsInitRefList] Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1227375 OpenH264: SEGV on unknown address in [@WelsDec::DoErrorConSliceMVCopy] Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1234979 AddressSanitizer: SEGV /builds/slave/m-cen-l64-asan-000000000000000/build/src/js/src/jsobj.h:122 Core JavaScript Engine nobody RESO DUPL 2024-05-30
1243480 graphite2: crash around null in [@graphite2::SlotMap::collectGarbage] Pass.cpp:646 Core Graphics: Text nobody RESO FIXE 2016-09-22
1243832 graphite2: crash around null in [@graphite2::Slot::setGlyph] Core Graphics: Text nobody RESO FIXE 2016-03-01
1249340 graphite2: SEGV near NULL in [@graphite2::Slot::setAttr] Core Graphics: Text nobody RESO FIXE 2016-09-22
1249344 graphite2: crash around null in [@graphite2::SlotMap::collectGarbage] Pass.cpp:654 Core Graphics: Text nobody RESO FIXE 2016-09-22
1249824 graphite2: crash around null in [@graphite2::SlotMap::collectGarbage] Pass.cpp:654 Core Graphics: Text nobody RESO FIXE 2016-09-22
1252133 graphite2: crash around null in [@graphite2::vm::Machine::run] Core Graphics: Text nobody RESO FIXE 2016-09-22
1252417 Graphite2 NULL pointer dereference in Slot::next Core Graphics: Text nobody RESO FIXE 2016-09-22
1252421 Graphite2 NULL pointer dereference in Slot::isDeleted Core Graphics: Text nobody RESO FIXE 2016-09-22
1252423 Graphite2 NULL pointer dereference in Slot::getJustify Core Graphics: Text nobody RESO FIXE 2016-09-22
1252736 graphite2: SEGV near NULL in [@graphite2::Pass::collisionShift] Core Graphics: Text nobody RESO FIXE 2016-09-22
1252914 graphite2: SEGV near NULL in [@graphite2::Slot::getAttr] Core Graphics: Text nobody RESO FIXE 2016-09-22
1252918 graphite2: SEGV near NULL in [@graphite2::Pass::collisionKern] Core Graphics: Text nobody RESO FIXE 2016-09-22
1252943 graphite2: UBSan null pointer passed as argument 1, which is declared to never be null [@graphite2::Pass::readStates] Core Graphics: Text nobody RESO FIXE 2016-09-22
1253942 Null Pointer Exception in IndexedDB - mozilla::dom::indexedDB::(anonymous namespace)::DatabaseConnection::GetCachedStatement Core Storage: IndexedDB nobody RESO DUPL 2016-03-31
1254196 graphite2: SEGV near NULL in [@graphite2::GlyphCache::GlyphCache] Core Graphics: Text nobody RESO FIXE 2016-09-22
1254434 crash with iframe sandbox and about: URLs (nsAString_internal::Assign | nsAString_internal::Assign | mozilla::dom::OriginAttributesDictionary::operator=) Core XPConnect nobody RESO INAC 2024-06-07
1254883 graphite2: SEGV near NULL in [@graphite2::CachedFace::runGraphite] Core Graphics: Text nobody RESO FIXE 2020-02-16
1255081 graphite2: SEGV near NULL in [@graphite2::Slot::setAttr] Core Graphics: Text nobody RESO FIXE 2016-09-22
1256496 hunspell: SEGV near NULL in [@SuggestMgr::leftcommonsubstring] Core Spelling checker nobody RESO FIXE 2017-01-05
1260296 graphite2: SEGV near null in [@graphite2::Segment::justify] Core Graphics: Text nobody RESO FIXE 2016-09-22
1260328 graphite2: SEGV near null in [@graphite2::Slot::setJustify] Core Graphics: Text nobody RESO FIXE 2016-09-22
1265667 Crash [@ js::TraceLoggerThread::getOrCreateEventPayload] Core JavaScript Engine nobody RESO WONT 2016-04-19
1272170 freetype2: UBSan: null pointer passed as argument 2, which is declared to never be null [@cff_index_get_name] in cffload.c:605 Core Graphics: Text nobody RESO FIXE 2017-01-24
1272173 freetype2: UBSan: null pointer passed as argument 1, which is declared to never be null [@ft_mem_realloc] in src/base/ftutil.c:105 Core Graphics: Text nobody RESO FIXE 2020-02-16
1326500 Crash in _purecall | PresShell::GetPageSequenceFrame Core Printing: Output nobody RESO WORK 2018-02-19
1329225 Null-deref in [@ mozilla::dom::Location::GetPathname] Core Networking nobody RESO DUPL 2017-01-16
1332143 crash near null [@GetRootScrollFrame] Core Disability Access AP nobody RESO DUPL 2017-09-12
1334002 After the Flood crashes FF51 release browser on OSX Core Graphics: CanvasWebG nobody RESO DUPL 2019-08-07
1345579 Crash near null [@ PLDHashTable::Iterator::Iterator | mozilla::CSSVariableDeclarations::AddVariablesToResolver] Core DOM: Animation nobody RESO DUPL 2017-04-18
1347870 null pointer dereference and crash when starting Nightly with framboise.py Toolkit Startup and Profile nobody RESO INVA 2017-03-23
1351993 Crash in std::map<T>::_Try_emplace<T> called from GPUVideoTextureHost() Core Graphics: Layers nobody RESO DUPL 2017-04-09
1358795 crash at null [@DataAtOffset] in gfx/2d/DataSurfaceHelpers.cpp:92 Core Graphics nobody RESO DUPL 2017-05-03
1359554 Null-deref crash [@ ToABIFunctionType] Core JavaScript Engine nobody RESO DUPL 2017-04-26
1375066 Crash @ [mozilla::dom::IDBFactory::CreateForWindow] Core Storage: IndexedDB nobody RESO DUPL 2019-10-23
1385585 Crash in mozalloc_abort | abort | webrender::frame::Frame::flatten_item Core Graphics: WebRender nobody RESO DUPL 2017-08-01
1385588 Crash in mozalloc_abort | abort | webrender::texture_cache::TextureCache::allocate_impl Core Graphics: WebRender nobody RESO DUPL 2017-08-01
1420764 crash near null in [@ nsCSSFrameConstructor::ContentRemoved] Core Layout nobody RESO DUPL 2017-12-07
1421014 Crash near null [@ GetBoolFlag | nsCSSFrameConstructor::ContentRemoved] Core DOM: Core & HTML nobody RESO DUPL 2019-03-13
1434448 Crash in `anonymous namespace'::TelemetryImpl::AsyncFetchTelemetryData Toolkit Telemetry nobody RESO WORK 2019-05-13
1453601 Crash in TransformGfxRectToAncestor Core Web Painting nobody RESO WORK 2018-06-06
1479669 OpenH264: member access within null pointer of type 'struct SPicture' in codec/decoder/core/src/mv_pred.cpp Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1479670 OpenH264: member access within null pointer of type 'struct TagSliceHeaders' in codec/decoder/core/src/decoder_core.cpp Core Audio/Video: GMP nobody RESO FIXE 2022-09-09
1511248 Crash @ GetExistingSlots /builds/worker/workspace/build/src/dom/base/nsINode.h:1933:12 Core DOM: Core & HTML nobody RESO DUPL 2019-03-13
1512165 Crash in sogoutsf.ime@0x474a0 Core Widget: Win32 nobody RESO WORK 2019-10-23
1533626 Invalid write crashes the browser after removing a profile containing Zalgo text Toolkit Startup and Profile nobody RESO DUPL 2019-04-08
1568475 Intermittent AddressSanitizer: access-violation on unknown address 0x000000000000 (pc 0x7ff9220d0002 bp 0x01b5ad180000 sp 0x006de99cadc0 T0) | AddressSanitizer: access-violation z:\build\build\src\layout\base\nsPresContext.cpp:1974 in nsPresContext::Notif Core Web Painting nobody RESO FIXE 2020-02-28
1578760 crash at null in [@ mozilla::BitReader::BitReader] Core Audio/Video: Playbac nobody RESO DUPL 2019-09-18
1645755 Intermittent SUMMARY: AddressSanitizer: access-violation z:\build\workspace\obj-build\dist\include\nsThreadUtils.h:574 in mozilla::detail::RunnableFunction<`lambda at z:/build/build/src/dom/media/MediaTrackGraph.cpp:3595:47'>::Run Core WebRTC: Audio/Video nobody RESO INCO 2024-06-06
1649765 Crash in [@ mozilla::dom::ScriptLoader::EncodeBytecode] Core DOM: Core & HTML nobody RESO DUPL 2020-08-12
1651331 Crash in [@ mozilla::detail::nsTStringRepr<T>::Equals | mozilla::detail::RunnableFunction<T>::Run] Core Audio/Video nobody RESO DUPL 2020-07-10
1670475 Invalid write (null pointer dereference) crashes entire browser Core Graphics: CanvasWebG nobody RESO WORK 2022-09-08
1764216 crash near null in [@ getStats] Core WebRTC nobody RESO DUPL 2022-04-12
1804522 Crash [@ GetClass] Core DOM: Core & HTML nobody RESO DUPL 2023-02-13
1814557 crash near null in [@ mozilla::image::Dav1dDecoder::GetPicture] Core Graphics: ImageLib nobody RESO DUPL 2023-02-07
1818397 crash near null in [@ mozilla::AutoRangeArray::ExtendAnchorFocusRangeFor] Core DOM: Editor nobody RESO DUPL 2023-03-30
1872205 crash in [@ nsFrameIterator::nsFrameIterator] Core DOM: Selection nobody RESO FIXE 2023-12-28
1388372 Fix assert and null check properly to account for the pass-through mode in gUM Core WebRTC: Audio/Video padenot RESO FIXE 2017-08-15
1338277 NULL deref [@ txExpandedNameMap_base::removeItem] Core XSLT peterv RESO FIXE 2018-02-01
1224442 Armor GMP Parent against late Shmem messages from the child Core Audio/Video: GMP rjesup RESO FIXE 2015-12-08
1342730 MIPS cpu detection code in libyuv is buggy Core Graphics rjesup RESO FIXE 2017-04-11
1761667 Crash in [@ mozilla::detail::MutexImpl::lock | nsZipArchive::GetItem] Core Networking: JAR rjesup RESO FIXE 2022-08-27
1097883 crash calling av.mozCaptureStreamUntilEnded() with audio already playing Core Audio/Video: Playbac roc RESO WORK 2015-11-11
1122404 crash w/Personas Plus add-on in nsCOMPtr_base::assign_from_qi(nsQueryInterface, nsID const&) | imgRequestProxy::UnblockOnload() Core Graphics: ImageLib seth.bugzilla RESO WORK 2016-07-28
1655632 AddressSanitizer: SEGV /gecko/js/src/vm/JSContext.h:344:37 in realm Core DOM: Service Workers shes050117 RESO FIXE 2020-10-26
849601 Crash with mutation listener, mutation observer, outerHTML Core DOM: Core & HTML smaug RESO FIXE 2019-03-13
903106 ref_fuzz5 crashes Nightly [xul!mozilla::dom::HTMLTableRowElement::GetSection+0x12] Core DOM: Core & HTML smaug RESO FIXE 2024-05-30
1180389 Crash [@ nsJSChannel::SetLoadInfo(nsILoadInfo*) ] | Firefox 39.0 crashes immediately by javascript Core DOM: Navigation smaug RESO FIXE 2015-07-16
1372880 Crash in [@ mozilla::wr::WebRenderAPI::SetRootPipeline ] Core Graphics: WebRender sotaro.ikeda.g RESO FIXE 2021-11-29
1516787 Crash in mozilla::gl::SharedSurface_ANGLEShareHandle::~SharedSurface_ANGLEShareHandle Core Graphics: CanvasWebG sotaro.ikeda.g RESO FIXE 2019-08-07
1117165 Crash [@ js::jit::MDefinition::valueHash] or Assertion failure: producer_ != nullptr, at jit/MIR.h Core JavaScript Engine sunfish RESO FIXE 2015-02-10
1275724 PNG with empty first IDAT chunk crashes FF process Core Graphics: ImageLib tnikkel RESO FIXE 2016-07-24
1787684 Crash in [@ nsView::GetViewFor] Core Layout tnikkel RESO FIXE 2022-11-01
1814279 crash at null in [@ nsContentUtils::ObjectPrincipal] Core DOM: Core & HTML tom RESO FIXE 2023-02-15
1211543 UBSan: null pointer passed as argument in SECKEY_DestroyPrivateKeyInfo NSS Libraries ttaubert RESO FIXE 2023-01-24
1348564 Null deref crash [@ nsSVGUtils::GetBBox] Core SVG u459114 RESO FIXE 2017-03-27
1329849 crash at null [@DataAtOffset] in gfx/2d/DataSurfaceHelpers.cpp:91 Core Graphics vincent.liu1013 RESO FIXE 2017-10-09
1615502 crash near null in [@ mozilla::a11y::HTMLLIAccessible::HTMLLIAccessible] Core Disability Access AP eitan VERI FIXE 2020-06-01
1333539 Null deref crash [@ AddAnimationForProperty] Core DOM: Animation hikezoe.birchill VERI FIXE 2017-02-07
1798596 crash near null [@ mozilla::dom::PFileSystemAccessHandleChild::SendClose] Core DOM: File jvarga VERI FIXE 2022-11-08
1652967 Crash in [@ nsPrintJob::DoPrint] Core Layout jwatt VERI FIXE 2020-08-21
1799208 crash near null in [@ nsIFrame::IsFocusable] Core Disability Access AP nlapre VERI FIXE 2022-11-15
1147857 crash in EverySecondTelemetryCallback_s on NSFW video site Core WebRTC: Signaling rjesup VERI FIXE 2015-04-09
1304437 Null-deref in ComputeMaskGeometry with mask image property Core Layout u459114 VERI FIXE 2017-03-12
1413741 Crash - XHR - Null Pointer Write in XMLHttpRequestWorker::Open() Core DOM: Workers amarchesini VERI FIXE 2018-08-28
1769572 Firefox crashes if a request is resent from the devtools with a CONNECT method. DevTools Netmonitor hmanilla VERI FIXE 2024-05-30
1872410 crash near null in [@ FindLineContaining] Core DOM: Selection masayuki VERI FIXE 2024-01-10
1604836 Crash [@ realm] Core DOM: Workers me VERI FIXE 2020-12-18
1870404 Assertion failure: mRawPtr != nullptr (You can't dereference a NULL RefPtr with operator->().), at /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:354 Core Widget: Win32 rkraesig VERI FIXE 2023-12-21
1192350 null crash in XMLHttpRequest::Open() Core DOM: Workers amarchesini VERI FIXE 2016-07-02
789933 crash in mozilla::gfx::DrawTargetCairo::Stroke Core Graphics: Canvas2D bas VERI FIXE 2014-02-26
1254853 IndexedDB - Crash in nsHostObjectProtocolHandler::AddRef() Core Storage: IndexedDB bevistseng VERI FIXE 2024-05-30
1031542 Crash on https://admissions.tpa.edu.tw with mozilla::pkix enabled due to CheckKeyUsage null pointer dereference Core Security: PSM brian VERI FIXE 2014-07-23
798011 mozMatchesSelectorStub crash with Proxy Core XPConnect bzbarsky VERI FIXE 2013-03-18
945645 HTML5 audio with mp4 file instantly crashes browser Core Graphics: Layers chris VERI FIXE 2024-05-30
1783781 Crash near null in [@ mozilla::dom::RTCRtpTransceiver::BreakCycles] Core WebRTC docfaraday VERI FIXE 2022-08-21
1811950 crash at null in [@ Destroy] Core CSS Parsing and Comp emilio VERI FIXE 2024-04-03
1812194 crash near null in [@ nsINode::IsInclusiveDescendantOf] Core DOM: Editor emilio VERI FIXE 2023-02-10
1243843 graphite2: crash around null in [@graphite2::Pass::collisionShift] Core Graphics: Text jfkthame VERI FIXE 2016-09-22
958723 Crash in WebGLContext::GetFramebufferAttachmentParameter when WEBGL_draw_buffers is enabled Core Graphics: CanvasWebG jgilbert VERI FIXE 2014-06-05
1808046 crash near null in [@ mozilla::a11y::TreeMutation::BeforeRemoval] Core Disability Access AP jteh VERI FIXE 2023-01-09
1810261 crash at null in [@ mozilla::dom::BodyStream::CancelCallback] Core DOM: Streams krosylight VERI FIXE 2023-01-21
1222812 Heap-buffer-overflow in nsSVGPathGeometryFrame::DidSetStyleContext Core CSS Parsing and Comp longsonr VERI FIXE 2016-07-02
1810260 layout/base/nsLayoutUtils.cpp:9476:49: runtime error: member call on null pointer of type 'mozilla::dom::SVGViewportElement' Core Layout longsonr VERI FIXE 2023-10-07
1810619 crash at null in [@ nsDocShell::ValidateOrigin] Core DOM: Navigation nika VERI FIXE 2023-03-29
1485698 Crash [@ JS::Value::setObject] or Assertion failure: metaObject, at jit/IonBuilder.cpp:13181 with ES6 Modules Core JavaScript Engine nobody VERI FIXE 2023-12-06
1264613 Crash in js::GetBuiltinClass with web workers, typed arrays, console.log Core JavaScript Engine pipcet VERI FIXE 2016-12-12
803086 Crash in mozilla::MediaPipelineTransmit::ProcessVideoChunk Core WebRTC rjesup VERI FIXE 2014-05-05
837288 crash in nsBlockFrame::DestroyFrom @ nsIFrame::SetNextSibling Core Layout roc VERI FIXE 2013-03-14
1818413 crash near null in [@ mozilla::a11y::HTMLImageMapAccessible::UpdateChildAreas] Core Disability Access AP sefeng VERI FIXE 2023-03-09
1818836 crash near null in [@ mozilla::a11y::HTMLImageMapAccessible::GetChildAccessibleFor] Core Disability Access AP sefeng VERI FIXE 2023-05-04
783923 Crash [@ js::ParallelArrayObject::toStringBufferImpl] or "Assertion failure: isObject()," Core JavaScript Engine shu VERI FIXE 2013-01-19
1836801 crash near null in [@ mozilla::MergeState::ProcessItemFromNewList] Core Web Painting tnikkel VERI FIXE 2024-02-23
377 bugs found.