| 1709499
|
|
ThreadSanitizer: data race [@ StartHandlingUserInput] vs. [@ mozilla::dom::UserActivation::IsHandlingUserInput]
|
Core
|
DOM: Forms
|
echen
|
NEW
|
---
|
2021-05-11
|
| 1417780
|
|
shutdown crash in DeliverStatsReportToPCObserver_m() because PeerConnectionCtx::GetInstance() in null
|
Core
|
WebRTC
|
nobody
|
NEW
|
---
|
2022-10-11
|
| 1712171
|
|
ThreadSanitizer: data race [@ mozilla::AudioBufferAddWithScale_SSE] vs. [@ ???]
|
Core
|
Web Audio
|
nobody
|
NEW
|
---
|
2022-02-22
|
| 1748361
|
|
PR_GetAddrInfoByName: glibc getaddrinfo uses getenv without being protected by NSPR environment lock
|
NSPR
|
NSPR
|
nobody
|
NEW
|
---
|
2022-05-18
|
| 1748363
|
|
When NSPR and Rust libstd are used together, they don't use the same environment lock
|
NSPR
|
NSPR
|
nobody
|
NEW
|
---
|
2022-09-09
|
| 1808236
|
|
Intermittent TSAN socketprocess netwerk/test/unit/test_ech_grease.js | data race in memcpy
|
Core
|
Networking
|
nobody
|
NEW
|
---
|
2023-01-24
|
| 1892040
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/extensions/spellcheck/src/mozPersonalDictionary.cpp:127:27 in mozPersonalDictionarySave::Run() | single tracking bug
|
Core
|
Spelling checker
|
smaug
|
NEW
|
---
|
2024-07-07
|
| 1726898
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/xpcom/ds/nsAtomTable.cpp:105:3 in Destroy
|
Core
|
XPCOM
|
nobody
|
NEW
|
---
|
2024-05-07
|
| 1671997
|
|
nsComponentManagerImpl::SizeOfIncludingThis() reads from many fields without holding locks
|
Core
|
XPCOM
|
nobody
|
NEW
|
---
|
2020-11-29
|
| 1712787
|
|
ThreadSanitizer: data race [@ mozilla::image::BlendAnimationFilter<mozilla::image::SurfaceSink>::WriteBaseFrameRow] vs. [@ webrender::device::gl::TextureUploader::upload]
|
Core
|
Graphics: WebRender
|
nobody
|
NEW
|
---
|
2024-04-01
|
| 1745805
|
|
ThreadSanitizer: data race [@mozilla::gfx::SourceSurfaceSharedData::CloseHandleInternal vs @MakeCurrent]
|
Core
|
Graphics
|
nobody
|
NEW
|
---
|
2024-04-01
|
| 1748366
|
|
PR_SetEnv/setenv/putenv races with non-nspr reads from the environment
|
Core
|
XPCOM
|
nobody
|
NEW
|
---
|
2024-01-10
|
| 1841706
|
|
StaticRefPtr<> can cause UAFs if used with concurrent threads
|
Core
|
XPCOM
|
nobody
|
NEW
|
---
|
2024-06-11
|
| 1881088
|
|
ThreadSanitizer: data race [@ nsThreadManager::ReleaseMainThread] vs. [@ GetMainThread]
|
Core
|
Graphics: ImageLib
|
nobody
|
NEW
|
---
|
2024-03-06
|
| 1891952
|
|
Intermittent SUMMARY: AddressSanitizer: access-violation /builds/worker/fetches/vs/Windows Kits/10/Include/10.0.22621.0/winrt/wrl/client.h:472 in Microsoft::WRL::ComPtr<IUnknown>::As | single tracking bug
|
Core
|
Audio/Video: Playbac
|
nobody
|
NEW
|
---
|
Sun 23:48
|
| 1727454
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/security/nss/lib/ssl/ssl3con.c:13560:20 in ssl3_CipherPrefSetDefault
|
NSS
|
Libraries
|
nobody
|
REOP
|
---
|
2023-04-24
|
| 1738170
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/third_party/rust/rayon-core/src/registry.rs:875:13 in rayon_core::registry::in_worker::h4904f4c9488ff8e1
|
Core
|
CSS Parsing and Comp
|
nobody
|
REOP
|
---
|
2022-04-17
|
| 1647115
|
|
AddressSanitizer: heap-use-after-free [@ runtimeMatches] through [@ js::CancelOffThreadCompressions] with READ of size 8
|
Core
|
JavaScript Engine
|
allstars.chh
|
RESO
|
FIXE
|
2020-12-18
|
| 1649347
|
|
AddressSanitizer: heap-use-after-free /builds/worker/fetches/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/7.4.0/../../../../include/c++/7.4.0/bits/atomic_base.h:514:16 in fetch_add
|
Core
|
DOM: Workers
|
amarchesini
|
RESO
|
FIXE
|
2021-06-11
|
| 1769739
|
|
AddressSanitizer: heap-use-after-free [@ std::list<mozilla::WebGLContext *,std::allocator<mozilla::WebGLContext *> >::_Unlinknode] with WRITE of size 8
|
Core
|
Graphics: CanvasWebG
|
aosmond
|
RESO
|
FIXE
|
2023-01-16
|
| 1786502
|
|
Data race in VideoCaptureModule::DeviceInfo's devicechange callback handling
|
Core
|
WebRTC: Audio/Video
|
apehrson
|
RESO
|
FIXE
|
2023-01-16
|
| 1404656
|
|
Crash in SkRefCntBase::unref
|
Core
|
Graphics
|
bas
|
RESO
|
FIXE
|
2017-10-25
|
| 930874
|
|
TOCTOU, potential use-after-free in libssl's session ticket processing due to lack of lock protecting the sessionTicket field of the sid
|
NSS
|
Libraries
|
brian
|
RESO
|
FIXE
|
2014-03-03
|
| 1651705
|
|
UAF in nsWindow::LayerViewSupport::OnDetach
|
GeckoView
|
General
|
bugzilla
|
RESO
|
FIXE
|
2022-05-06
|
| 1622291
|
|
UAF when destroying cubeb context while device collection is updating
|
Core
|
Audio/Video: cubeb
|
cchang
|
RESO
|
FIXE
|
2020-08-08
|
| 1577937
|
|
Intermittent Tier 2 testing/firefox-ui/tests/functional/safebrowsing/test_warning_pages.py TestSafeBrowsingWarningPages.test_warning_pages | application crashed [@ mozilla::Telemetry::CanRecordExtended()]
|
Toolkit
|
Telemetry
|
chutten
|
RESO
|
FIXE
|
2020-12-18
|
| 1580288
|
|
Crash [@ Length] through [@ mozilla::net::nsHttpTransaction::SetHttpTrailer] due to pointer race
|
Core
|
Networking: HTTP
|
CuveeHsu
|
RESO
|
FIXE
|
2020-06-05
|
| 1604851
|
|
Assertion failure: IsIdle(oldState), at xpcom/ds/PLDHashTable.h:142 with concurrent hashtable access from [@ mozilla::net::nsHttpHandler::BlacklistSpdy]
|
Core
|
Networking
|
CuveeHsu
|
RESO
|
FIXE
|
2020-06-05
|
| 1618158
|
|
PHC Crash in [@ neqo_crypto::agentio::agent_close] with use-after-free
|
Core
|
Networking
|
dd.mozilla
|
RESO
|
FIXE
|
2020-08-08
|
| 1651449
|
|
ThreadSanitizer: data race [@ nssItem_Create] vs. [@ nssItem_Create]
|
Core
|
Security: PSM
|
dkeeler
|
RESO
|
FIXE
|
2021-11-22
|
| 1686138
|
|
ThreadSanitizer: data race [@ PR_CallOnce] vs. [@ PR_CallOnce]
|
NSPR
|
NSPR
|
dkeeler
|
RESO
|
FIXE
|
2021-11-22
|
| 1280443
|
|
Crash in nr_socket_sendto
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
FIXE
|
2017-01-05
|
| 1657739
|
|
ThreadSanitizer: data race [@ webrtc::WebRtcAec_CreateAec] vs [@ EchoSubtraction] on WebRtcAec_FilterFar
|
Core
|
WebRTC: Audio/Video
|
docfaraday
|
RESO
|
FIXE
|
2021-04-04
|
| 1683417
|
|
ThreadSanitizer: data race [@DataChannelConnection::SetSignals] vs. [@ DataChannelConnection::SetReadyState]
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
FIXE
|
2021-09-09
|
| 1542581
|
|
Race condition in google_breakpad::CrashGenerationServer::AddClient leading to UAF write in broker (Sandbox escape / LPE)
|
Toolkit
|
Crash Reporting
|
gsvelto
|
RESO
|
FIXE
|
2024-05-30
|
| 1802690
|
|
Intermittent SUMMARY: AddressSanitizer: access-violation /builds/worker/workspace/obj-build/dist/include/mozilla/dom/Promise.h:407 in mozilla::dom::Promise::MaybeSomething<const JS::Handle<JS::Value> &>
|
Core
|
Internationalization
|
gtatum
|
RESO
|
FIXE
|
2023-07-17
|
| 1567209
|
|
SharedMemoryBasic_mach CleanupForPid is thread-unsafe | Intermittent application crashed [@ std::__1::__tree_balance_after_insert….]
|
Core
|
IPC
|
haftandilian
|
RESO
|
FIXE
|
2020-06-05
|
| 1779729
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/nsTArray.h:575:51 in Hdr
|
Core
|
Panning and Zooming
|
hikezoe.birchill
|
RESO
|
FIXE
|
2023-01-16
|
| 1540759
|
|
AddressSanitizer: heap-use-after-free [@ MOZ_Z_inflate_fast] with READ of size 1 through [@ mozilla::net::nsHTTPCompressConv::OnDataAvailable]
|
Core
|
Networking: HTTP
|
honzab.moz
|
RESO
|
FIXE
|
2023-01-16
|
| 1542153
|
|
Use after free in HTTP compression code / HTML 5 parser
|
Core
|
Networking: HTTP
|
honzab.moz
|
RESO
|
DUPL
|
2023-05-22
|
| 1586845
|
|
DNS resolve callback removal outside lock
|
Core
|
Networking: DNS
|
honzab.moz
|
RESO
|
FIXE
|
2020-06-05
|
| 1608068
|
|
ThreadSanitizer: data race [@ setUnchecked] vs. [@ slotSpan]
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2020-12-18
|
| 1681297
|
|
Intermittent Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/js/src/gc/Marking.cpp:1185:14 in mark<js::jit::JitCode>
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2022-01-24
|
| 1842674
|
|
Potential Double-Free race in gfxCharacterMap refcounting
|
Core
|
Graphics: Text
|
jfkthame
|
RESO
|
FIXE
|
2024-01-03
|
| 1819497
|
|
ThreadSanitizer: data race [@ mozilla::GetExtensionName] vs. [@ mozilla::GetExtensionName]
|
Core
|
Graphics: CanvasWebG
|
jgilbert
|
RESO
|
FIXE
|
2024-04-28
|
| 1293709
|
|
nsWindow::LayerViewSupport's weak reference used on multiple threads
|
Core Graveyard
|
Widget: Android
|
jimnchen+bmo
|
RESO
|
FIXE
|
2021-11-04
|
| 1763625
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/ipc/chromium/src/base/process_util_posix.cc:52:11 in OpenProcessHandle
|
Core
|
IPC
|
jld
|
RESO
|
FIXE
|
2023-10-17
|
| 1848890
|
|
Crash in [@ mozilla::fontlist::FontList::ShmBlock::Memory] on poison values from OffscreenCanvas
|
Core
|
Graphics: Canvas2D
|
jnicol
|
RESO
|
FIXE
|
2024-01-03
|
| 1662507
|
|
Racy access to WebrtcMediaDataEncoder::mEncoder
|
Core
|
WebRTC: Audio/Video
|
jolin
|
RESO
|
FIXE
|
2021-04-04
|
| 1745667
|
|
Crash in [@ PR_Unlock | nssTokenObjectCache_FindObjectsByTemplate | nssToken_FindObjectsByTemplate | nssToken_FindCertificateByIssuerAndSerialNumber | nssTrustDomain_UpdateCachedTokenCerts | PK11_DoPassword]
|
NSS
|
Libraries
|
jschanck
|
RESO
|
FIXE
|
2022-08-27
|
| 1756271
|
|
Crash in nssSlot_IsTokenPresent | nssSlot_GetToken
|
NSS
|
Libraries
|
jschanck
|
RESO
|
FIXE
|
2022-08-27
|
| 1692120
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/base/nsSocketTransport2.cpp:2578:7 in GetSelfAddr
|
Core
|
Networking
|
kershaw
|
RESO
|
FIXE
|
2021-11-22
|
| 1785050
|
|
Hit MOZ_CRASH(nsWeakReference not thread-safe) at xpcom/base/nsISupportsImpl.cpp:43 through [@ mozilla::net::OutputStreamTunnel::~OutputStreamTunnel]
|
Core
|
Networking: HTTP
|
kershaw
|
RESO
|
FIXE
|
2023-01-16
|
| 1607449
|
|
ThreadSanitizer: data race [@ fill_CERTCertificateFields] vs. [@ CERT_DestroyCertificate] with potential use-after-free
|
NSS
|
Libraries
|
kjacobs.bugzilla
|
RESO
|
FIXE
|
2022-05-19
|
| 1666568
|
|
WebAssembly threads crash on release assert for CurrentThreadCanAccessZone
|
Core
|
JavaScript: WebAssem
|
lhansen
|
RESO
|
FIXE
|
2021-04-04
|
| 1386915
|
|
stylo: AddressSanitizer: attempting double-free [@ gtk_css_node_ensure_style.part.0]
|
Core
|
CSS Parsing and Comp
|
manishearth
|
RESO
|
FIXE
|
2020-02-28
|
| 1400563
|
|
Crash in WinSqmSetIfMaxDWORD called from SCTP sowakeup() on association abort
|
Core
|
WebRTC: Networking
|
na-g
|
RESO
|
FIXE
|
2020-06-05
|
| 1230679
|
|
Various crashes within mozilla::layers::CairoImage::GetAsSourceSurface when abusing CanvasCaptureMediaStream
|
Core
|
Graphics
|
nobody
|
RESO
|
WORK
|
2017-11-15
|
| 1219339
|
|
Race condition in GetStaticInstance can cause use after free
|
Core
|
WebRTC: Audio/Video
|
paulrkerr
|
RESO
|
FIXE
|
2024-05-30
|
| 1401459
|
|
AddressSanitizer: heap-use-after-free @ compare_exchange_strong | mozilla::net::HttpChannelChild::TrySendDeletingChannel()
|
Core
|
Networking: HTTP
|
polo.hellfire
|
RESO
|
FIXE
|
2020-02-28
|
| 1747128
|
|
Missing locks in DoH code
|
Core
|
Networking: DNS
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1747137
|
|
Missing lock in nsHostResolver
|
Core
|
Networking: DNS
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1750032
|
|
Missing lock in nsAsyncStreamCopier
|
Core
|
Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1581084
|
|
mozilla::EventListenerManager::AddEventListenerInternal
|
Core
|
Security
|
smaug
|
RESO
|
FIXE
|
2024-05-30
|
| 1633880
|
|
Intermittent PID 4148 | SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/StaticPtr.h:171:13 in AssignAssumingAddRef | After xpcshell return code: -6
|
Core
|
DOM: File
|
subhamoy
|
RESO
|
FIXE
|
2020-12-18
|
| 1561404
|
|
AddressSanitizer: attempting to call malloc_usable_size() for pointer which is not owned: 0x60c00854c800 [@ __interceptor_malloc_usable_size] through [@ mozilla::MediaCacheStream::SizeOfExcludingThis]
|
Core
|
Audio/Video
|
tziade
|
RESO
|
FIXE
|
2024-05-30
|
| 1452417
|
|
Crash in nsCOMPtr<T>::nsCOMPtr<T> | nsHostResolver::DetachCallback
|
Core
|
Networking: DNS
|
valentin.gosu
|
RESO
|
FIXE
|
2018-08-28
|
| 1674835
|
|
ThreadSanitizer: data race [@ nsHttpTransaction::ReadSegments] vs. [@ nsHttpChannel::OnStartRequest]
|
Core
|
Networking: HTTP
|
valentin.gosu
|
RESO
|
FIXE
|
2022-01-18
|
| 1712671
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/base/nsSocketTransport2.cpp:1773:16 in OnMsgInputClosed
|
Core
|
Networking
|
valentin.gosu
|
RESO
|
FIXE
|
2022-08-26
|
| 1785018
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/xpcom/io/nsLocalFileUnix.cpp:1483:7 in GetDiskInfo<(lambda at /builds/worker/checkouts/gecko/xpcom/io/nsLocalFileUnix.cpp:1557:7), (lambda at /builds/worker/checkouts
|
Core
|
Networking: Cache
|
valentin.gosu
|
RESO
|
FIXE
|
2023-01-16
|
| 1818357
|
|
heap-use-after-free in [@ mozilla::net::nsStreamLoader::WriteSegmentFun]
|
Core
|
Networking
|
valentin.gosu
|
RESO
|
FIXE
|
2023-10-17
|
| 1847904
|
|
Crash in [@ NSSSocketControl::CloseSocketAndDestroy | mozilla::net::TLSTransportLayer::~TLSTransportLayer]
|
Core
|
Networking: WebSocke
|
valentin.gosu
|
RESO
|
FIXE
|
2024-01-03
|
| 1682928
|
|
ThreadSanitizer: data race [@ EventSource::UpdateDontKeepAlive] vs. [@ EventSource::ReadyState]
|
Core
|
DOM: Workers
|
ytausky
|
RESO
|
FIXE
|
2022-01-10
|
| 1408987
|
|
Intermittent SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/dom/media/mediasource/TrackBuffersManager.h:199:25 in HasVideo
|
Core
|
Audio/Video: Playbac
|
alwu
|
RESO
|
FIXE
|
2020-02-28
|
| 1821480
|
|
Crash in [@ mozilla::gmp::GMPVideoEncoderParent::RecvEncoded]
|
Core
|
Audio/Video: GMP
|
aosmond
|
RESO
|
FIXE
|
2023-10-17
|
| 1848997
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:106:21 in RefPtr
|
Core
|
WebRTC
|
apehrson
|
RESO
|
FIXE
|
2024-04-08
|
| 1851803
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/dom/media/MediaTrackGraph.cpp:2534:7 in ApplyTrackDisabling
|
Core
|
Audio/Video: MediaSt
|
apehrson
|
RESO
|
FIXE
|
2024-04-28
|
| 1402836
|
|
Intermittent AddressSanitizer: heap-use-after-free in LinkedList.h:245:18 in remove during js/src/jit-test/tests/basic/cooperative-threading.js
|
Core
|
JavaScript Engine: J
|
bhackett1024
|
RESO
|
FIXE
|
2020-02-28
|
| 1540136
|
|
AddressSanitizer: heap-use-after-free [@ mozilla::gmp::ChromiumCDMParent::Shutdown] with READ of size 8
|
Core
|
Audio/Video: GMP
|
brycebugemail
|
RESO
|
FIXE
|
2020-06-04
|
| 1856090
|
|
ThreadSanitizer: data race [@ mozilla::dom::ServiceWorkerDescriptor::SetState] vs. [@ mozilla::dom::ServiceWorkerDescriptor::State]
|
Core
|
DOM: Service Workers
|
bugmail
|
RESO
|
FIXE
|
2024-04-28
|
| 1680389
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/xpcom/base/nsDebugImpl.cpp:223:28 in nsDebugImpl::SetMultiprocessMode(char const*)
|
Core
|
DOM: Content Process
|
continuation
|
RESO
|
FIXE
|
2020-12-13
|
| 1815998
|
|
Intermittent headless-spi SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/security/nss/lib/pki/pki3hack.c:750:15 in fill_CERTCertificateFields
|
Core
|
Security: PSM
|
dkeeler
|
RESO
|
FIXE
|
2023-03-23
|
| 1624897
|
|
Intermittent GECKO(1276) | SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:67:13 in assign_assuming_AddRef
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
FIXE
|
2020-06-05
|
| 1648848
|
|
TSan data race in WebrtcVideoConduit::AddFrameHistory
|
Core
|
WebRTC: Audio/Video
|
docfaraday
|
RESO
|
FIXE
|
2020-12-18
|
| 1649222
|
|
TSan race in mozilla::NrIceResolver::AllocateResolver
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
DUPL
|
2024-06-07
|
| 1653626
|
|
ThreadSanitizer: data race in webrtc.org [@ webrtc::RTCPReceiver::HandleSenderReport] vs [@ webrtc::RTCPReceiver::RemoteRTCPSenderInfo]
|
Core
|
WebRTC: Audio/Video
|
docfaraday
|
RESO
|
FIXE
|
2020-12-18
|
| 1538798
|
|
Crash in [@ core::ptr::real_drop_in_place<T>]
|
Core
|
Graphics: WebRender
|
dothayer
|
RESO
|
FIXE
|
2022-01-10
|
| 1650745
|
|
Crash in [@ mozilla::dom::ScriptLoader::EncodeBytecode]
|
Core
|
Performance
|
dpalmeiro
|
RESO
|
FIXE
|
2020-09-15
|
| 1686154
|
|
ThreadSanitizer: data race [@ mozilla::dom::WorkerFetchResolver::NeedOnDataAvailable] vs. [@ Shutdown]
|
Core
|
DOM: Networking
|
echuang
|
RESO
|
FIXE
|
2021-11-22
|
| 1819496
|
|
ThreadSanitizer: data race [@ operator] vs. [@ nsThread::ProcessNextEvent]
|
Core
|
DOM: Networking
|
echuang
|
RESO
|
FIXE
|
2023-10-17
|
| 1577439
|
|
AddressSanitizer: heap-use-after-free [@ nsAtomTable::Atomize] with WRITE of size 8 through [@ selectors::parser::parse_one_simple_selector]
|
Core
|
CSS Parsing and Comp
|
emilio
|
RESO
|
FIXE
|
2021-12-03
|
| 1560641
|
|
Intermittent mozrunner-startup | <test-name> | application crashed [@ nsWindow::LayerViewSupport::OnDetach(already_AddRefed<mozilla::Runnable>)::{lambda()#1}::operator()() const]
|
Core Graveyard
|
Widget: Android
|
etoop
|
RESO
|
FIXE
|
2021-11-04
|
| 1752703
|
|
Crash in [@ __GI_getenv]
|
Core
|
Graphics
|
gsvelto
|
RESO
|
FIXE
|
2024-01-11
|
| 1860943
|
|
Need to protect mAnimation with mutex in OnPan
|
Core
|
Panning and Zooming
|
hikezoe.birchill
|
RESO
|
FIXE
|
2024-04-28
|
| 1607762
|
|
ThreadSanitizer: data race [@ operator--] vs. [@ operator--] through [@ nsHtml5OwningUTF16Buffer::Release]
|
Core
|
DOM: HTML Parser
|
hsivonen
|
RESO
|
FIXE
|
2021-04-04
|
| 1806772
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/js/src/vm/PIC.cpp:311:16 in freeAllStubs
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2023-01-04
|
| 1828024
|
|
ThreadSanitizer: data race [@ js::gc::GCRuntime::updateHelperThreadCount] vs. [@ js::gc::GCRuntime::updateMarkersVector]
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2024-01-03
|
| 1835710
|
|
IsNurseryAllocEnabled is not thread safe.
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2023-10-17
|
| 1815890
|
|
Crash in [@ mozilla::fontlist::FontList::ShmBlock::Memory] on poison values from OffscreenCanvas
|
Core
|
Graphics: Canvas2D
|
jfkthame
|
RESO
|
FIXE
|
2023-10-17
|
| 1840918
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/StaticPtr.h:110:27 in get
|
Core
|
Storage: IndexedDB
|
jjalkanen
|
RESO
|
FIXE
|
2024-04-29
|
| 1814856
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/Maybe.h:444:42 in isSome
|
Core
|
Storage: Quota Manag
|
jstutte
|
RESO
|
FIXE
|
2023-10-17
|
| 1861252
|
|
ThreadSanitizer: data race [@ assign_assuming_AddRef] vs. [@ operator!]
|
Core
|
XPCOM
|
jstutte
|
RESO
|
FIXE
|
2023-12-01
|
| 1856072
|
|
ThreadSanitizer: data race [@ mozilla::dom::quota::RemoteQuotaObject::ClearActor] vs. [@ mozilla::dom::quota::RemoteQuotaObject::Close]
|
Core
|
DOM: File
|
jvarga
|
RESO
|
FIXE
|
2024-04-28
|
| 1497751
|
|
update driver state before handing control to another thread
|
Core
|
Audio/Video: MediaSt
|
karlt
|
RESO
|
FIXE
|
2019-08-07
|
| 1542593
|
|
PNeckoChild::SendPUDPSocketConstructor called off main thread
|
Core
|
Networking
|
kershaw
|
RESO
|
FIXE
|
2024-05-30
|
| 1660307
|
|
WebSocketImpl may clear nsWeakPtr members on different thread where they were created.
|
Core
|
Networking: WebSocke
|
kershaw
|
RESO
|
FIXE
|
2021-11-22
|
| 1748210
|
|
Hit MOZ_CRASH(nsSupportsPRUint32 not thread-safe) at xpcom/base/nsISupportsImpl.cpp:43
|
Core
|
Networking: HTTP
|
kershaw
|
RESO
|
FIXE
|
2022-08-27
|
| 1752100
|
|
Crash in [@ nsJSPrincipals::AddRef ] nsJSPrincipals accessed from off-thread
|
Core
|
Networking: WebSocke
|
kershaw
|
RESO
|
FIXE
|
2022-08-27
|
| 1762201
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/dns/TRRService.cpp:1143:7 in mozilla::net::TRRService::ConfirmationContext::RecordEvent(char const*)
|
Core
|
Networking
|
kershaw
|
RESO
|
FIXE
|
2023-01-16
|
| 1771263
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/StaticPtr.h:150:27 in get
|
Core
|
Networking
|
kershaw
|
RESO
|
FIXE
|
2023-09-24
|
| 1807004
|
|
Frequent STDOUT: SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:867:45 in operator bool
|
Core
|
Networking: WebSocke
|
kershaw
|
RESO
|
FIXE
|
2023-09-11
|
| 1811047
|
|
Intermittent headless-spi SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/cxxalloc.h:51:10 in operator delete
|
Core
|
Networking: WebSocke
|
kershaw
|
RESO
|
FIXE
|
2023-10-17
|
| 1648612
|
|
Data race in mozilla::AudioCallbackDriver::StateCallback_s
|
Core
|
Audio/Video: cubeb
|
kinetik
|
RESO
|
FIXE
|
2021-11-22
|
| 1593401
|
|
AddressSanitizer: heap-use-after-free z:\build\build\src\security\nss\lib\cryptohi\seckey.c:1025 in SECKEY_PublicKeyStrengthInBits
|
NSS
|
Libraries
|
kjacobs.bugzilla
|
RESO
|
FIXE
|
2023-10-23
|
| 1836607
|
|
Intermittent FetchStreamReader not thread-safe [@ libxul.so + 0x000000000026ff1b] | single tracking bug
|
Core
|
DOM: Streams
|
krosylight
|
RESO
|
FIXE
|
2024-04-28
|
| 1623542
|
|
ThreadSanitizer: data race [@ lengthField] vs. [@ pthread_create]
|
Core
|
JavaScript Engine
|
kvijayan
|
RESO
|
DUPL
|
2024-06-07
|
| 1672120
|
|
Access of TransportSecurityInfo fields should hold mutex
|
Core
|
Security: PSM
|
mbirghan
|
RESO
|
FIXE
|
2021-11-22
|
| 1744900
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/dns/nsHostRecord.cpp:109:8 in nsHostRecord::SetExpiration(mozilla::TimeStamp const&, unsigned int, unsigned int)
|
Core
|
Networking: DNS
|
nhnt11
|
RESO
|
FIXE
|
2022-08-27
|
| 1754017
|
|
Potential race on StreamBlobImpl::mInputStream in GetInputStream
|
Core
|
DOM: File
|
nika
|
RESO
|
FIXE
|
2022-08-27
|
| 1789503
|
|
ThreadSanitizer: data race in XPCOMService_GetThirdPartyUtil
|
Core
|
Networking
|
nika
|
RESO
|
FIXE
|
2024-05-30
|
| 1392831
|
|
multithreaded use-after-free bugs in base::WaitableEvent
|
Core
|
IPC
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
| 1517452
|
|
TSAN detects data race when background ion compilation reads flag written by foreground wasm module instantiation
|
Core
|
JavaScript Engine: J
|
nobody
|
RESO
|
FIXE
|
2021-11-22
|
| 1626204
|
|
Crash in [@ mozilla::ipc::MessageChannel::StopPostponingSends]
|
Core
|
IPC
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1635013
|
|
Crash in [@ free | core::ptr::real_drop_in_place | <bookmark_sync::store::Store as dogear::store::Store>::fetch_local_tree]
|
Toolkit
|
Places
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1806857
|
|
TSAN data race: ~AudioCallbackDriver vs DataCallback()
|
Core
|
Audio/Video: MediaSt
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
| 1656064
|
|
SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/dom/media/MediaTrackGraph.cpp:649:20 in mozilla::MediaTrackGraphImpl::OpenAudioInputImpl(void const*, mozilla::AudioDataListener*)
|
Core
|
WebRTC: Audio/Video
|
padenot
|
RESO
|
FIXE
|
2021-11-22
|
| 1493347
|
|
DataChannelConnection can be freed on wrong thread
|
Core
|
WebRTC: Networking
|
rjesup
|
RESO
|
FIXE
|
2019-08-07
|
| 1744043
|
|
Missing locking around access to nsJAR members, especially the zip library
|
Core
|
Networking: JAR
|
rjesup
|
RESO
|
FIXE
|
2023-09-02
|
| 1746875
|
|
Clean up memory reporting locking in netwerk/cache2
|
Core
|
Networking: Cache
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1747331
|
|
Lock cleanup in BackgroundFileSaver
|
Core
|
Networking: File
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1747439
|
|
Fix a bunch of locking/race issues in cache2
|
Core
|
Networking: Cache
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1747457
|
|
Fix a number of missing locks in worker code
|
Core
|
DOM: Workers
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1749056
|
|
Missing lock in CheckListenerChain()
|
Core
|
DOM: HTML Parser
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1749164
|
|
Probable locking issues with nsInputStreamPump
|
Core
|
Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1749786
|
|
Locking issues with WebSocketChannel
|
Core
|
Networking: WebSocke
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1752405
|
|
Fix some small locking issues in serviceworkers
|
Core
|
DOM: Workers
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1755847
|
|
Clean up nsStreamTransportService
|
Core
|
Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1757427
|
|
http IPC locking issues
|
Core
|
Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1836353
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/base/nsMIMEInputStream.cpp:236:3 in nsMIMEInputStream::Read(char*, unsigned int, unsigned int*)
|
Core
|
Networking
|
rjesup
|
RESO
|
FIXE
|
2024-01-03
|
| 1584953
|
|
Crash in [@ NS_NewLocalFile]
|
Core
|
Storage: IndexedDB
|
simon.giesecke
|
RESO
|
WORK
|
2023-06-25
|
| 1801315
|
|
BaseWebSocketChannel releases LoadInfo on a wrong thread.
|
Core
|
Networking
|
smaug
|
RESO
|
FIXE
|
2023-07-17
|
| 1810805
|
|
ThreadSanitizer: data race [@ mozilla::dom::FetchDriver::FetchDriverAbortActions] vs. [@ mozilla::dom::FetchDriver::OnDataAvailable]
|
Core
|
DOM: Networking
|
smayya
|
RESO
|
FIXE
|
2024-04-28
|
| 1818394
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/protocol/http/nsHttpTransaction.cpp:1813:11 in mozilla::net::nsHttpTransaction::Restart()
|
Core
|
Networking: HTTP
|
smayya
|
RESO
|
FIXE
|
2023-10-17
|
| 1821562
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/protocol/http/nsHttpTransaction.cpp:990:10 in HasStickyConnection
|
Core
|
Networking: HTTP
|
smayya
|
RESO
|
DUPL
|
2023-10-30
|
| 1825985
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/protocol/http/nsHttpHandler.cpp:2078:23 in mozilla::net::nsHttpHandler::Observe(nsISupports*, char const*, char16_t const*)
|
Core
|
Networking
|
smayya
|
RESO
|
FIXE
|
2024-01-03
|
| 1753612
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/widget/gtk/WindowSurfaceProvider.cpp:110:10 in mozilla::widget::WindowSurfaceProvider::CreateWindowSurface()
|
Core
|
Widget: Gtk
|
stransky
|
RESO
|
FIXE
|
2022-08-27
|
| 1606864
|
|
ThreadSanitizer: data race [@ mozilla::net::nsSocketTransport::Close] vs. [@ mozilla::net::nsSocketTransport::OnSocketDetached]
|
Core
|
Networking
|
valentin.gosu
|
RESO
|
FIXE
|
2022-08-26
|
| 1700091
|
|
Crash in [@ mozilla::net::DNSHTTPSSVCRecordBase::HasIPAddressesInternal]
|
Core
|
Networking: DNS
|
valentin.gosu
|
RESO
|
FIXE
|
2021-11-22
|
| 1399520
|
|
Intermittent AddressSanitizer: heap-use-after-free modules/libjar/nsJAR.cpp:61:21 in Release
|
Core
|
Networking: JAR
|
xeonchen
|
RESO
|
FIXE
|
2020-02-28
|
| 1616027
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/build/src/mozglue/misc/Mutex_posix.cpp:119:3 in mozilla::detail::MutexImpl::~MutexImpl()
|
Core
|
Audio/Video: Playbac
|
alwu
|
RESO
|
INCO
|
2024-02-10
|
| 1768409
|
|
TrackBuffersManager::mType is not thread safe
|
Core
|
Audio/Video: Playbac
|
brycebugemail
|
RESO
|
FIXE
|
2023-01-16
|
| 1557409
|
|
AddressSanitizer: global-buffer-overflow /src/obj-firefox/dist/include/mozilla/BasePrincipal.h:157:39 in Kind
|
Core
|
Graphics: CanvasWebG
|
ehsan.akhgari
|
RESO
|
FIXE
|
2022-01-10
|
| 1298773
|
|
Intermittent dom/devicestorage/test/test_app_permissions.html | application crashed [@ js::CompartmentChecker::check(JSObject *)] after Assertion failure: IsInsideNursery(obj) || !obj->asTenured().isMarked(gc::GRAY)
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2017-04-10
|
| 1676257
|
|
ThreadSanitizer: data race [@ GiveSurface] vs. [@ mozilla::gfx::SourceSurfaceSkia::GetImage]
|
Core
|
Graphics
|
lsalzman
|
RESO
|
FIXE
|
2021-11-22
|
| 1786136
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/UserData.h:78:25 in RemoveAndDestroy
|
Core
|
Graphics: Canvas2D
|
lsalzman
|
RESO
|
FIXE
|
2023-01-16
|
| 1466577
|
|
Crash in arena_dalloc | Allocator<T>::free | MOZ_Z_inflateEnd
|
Core
|
Networking: WebSocke
|
michal.novotny
|
RESO
|
FIXE
|
2019-08-07
|
| 1541169
|
|
Assertion failure: false (WeakPtr accessed from multiple threads), at src/obj-firefox/dist/include/mozilla/WeakPtr.h:158
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1559307
|
|
SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/xpcom/threads/nsThreadManager.cpp:91:15 in nsThreadManager::ReleaseThread(void*)
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1626047
|
|
Intermittent SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/checkouts/gecko/security/nss/lib/dev/devtoken.c:75:32 in nssToken_GetSlot
|
NSS
|
Libraries
|
nobody
|
RESO
|
FIXE
|
2022-08-27
|
| 1645391
|
|
Perma SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:67:13 in assign_assuming_AddRef
|
Core
|
DOM: Workers
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1803281
|
|
Intermittent toolkit/xre/test/marionette/test_win32k_enrollment.py TestWin32kAutostart.test_XX | application crashed nsAutoOwningThread::AssertCurrentThreadOwnsMe(char const*) const [nsISupportsImpl.cpp:223177f5d721e117adabb150cf0eb28f2130731e : 45 + 0x1f
|
Core
|
General
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
| 1847352
|
|
double-free in [@ rx::Resource11Base<ID3D11RasterizerState,rx::UniquePtr,rx::TypedData<ID3D11RasterizerState> >::~Resource11Base]
|
Core
|
Graphics
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
| 1656067
|
|
SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/nsAutoRef.h:566:16 in own
|
Core
|
Audio/Video: MediaSt
|
padenot
|
RESO
|
FIXE
|
2021-11-22
|
| 1414389
|
|
Crash in mozilla::gfx::DrawTargetSkia::FillRect
|
Core
|
Graphics: Layers
|
rhunt
|
RESO
|
WORK
|
2023-12-02
|
| 1747178
|
|
Add/move some locking in audio code
|
Core
|
Audio/Video
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1747282
|
|
Locking issues in dom/media/File*
|
Core
|
Audio/Video: Playbac
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1628780
|
|
Intermittent GECKO(3184) | SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:286:27 in get
|
Core
|
DOM: Navigation
|
afarre
|
RESO
|
DUPL
|
2023-05-22
|
| 1723142
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/ScaleFactor.h:42:12 in operator==
|
Core
|
Panning and Zooming
|
botond
|
RESO
|
FIXE
|
2021-09-07
|
| 1723170
|
|
Intermittent SUMMARY: ThreadSanitizer: data race gecko/gfx/layers/apz/src/AsyncPanZoomController.cpp:736:43 in mozilla::layers::AsyncPanZoomController::AsyncPanZoomController(mozilla::layers::LayersId, mozilla::layers::APZCTreeManager*, RefPtr<mozilla:
|
Core
|
Panning and Zooming
|
botond
|
RESO
|
FIXE
|
2022-08-26
|
| 1723176
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/gfx/layers/apz/src/AsyncPanZoomController.cpp:6112:10 in mozilla::layers::AsyncPanZoomController::GetZoomAnimationId() const
|
Core
|
Panning and Zooming
|
botond
|
RESO
|
FIXE
|
2022-08-26
|
| 1723321
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/gfx/layers/apz/src/AsyncPanZoomController.cpp:736:43 in mozilla::layers::AsyncPanZoomController::AsyncPanZoomController(mozilla::layers::LayersId, mozilla::layers::APZCTreeMan
|
Core
|
Panning and Zooming
|
botond
|
RESO
|
DUPL
|
2023-05-22
|
| 1765782
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/FrameMetrics.h:911:48 in ForceMousewheelAutodir
|
Core
|
Panning and Zooming
|
botond
|
RESO
|
FIXE
|
2023-01-16
|
| 1540590
|
|
Intermittent SUMMARY: AddressSanitizer: heap-use-after-free z:\build\build\src\gfx\vr\gfxVRPuppet.cpp:762 in mozilla::gfx::VRSystemManagerPuppet::GetIsPresenting(void)
|
Core
|
WebVR
|
dmu
|
RESO
|
FIXE
|
2020-06-05
|
| 1478402
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/build/src/js/src/gc/ArenaList-inl.h:135:21 in takeNextArena
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2019-08-07
|
| 1750044
|
|
Permafail SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/ipc/glue/GeckoChildProcessHost.cpp:867:23 in SetAlreadyDead
|
Core
|
IPC
|
jld
|
RESO
|
FIXE
|
2022-08-27
|
| 1759794
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/security/nss/lib/softoken/pkcs11.c:3655:21 in sftk_checkNeedLogin
|
NSS
|
Libraries
|
jschanck
|
RESO
|
FIXE
|
2023-06-03
|
| 1760998
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/security/nss/lib/softoken/sftkpwd.c:657:29 in sftkdb_switchKeys
|
NSS
|
Libraries
|
jschanck
|
RESO
|
FIXE
|
2023-01-16
|
| 1720568
|
|
Intermittent SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/obj-build/dist/include/mozilla/dom/WorkerPrivate.h:169:12 in IsDebuggerRegistered
|
Core
|
DOM: Workers
|
jstutte
|
RESO
|
FIXE
|
2022-08-26
|
| 1713294
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:925:10 in Unsound_NumQueuedMessages
|
Core
|
DOM: Content Process
|
nika
|
RESO
|
FIXE
|
2021-06-13
|
| 1543310
|
|
Intermittent PID 2867 | SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/Assertions.h:313:3 in MOZ_Crash
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
INCO
|
2020-01-09
|
| 1593493
|
|
Intermittent GECKO(1176) | Assertion failure: int32_t(mRefCnt) > 0 (dup release), at /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/MozPromise.h:145
|
Core
|
DOM: Workers
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1647007
|
|
Intermittent SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.h:820:69 in runtimeMatches
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1673775
|
|
Intermittent ThreadSanitizer: data race /builds/worker/checkouts/gecko/security/nss/lib/pki/pki3hack.c:871:24 in fill_CERTCertificateFields
|
NSS
|
Libraries
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1723351
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/gfx/layers/apz/src/AsyncPanZoomController.cpp:4684:39 in mozilla::layers::AsyncPanZoomController::ApplyAsyncTestAttributes(mozilla::RecursiveMutexAutoLock const&)
|
Core
|
Panning and Zooming
|
nobody
|
RESO
|
DUPL
|
2021-08-26
|
| 1723636
|
|
Intermittent gfx/tests/reftest/picture-caching-on-async-zoom.html | application terminated with exit code -6 | After ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/ScaleFactor.h:42:12 in operator==
|
Core
|
Panning and Zooming
|
nobody
|
RESO
|
DUPL
|
2021-08-26
|
| 1723730
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/gfx/layers/apz/src/AsyncPanZoomController.cpp:6108:20 in mozilla::layers::AsyncPanZoomController::SetZoomAnimationId(mozilla::Maybe<unsigned long> const&)
|
Core
|
Panning and Zooming
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1723770
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/ScaleFactor.h:42:12 in operator==
|
Core
|
Panning and Zooming
|
nobody
|
RESO
|
DUPL
|
2021-08-26
|
| 1724318
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/BasePoint.h:56:12 in operator!=
|
Core
|
Panning and Zooming
|
nobody
|
RESO
|
DUPL
|
2021-08-26
|
| 1724499
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/base/nsSocketTransport2.cpp:2297:16 in mozilla::net::nsSocketTransport::OpenInputStream(unsigned int, unsigned int, unsigned int, nsIInputStream**)
|
Core
|
Networking
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1727005
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/protocol/http/nsHttpTransaction.cpp:511:20 in mozilla::net::nsHttpTransaction::SetConnection(mozilla::net::nsAHttpConnection*)
|
Core
|
Networking: HTTP
|
nobody
|
RESO
|
DUPL
|
2021-12-08
|
| 1727473
|
|
Intermittent [Tier2] SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/gfx/layers/apz/src/AsyncPanZoomController.cpp:6114:20 in SetZoomAnimationId
|
Core
|
Panning and Zooming
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1728715
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/CheckedInt.h:563:12 in value via TrackBuffersManager::GetDebugInfo
|
Core
|
Audio/Video: Playbac
|
nobody
|
RESO
|
FIXE
|
2021-09-05
|
| 1730031
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/widget/gtk/nsWindow.cpp:6108:11 in nsWindow::IsWaitingForCompositorResume()
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
DUPL
|
2021-10-19
|
| 1732309
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/security/manager/ssl/nsNSSCallbacks.cpp:716:32 in PreliminaryHandshakeDone(PRFileDesc*)
|
Core
|
Security: PSM
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1733613
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/widget/gtk/nsWindow.cpp:703:16 in nsWindow::Destroy()
|
Core
|
Widget: Gtk
|
nobody
|
RESO
|
DUPL
|
2021-10-06
|
| 1745089
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/dns/nsHostRecord.cpp:109:8 in nsHostRecord::SetExpiration(mozilla::TimeStamp const&, unsigned int, unsigned int)
|
Core
|
Networking: DNS
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1751595
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/dom/media/gmp/GMPParent.cpp:365:10 in mozilla::gmp::GMPParent::LoadProcess()
|
Core
|
Audio/Video: GMP
|
nobody
|
RESO
|
DUPL
|
2024-01-08
|
| 1752844
|
|
Intermittent SUMMARY: ThreadSanitizer: data race (/builds/worker/workspace/build/application/firefox/libmozsqlite3.so+0x3a262)
|
Core
|
Storage: IndexedDB
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
| 1656063
|
|
SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/dom/media/platforms/ffmpeg/ffvpx/FFVPXRuntimeLinker.cpp:128:21 in mozilla::FFVPXRuntimeLinker::GetRDFTFuncs(FFmpegRDFTFuncs*)
|
Core
|
Audio/Video
|
padenot
|
RESO
|
FIXE
|
2021-11-22
|
| 1727225
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/widget/gtk/nsWindow.cpp:5980:11 in nsWindow::IsWaitingForCompositorResume()
|
Core
|
Widget: Gtk
|
stransky
|
RESO
|
FIXE
|
2022-01-23
|
| 1682544
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/cache2/CacheEntry.cpp:1310:12 in mozilla::net::CacheEntry::OpenOutputStreamInternal(long, nsIOutputStream**)
|
Core
|
Networking: Cache
|
a.beingessner
|
RESO
|
FIXE
|
2021-11-22
|
| 1682938
|
|
ThreadSanitizer: data race [@ ReverbInputBuffer::writeIndex] vs. [@ ReverbInputBuffer::write]
|
Core
|
Web Audio
|
a.beingessner
|
RESO
|
FIXE
|
2021-04-04
|
| 1819492
|
|
heap-use-after-free in [@ mozilla::MFCDMChild::Shutdown]
|
Core
|
Audio/Video
|
alwu
|
RESO
|
FIXE
|
2023-10-17
|
| 1234192
|
|
OSFileSystem looks scary since it is threadsafe object but keeps a strong pointer to main-thread only mWindow
|
Core
|
DOM: Core & HTML
|
amarchesini
|
RESO
|
FIXE
|
2016-01-20
|
| 1539125
|
|
heap-use-after-free in AssertWorkerThread
|
Core
|
DOM: Workers
|
amarchesini
|
RESO
|
FIXE
|
2024-05-30
|
| 1704227
|
|
ThreadSanitizer: data race [@ mozilla::layers::WebRenderBridgeParent::ClearResources] vs. [@ mozilla::layers::CompositorBridgeParent::GetCompositorBridgeParentFromWindowId]
|
Core
|
Graphics: WebRender
|
aosmond
|
RESO
|
FIXE
|
2021-11-22
|
| 1751583
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/dom/media/gmp/GMPParent.cpp:365:10 in mozilla::gmp::GMPParent::LoadProcess()
|
Core
|
Audio/Video: GMP
|
aosmond
|
RESO
|
FIXE
|
2024-01-03
|
| 1764999
|
|
Crash in [@ mozilla::WebGLContext::LruPosition::reset]
|
Core
|
Graphics: CanvasWebG
|
aosmond
|
RESO
|
DUPL
|
2023-05-22
|
| 1779570
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/gfx/2d/DrawTargetSkia.cpp:1837:14 in mozilla::gfx::DrawTargetSkia::SetTransform(mozilla::gfx::BaseMatrix<float> const&)
|
Core
|
Graphics: Text
|
aosmond
|
RESO
|
FIXE
|
2023-01-16
|
| 1853971
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/LinkedList.h:290:12 in isInList
|
Core
|
XPConnect
|
arai.unmht
|
RESO
|
FIXE
|
2023-09-24
|
| 1164567
|
|
Various consumers in the tree use nsIPrincipal off-main-thread
|
Core
|
Security: CAPS
|
bholley
|
RESO
|
FIXE
|
2016-07-02
|
| 1144759
|
|
FilePickerParent::FileSizeAndDateRunnable::~FileSizeAndDateRunnable() releases main thread objects off the main thread
|
Core
|
DOM: Content Process
|
bill.mccloskey
|
RESO
|
FIXE
|
2015-09-22
|
| 1222101
|
|
TSan: data race ipc/glue/MessagePump.cpp:142 ScheduleWork (race on mThread)
|
Core
|
IPC
|
bill.mccloskey
|
RESO
|
FIXE
|
2017-01-05
|
| 1685837
|
|
ThreadSanitizer: data race [@ mozilla::layers::AsyncPanZoomController::SetState] vs. [@ IsAsyncZooming]
|
Core
|
Panning and Zooming
|
botond
|
RESO
|
FIXE
|
2021-01-12
|
| 1821838
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/gfx/layers/apz/src/AsyncPanZoomController.cpp:6138:10 in mozilla::layers::AsyncPanZoomController::SetStateNoContentControllerDispatch(mozilla::layers::AsyncPanZoomController::
|
Core
|
Panning and Zooming
|
botond
|
RESO
|
FIXE
|
2023-10-17
|
| 1827076
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/js/src/ctypes/libffi/src/x86/unix64.S:101 in ffi_call_unix64
|
Core
|
XPCOM
|
brennie
|
RESO
|
FIXE
|
2023-10-17
|
| 1770630
|
|
Intermittent dom/tests/mochitest/fetch/test_readableStreams.html | application crashed [@ nsAutoOwningThread::AssertCurrentThreadOwnsMe(char const*) const] | After application terminated with exit code 245
|
Core
|
DOM: Networking
|
bugmail
|
RESO
|
FIXE
|
2023-09-29
|
| 1127206
|
|
Crash when using certain File() constructors on workers
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
| 1228702
|
|
Chrome code can access the location property on Exception and DOMException from off the main thread
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
| 905382
|
|
Data race in Paris Bindings due to use of xpc::StringToJsval
|
Core
|
DOM: Core & HTML
|
continuation
|
RESO
|
FIXE
|
2019-03-13
|
| 1185144
|
|
nsContentUtils::LogSimpleConsoleError() releases nsScriptErrorWithStack off the main thread
|
Core
|
XPCOM
|
continuation
|
RESO
|
FIXE
|
2015-11-10
|
| 1644922
|
|
Race on MessageChannel::mLink between ~MessageChannel and ~ThreadLink
|
Core
|
IPC
|
continuation
|
RESO
|
INVA
|
2020-07-10
|
| 1806852
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:1744:20 in PR_GetThreadName
|
Core
|
XPCOM
|
continuation
|
RESO
|
FIXE
|
2023-10-17
|
| 1797720
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:286:27 in get
|
Core
|
WebRTC: Audio/Video
|
dbaker
|
RESO
|
FIXE
|
Sun 23:35
|
| 1379631
|
|
Hit MOZ_CRASH(nsCORSListenerProxy not thread-safe) at nsISupportsImpl.cpp:43
|
Core
|
Networking: HTTP
|
dd.mozilla
|
RESO
|
FIXE
|
2017-08-28
|
| 1808816
|
|
Intermittent headless-spi SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/security/nss/lib/pki/pki3hack.c:750:15 in fill_CERTCertificateFields
|
Core
|
Security: PSM
|
dkeeler
|
RESO
|
FIXE
|
2023-03-23
|
| 1024765
|
|
Refcounting of nsTimerImpl looks wrong in in TimerThread when PostTimerEvent fails
|
Core
|
XPCOM
|
docfaraday
|
RESO
|
FIXE
|
2016-01-11
|
| 1361098
|
|
TimerThread::Init can race against TimerThread::Run, and can call TimerEvent::Init more than once
|
Core
|
XPCOM
|
docfaraday
|
RESO
|
FIXE
|
2017-10-26
|
| 1361100
|
|
Racy accesses to nsTimerImpl::mEventTarget in TimerThread::PostTimerEvent
|
Core
|
XPCOM
|
docfaraday
|
RESO
|
FIXE
|
2017-10-26
|
| 1651509
|
|
ThreadSanitizer: data race [@ r_malloc] vs. [@ r_free]
|
Core
|
WebRTC: Networking
|
docfaraday
|
RESO
|
DUPL
|
2024-06-07
|
| 1227848
|
|
AddressSanitizer: heap-use-after-free with Text to Speech
|
Core
|
Web Speech
|
eitan
|
RESO
|
FIXE
|
2020-02-28
|
| 1661402
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/Vector.h:1378:11 in internalAppend<char>
|
Core
|
Networking
|
emilio
|
RESO
|
FIXE
|
2021-11-22
|
| 1716028
|
|
A race condition in crossbeam leads to a security vulnerability
|
Core
|
Security
|
emilio
|
RESO
|
FIXE
|
2024-05-30
|
| 1729813
|
|
ThreadSanitizer: data race in crossbeam(?)
|
Core
|
CSS Parsing and Comp
|
emilio
|
RESO
|
FIXE
|
2022-08-26
|
| 1803393
|
|
MOZ_CRASH(IMContextWrapper not thread-safe) crashes
|
Core
|
Widget: Gtk
|
emilio
|
RESO
|
FIXE
|
2023-07-17
|
| 1807000
|
|
Frequent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/widget/headless/HeadlessCompositorWidget.cpp:35:10 in mozilla::widget::HeadlessCompositorWidget::GetClientSize()
|
Firefox
|
Headless
|
emilio
|
RESO
|
FIXE
|
2023-03-23
|
| 1258231
|
|
crash in nsConsoleService::ClearMessagesForWindowID
|
Core
|
XPCOM
|
ericrahm+bz
|
RESO
|
FIXE
|
2016-09-22
|
| 1278965
|
|
TSan: data race security/nss/lib/certdb/stanpcertdb.c on CERTCertificate::{istemp, isperm}
|
NSS
|
Libraries
|
franziskuskiefer
|
RESO
|
FIXE
|
2019-03-24
|
| 1036515
|
|
Refcounting on nsTimerImpl is not actually threadsafe
|
Core
|
XPCOM
|
froydnj+bz
|
RESO
|
FIXE
|
2017-01-27
|
| 1156974
|
|
TSan: data race netwerk/cache2/CacheFileIOManager.h:51 IsDoomed
|
Core
|
Networking: Cache
|
froydnj+bz
|
RESO
|
FIXE
|
2016-07-02
|
| 1573160
|
|
use-after-free possibility in nsThreadPool
|
Core
|
XPCOM
|
froydnj+bz
|
RESO
|
FIXE
|
2020-06-05
|
| 1218124
|
|
Race condition in |once| can cause use after free
|
Core
|
Audio/Video
|
giles
|
RESO
|
FIXE
|
2024-05-30
|
| 1230768
|
|
Potential race conditions around block-level statics cause memory-safety bugs
|
Core
|
WebRTC: Audio/Video
|
gpascutto
|
RESO
|
FIXE
|
2024-05-30
|
| 1696442
|
|
ThreadSanitizer: data race [@ AsyncPanZoomController::SetParent] vs. [@ AsyncPanZoomController::GetParent]
|
Core
|
Panning and Zooming
|
hikezoe.birchill
|
RESO
|
FIXE
|
2021-11-22
|
| 1290975
|
|
mozilla::ipc::MessageChannel is using WeakReference on more than one thread
|
Core
|
IPC
|
honzab.moz
|
RESO
|
FIXE
|
2016-08-12
|
| 1293327
|
|
Make indexDB CreateStorageConnection get file protocol handler directly
|
Core
|
Storage: IndexedDB
|
honzab.moz
|
RESO
|
FIXE
|
2017-08-28
|
| 1724101
|
|
ThreadSanitizer: data race [@ assign_assuming_AddRef] vs. [@ get] with nsHtml5StreamParser
|
Core
|
DOM: HTML Parser
|
hsivonen
|
RESO
|
FIXE
|
2022-08-26
|
| 1637977
|
|
ThreadSanitizer: data race [@ emplace<>] vs. [@ isNothing] with memory corruption
|
Core
|
JavaScript Engine
|
iireland
|
RESO
|
FIXE
|
2021-07-07
|
| 1461619
|
|
Updating atom mark bits can race with object group sweeping
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2019-08-07
|
| 1506798
|
|
Possible data race in MovingTracer::updateEdge
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2020-02-16
|
| 1647702
|
|
ThreadSanitizer: data race [@ isForwarded] vs. [@ unsafeSetPtr]
|
Core
|
JavaScript: GC
|
jcoppeard
|
RESO
|
FIXE
|
2020-07-20
|
| 1648354
|
|
Crash in [@ mozilla::ipc::MessageChannel::Send | mozilla::ipc::IProtocol::ChannelSend]
|
Core
|
Layout: Text and Fon
|
jfkthame
|
RESO
|
FIXE
|
2020-12-18
|
| 1824200
|
|
[tsan] data race initializing the SharedFTFace in gfxFontconfigFontEntry::GetFTFace
|
Core
|
Graphics: Text
|
jfkthame
|
RESO
|
FIXE
|
2024-05-30
|
| 1825569
|
|
[tsan] data races in Android font backend (FT2FontEntry)
|
Core
|
Graphics: Text
|
jfkthame
|
RESO
|
FIXE
|
2023-10-17
|
| 1852596
|
|
ThreadSanitizer: data race [@ gfxPlatformFontList::StartCmapLoadingFromFamily] vs. [@ gfxPlatformFontList::StartCmapLoadingFromFamily]
|
Core
|
Graphics: Text
|
jfkthame
|
RESO
|
FIXE
|
2024-04-28
|
| 929534
|
|
MOZ_CRASH in signaling_unittest
|
Core
|
WebRTC: Signaling
|
jib
|
RESO
|
FIXE
|
2013-11-07
|
| 1140773
|
|
Intermittent js1_5/Array/regress-474529.js | (args: "--baseline-eager --no-fpu")
|
Core
|
JavaScript: GC
|
jimb
|
RESO
|
FIXE
|
2018-10-01
|
| 1146416
|
|
NS_OpenAnonymousTemporaryFile() runs main thread code when run off the main thread
|
Core
|
IPC
|
jld
|
RESO
|
FIXE
|
2017-03-14
|
| 1703191
|
|
Intermittent ThreadSanitizer: heap-use-after-free /builds/worker/checkouts/gecko/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:970:3 in IPC::Channel::CloseClientFileDescriptor()
|
Core
|
IPC
|
jld
|
RESO
|
FIXE
|
2021-11-22
|
| 1750679
|
|
heap-use-after-free of VRProcessParent
|
Core
|
WebVR
|
jld
|
RESO
|
FIXE
|
2024-05-30
|
| 1275582
|
|
TSan: data race security/nss/lib/freebl/sha_fast.c:176 SHA1_End
|
Core
|
Security: PSM
|
jseward
|
RESO
|
FIXE
|
2017-01-05
|
| 1751945
|
|
Windows Crash in [@ mozilla::a11y::MsaaAccessible::GetChildIDFor]
|
Core
|
Disability Access AP
|
jteh
|
RESO
|
FIXE
|
2023-10-17
|
| 878703
|
|
Cleanup usage of IO thread only objects
|
Core
|
Storage: IndexedDB
|
jvarga
|
RESO
|
FIXE
|
2014-11-19
|
| 1161063
|
|
Getting a stored MutableFile out of IndexedDB on a worker doesn't work
|
Core
|
Storage: IndexedDB
|
jvarga
|
RESO
|
FIXE
|
2016-06-21
|
| 1789075
|
|
Intermittent Assertion failure: IsIdle(oldState), at /builds/worker/checkouts/gecko/xpcom/ds/PLDHashTable.h:142
|
Core
|
DOM: File
|
jvarga
|
RESO
|
FIXE
|
2023-01-16
|
| 1856091
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:350:36 in operator!
|
Core
|
DOM: File
|
jvarga
|
RESO
|
FIXE
|
2024-04-28
|
| 1680410
|
|
Hit MOZ_CRASH(WorkletGlobalScope not thread-safe) at /builds/worker/checkouts/gecko/xpcom/base/nsISupportsImpl.cpp:41
|
Core
|
Web Audio
|
karlt
|
RESO
|
FIXE
|
2021-06-11
|
| 1858509
|
|
Use-after-free crash in [@ mozilla::MediaSourceTrackDemuxer::HasManager]
|
Core
|
Audio/Video: Playbac
|
karlt
|
RESO
|
FIXE
|
2024-04-28
|
| 1511054
|
|
AddressSanitizer: heap-use-after-free [@ mozilla::layers::APZSampler::~APZSampler] with WRITE of size 8
|
Core
|
Graphics: Layers
|
kats
|
RESO
|
FIXE
|
2024-05-30
|
| 1683439
|
|
ThreadSanitizer: data race [@ AudioCallbackDriver::MixerCallback] vs. [@ AudioCallbackDriver::Init]
|
Core
|
Web Audio
|
kinetik
|
RESO
|
FIXE
|
2021-11-22
|
| 1829252
|
|
ThreadSanitizer: data race [@ mozilla::nsAvailableMemoryWatcherBase::OnUnloadAttemptCompleted] vs. [@ mozilla::CreateAvailableMemoryWatcher]
|
Core
|
XPCOM
|
kwright
|
RESO
|
FIXE
|
2024-04-28
|
| 1826875
|
|
Crash in [@ mozilla::ipc::WeakActorLifecycleProxy::Get]
|
Core
|
IPC
|
lissyx+mozillians
|
RESO
|
FIXE
|
2023-10-17
|
| 1771159
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/gfx/cairo/cairo/src/cairo-list-inline.h:150:43 in _cairo_list_del
|
Core
|
Graphics: Canvas2D
|
lsalzman
|
RESO
|
FIXE
|
2023-01-16
|
| 1005991
|
|
crash in NS_CycleCollectorSuspect3 under mozilla::storage::Statement::internalFinalize(bool)
|
Toolkit
|
Storage
|
mak
|
RESO
|
FIXE
|
2016-07-02
|
| 1165710
|
|
Crash when calling CanvasRenderingContext2D.drawImage many times on OS X.
|
Core
|
Graphics: Canvas2D
|
matt.woodrow
|
RESO
|
FIXE
|
2016-07-02
|
| 1664831
|
|
ThreadSanitizer: data race [@ assign_assuming_AddRef] vs. [@ get] ([@ mozilla::layers::ImageClientSingle::UpdateImage] vs [@ operator=<mozilla::layers::SyncObjectClient>]
|
Core
|
Graphics
|
matt.woodrow
|
RESO
|
FIXE
|
2021-04-04
|
| 1196237
|
|
nsHostResolver thread is still running late in shutdown
|
Core
|
Networking
|
mcmanus
|
RESO
|
FIXE
|
2016-07-02
|
| 1676812
|
|
Crash in [@ mozilla::telemetry::Timers::AnnotateHang]
|
Toolkit
|
Telemetry
|
mconley
|
RESO
|
FIXE
|
2021-04-04
|
| 1158664
|
|
Crash [@ ElfLoader::DebuggerHelper::Add(ElfLoader::link_map] Android 4.3/4.4 webappstartup crash
|
Firefox for Android
|
General
|
mh+mozilla
|
RESO
|
WORK
|
2020-12-21
|
| 1186160
|
|
WebSocketChannel accesses nsDocShell and nsDocument off the main thread
|
Core
|
Networking: WebSocke
|
michal.novotny
|
RESO
|
FIXE
|
2016-07-02
|
| 1772463
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/widget/VsyncDispatcher.cpp:129:7 in mozilla::VsyncDispatcher::NotifyVsync(mozilla::VsyncEvent const&)
|
Core
|
Graphics
|
mstange.moz
|
RESO
|
FIXE
|
2022-07-24
|
| 1678463
|
|
Intermittent netwerk/test/unit/test_ping_aboutnetworking.js | application crashed [@ nsAutoOwningEventTarget::AssertCurrentThreadOwnsMe(char const*) const]
|
Core
|
IPC
|
nika
|
RESO
|
FIXE
|
2021-11-22
|
| 1687391
|
|
Race Condition in ThreadSafeWeakPtr
|
Core
|
MFBT
|
nika
|
RESO
|
FIXE
|
2021-11-22
|
| 1713773
|
|
Crash in [@ nsThreadManager::ReleaseThread] during shutdown
|
Core
|
XPCOM
|
nika
|
RESO
|
FIXE
|
2023-01-16
|
| 1747526
|
|
heap-use-after-free of TaskController
|
Core
|
XPCOM
|
nika
|
RESO
|
FIXE
|
2024-07-11
|
| 1842658
|
|
Clean up some manual AddRef/Release implementations
|
Core
|
XPCOM
|
nika
|
RESO
|
FIXE
|
2024-01-04
|
| 1128061
|
|
Assertion failure: !ion || ion == ((js::jit::IonScript *)0x1), at jsscript.h
|
Core
|
JavaScript Engine: J
|
nobody
|
RESO
|
WORK
|
2017-11-15
|
| 1154873
|
|
GMPDecryptorParent::Shutdown() sends a message from the wrong thread
|
Core
|
Audio/Video
|
nobody
|
RESO
|
INCO
|
2020-01-09
|
| 1488737
|
|
Race Condition in downloadAddonToTemporaryFile()
|
Firefox
|
Normandy Client
|
nobody
|
RESO
|
FIXE
|
2020-02-16
|
| 1491905
|
|
AddressSanitizer: attempting double-free on 0x129b57110010 in thread T16777215: during shutdown after running dom/canvas/test/webgl-conf/generated/test_conformance__uniforms__uniform-samplers-test.html
|
Core
|
XPCOM
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
| 1540709
|
|
Intermittent AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/RefPtr.h:88:27 in RefPtr
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
DUPL
|
2023-10-23
|
| 1565594
|
|
Intermittent windows xpcshell | application crashed [@ mozilla::ipc::ProcessLink::OnChannelConnectError()]
|
Core
|
IPC
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1649765
|
|
Crash in [@ mozilla::dom::ScriptLoader::EncodeBytecode]
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
DUPL
|
2020-08-12
|
| 1660561
|
|
Assertion failure: !_owningThread || _owningThread->IsCurrentThread() (WeakPtr accessed from multiple threads)
|
Core
|
Panning and Zooming
|
nobody
|
RESO
|
FIXE
|
2020-12-18
|
| 1671941
|
|
Crash in [@ arena_dalloc [clone .llvm.6977559347492001983] | webrender::picture::PictureUpdateState::update]
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1676343
|
|
Hard to explain macOS-specific use-after-free crashes on macOS 10.15 and older
|
Core
|
Memory Allocator
|
nobody
|
RESO
|
FIXE
|
2023-03-03
|
| 1680902
|
|
Intermittent <test-name> | application crashed [@ mozilla::ipc::IProtocol::~IProtocol()]
|
Core
|
IPC
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1684140
|
|
heap-use-after-free in [@ qcms_transform_data]
|
Core
|
Graphics: ImageLib
|
nobody
|
RESO
|
WORK
|
2024-06-07
|
| 1686153
|
|
ThreadSanitizer: data race [@ SkARGB32_Black_Blitter::blitAntiH] vs. [@ mozilla::layers::MemoryTextureData::Create]
|
Core
|
Graphics: Layers
|
nobody
|
RESO
|
DUPL
|
2021-03-30
|
| 1686637
|
|
ThreadSanitizer: data race [@ bw_pt_rect_32_hair_proc] vs. [@ memcpy]
|
Core
|
Graphics
|
nobody
|
RESO
|
DUPL
|
2021-03-30
|
| 1704225
|
|
ThreadSanitizer: data race [@ __tsan_atomic8_load] vs. [@ free]
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
DUPL
|
2024-06-07
|
| 1720533
|
|
Crash in [@ RtlEnterCriticalSection | mozilla::RecursiveMutex::LockInternal] in AudioSink::NotifyAudioNeeded
|
Core
|
Audio/Video
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
| 1729422
|
|
Crash [@ RefPtr<nsCycleCollector>::operator!] through [@ mozilla::dom::indexedDB::(anonymous namespace)::FactoryOp::PermissionRetry]
|
Core
|
Storage: IndexedDB
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1739504
|
|
ThreadSanitizer: data race [@ selectors::matching::matches_complex_selector_internal::_$u7b$$u7b$closure$u7d$$u7d$] vs. [@ style::traversal::recalc_style_at]
|
Core
|
CSS Parsing and Comp
|
nobody
|
RESO
|
INCO
|
2024-02-10
|
| 1743214
|
|
ThreadSanitizer: data race [@ free] vs. [@ memcpy]
|
Core
|
DOM: File
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1746546
|
|
ThreadSanitizer: data race [@ mmap] vs. [@ pthread_mutex_init]
|
Core
|
Graphics: WebGPU
|
nobody
|
RESO
|
WORK
|
2023-02-06
|
| 1759187
|
|
Possible race condition when clicking Measure multiple times on the about:memory page
|
Toolkit
|
about:memory
|
nobody
|
RESO
|
INVA
|
2024-05-30
|
| 1770565
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/BaseRect.h:210:30 in UnionRect
|
Core
|
Graphics: ImageLib
|
nobody
|
RESO
|
DUPL
|
2023-05-22
|
| 1790222
|
|
TSAN failures in WorkerScriptLoader::ShutdownScriptLoader()/CancelMainThread()
|
Core
|
DOM: Workers
|
nobody
|
RESO
|
FIXE
|
2023-03-30
|
| 1792241
|
|
ThreadSanitizer: data race [@ IncrementGeneration] vs. [@ gfxUserFontSet::IncrementGeneration]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
DUPL
|
2023-06-12
|
| 1792619
|
|
ThreadSanitizer: data race /builds/worker/checkouts/gecko/xpcom/ds/nsAtomTable.cpp:105:3 in Destroy
|
Core
|
XPCOM
|
nobody
|
RESO
|
DUPL
|
2024-05-30
|
| 1796706
|
|
ThreadSanitizer: data race [@ mozilla::dom::FontFaceImpl::GetUnicodeRangeAsCharacterMap] vs. [@ mozilla::dom::FontFaceImpl::SetDescriptor]
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
DUPL
|
2023-06-12
|
| 1797392
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/mozglue/misc/Mutex_posix.cpp:96:3 in mutexLock
|
Core
|
WebRTC
|
nobody
|
RESO
|
DUPL
|
2023-08-01
|
| 1803254
|
|
Intermittent SUMMARY: AddressSanitizer: access-violation /builds/worker/checkouts/gecko/xpcom/base/nsISupportsImpl.cpp:41 in nsAutoOwningThread::AssertCurrentThreadOwnsMe
|
Core
|
Internationalization
|
nobody
|
RESO
|
DUPL
|
2023-08-01
|
| 1818371
|
|
Intermittent [tier 2] telemetry/marionette/tests/client/test_shutdown_pings_succeed.py TestShutdownPingsSucced.test_shutdown_pings_succeed_pingsender1 | application crashed [@ nsAutoOwningThread::AssertCurrentThreadOwnsMe(char const*) const]
|
Core
|
Storage: Quota Manag
|
nobody
|
RESO
|
DUPL
|
2024-02-20
|
| 1826684
|
|
ThreadSanitizer: data race [@ nsWindow::GdkCeiledScaleFactor] vs. [@ nsWindow::GdkCeiledScaleFactor] triggered by user interaction with browser chrome
|
Core
|
Widget: Gtk
|
nobody
|
RESO
|
DUPL
|
2023-07-21
|
| 1829251
|
|
Crash in [@ nsLanguageAtomService::GetLocaleLanguage]
|
Core
|
Graphics: Canvas2D
|
nobody
|
RESO
|
WORK
|
2024-04-29
|
| 1843298
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/StaticPtr.h:110:27 in get
|
Core
|
Storage: IndexedDB
|
nobody
|
RESO
|
DUPL
|
2024-03-19
|
| 1847291
|
|
ThreadSanitizer: data race [@ nsWindow::GdkCeiledScaleFactor] vs. [@ nsWindow::GdkCeiledScaleFactor]
|
Core
|
Widget: Gtk
|
nobody
|
RESO
|
DUPL
|
2023-08-04
|
| 1849662
|
|
ThreadSanitizer: data race [@ SizeTo] vs. [@ nsWindow::GetTitlebarRect]
|
Core
|
Widget: Gtk
|
nobody
|
RESO
|
FIXE
|
2024-02-26
|
| 1851858
|
|
ThreadSanitizer: data race [@ nsWindow::IsMapped] vs. [@ nsWindow::OnMotionNotifyEvent]
|
Core
|
Widget: Gtk
|
nobody
|
RESO
|
DUPL
|
2024-03-26
|
| 1183954
|
|
"Hit MOZ_CRASH(nsStructuredCloneContainer not thread-safe)" with Notification from Worker
|
Core
|
DOM: Workers
|
nsm.nikhil
|
RESO
|
FIXE
|
2015-11-04
|
| 817841
|
|
Race condition deleting nsDOMMediaStream via proxying to MainThread
|
Core
|
WebRTC: Audio/Video
|
rjesup
|
RESO
|
FIXE
|
2014-11-19
|
| 1193038
|
|
UAF in Telemetry::Accumulate(); code appears to not be thread-safe
|
Toolkit
|
Telemetry
|
rjesup
|
RESO
|
FIXE
|
2016-07-02
|
| 1740767
|
|
Clean up naming and mutex handling in DataChannels
|
Core
|
WebRTC: Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-26
|
| 1746898
|
|
DOM XHR doesn't lock when generating a memory report
|
Core
|
DOM: Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1746905
|
|
Fix a number of locking issues in dom/media
|
Core
|
Audio/Video
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1746907
|
|
Fix a number of locking issues in GMP support
|
Core
|
Audio/Video: GMP
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1746917
|
|
Clean up locking in MediaTrackGraph
|
Core
|
Audio/Video: MediaSt
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1747346
|
|
Missing an misplaced locks in nsSocketTransport2.cpp
|
Core
|
XPCOM
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1748759
|
|
Clean up some locking in IPC
|
Core
|
IPC
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1749051
|
|
Missing lock in CompositorBridgeParent::FinishShutdown
|
Core
|
Graphics: Layers
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1749062
|
|
A number of missing locks in imgFrame.cpp
|
Core
|
Graphics: ImageLib
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1749214
|
|
Various locking issues with nsHttpConnectionMgr
|
Core
|
XPCOM
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1749610
|
|
Minor cleanup of locking for EventQueues
|
Core
|
XPCOM
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1756010
|
|
Clean up HttpChannelChild
|
Core
|
Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1756017
|
|
Clean up ChannelEventQueue
|
Core
|
Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1757213
|
|
Missing lock accessing mMaxMessageSize
|
Core
|
WebRTC: Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1757258
|
|
Missing lock in CacheFileUtils
|
Core
|
Networking
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1757477
|
|
Missing lock in nsThreadManager
|
Core
|
XPCOM
|
rjesup
|
RESO
|
FIXE
|
2022-08-27
|
| 1761771
|
|
Missing lock in CollectReports in AudioBuffer.cpp
|
Core
|
Web Audio
|
rjesup
|
RESO
|
FIXE
|
2022-05-03
|
| 1762469
|
|
Fix some locking issues in xpcom memory reporters
|
Core
|
XPCOM
|
rjesup
|
RESO
|
FIXE
|
2023-01-16
|
| 1591334
|
|
heap-use-after-free in SetOnstorage
|
Core
|
Privacy: Anti-Tracki
|
smaug
|
RESO
|
FIXE
|
2024-05-30
|
| 1643677
|
|
Crash in [@ mozilla::dom::EventSourceImpl::DispatchAllMessageEvents]
|
Core
|
DOM: Networking
|
smaug
|
RESO
|
FIXE
|
2020-12-18
|
| 1724107
|
|
ThreadSanitizer: data race [@ Free] vs. [@ free] with nsTimerEvent during shutdown
|
Core
|
XPCOM
|
smaug
|
RESO
|
FIXE
|
2022-08-26
|
| 1837993
|
|
AddressSanitizer: heap-use-after-free [@ mozilla::dom::CanonicalBrowsingContext::NotifyOnHistoryReload] with READ of size 8
|
Core
|
DOM: Navigation
|
smaug
|
RESO
|
FIXE
|
2024-05-30
|
| 1743221
|
|
ThreadSanitizer: data race [@ AddCompositableRef] vs. [@ ReleaseCompositableRef]
|
Core
|
Graphics: WebRender
|
sotaro.ikeda.g
|
RESO
|
FIXE
|
2022-08-26
|
| 1790188
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/layers/TextureHost.h:578:5 in ReleaseCompositableRef
|
Core
|
Graphics: WebRender
|
sotaro.ikeda.g
|
RESO
|
FIXE
|
2023-01-16
|
| 1839235
|
|
ThreadSanitizer: data race [@ mozilla::layers::VideoBridgeChild::ActorDestroy] vs. [@ mozilla::KnowsCompositorVideo::GetTextureForwarder] on mCanSend
|
Core
|
Graphics
|
sotaro.ikeda.g
|
RESO
|
FIXE
|
2024-01-03
|
| 1482178
|
|
Assertion failure: CurrentThreadCanAccessZone(zone), at js/src/gc/Cell.h:390 with evalInWorker and nursery strings
|
Core
|
JavaScript: GC
|
sphink
|
RESO
|
FIXE
|
2019-08-07
|
| 1825170
|
|
ThreadSanitizer: data race [@ mozilla::widget::WaylandDispatchDisplays] vs [@ mozilla::widget::WaylandDisplayGet]
|
Core
|
Widget: Gtk
|
stransky
|
RESO
|
FIXE
|
2023-10-17
|
| 1033121
|
|
Race in nsTimerEvent destructor
|
Core
|
XPCOM
|
suro001
|
RESO
|
FIXE
|
2016-06-04
|
| 905370
|
|
Data race on js::SelfHostedClass::head (in JSRuntime::finishSelfHosting())
|
Core
|
JavaScript Engine
|
till
|
RESO
|
FIXE
|
2014-05-05
|
| 1376722
|
|
Hit MOZ_CRASH(imgCacheValidator not thread-safe) at nsISupportsImpl.cpp:43
|
Core
|
Graphics: ImageLib
|
tnikkel
|
RESO
|
FIXE
|
2017-08-28
|
| 1770464
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/gfx/BaseRect.h:210:30 in UnionRect
|
Core
|
Graphics: ImageLib
|
tnikkel
|
RESO
|
FIXE
|
2023-01-16
|
| 1444588
|
|
Usage of ClearOnShutDown introduced in bug 1425462 is not safe.
|
Core
|
DOM: Core & HTML
|
tom
|
RESO
|
FIXE
|
2019-03-13
|
| 1822354
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/checkouts/gecko/netwerk/protocol/http/nsHttpTransaction.cpp:2967:17 in GetNetworkAddresses
|
Core
|
Networking: HTTP
|
valentin.gosu
|
RESO
|
FIXE
|
2023-10-17
|
| 1801833
|
|
Intermittent SUMMARY: ThreadSanitizer: data race /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:311:36 in operator!
|
Core
|
DOM: Workers
|
ystartsev
|
RESO
|
FIXE
|
2023-07-17
|
| 1660293
|
|
Assertion failure: lock_.ownedByCurrentThread(), at gc/StoreBuffer.h:397
|
Core
|
JavaScript: GC
|
jcoppeard
|
VERI
|
FIXE
|
2021-08-10
|
| 1521304
|
|
Assertion failure: IsAcquired() && mOwningThread == PR_GetCurrentThread(), at xpcom/threads/BlockingResourceBase.cpp:369
|
Core
|
WebRTC: Networking
|
rjesup
|
VERI
|
FIXE
|
2020-04-06
|
| 1674278
|
|
Hit MOZ_CRASH(Promise not thread-safe) at /builds/worker/checkouts/gecko/xpcom/base/nsISupportsImpl.cpp:41
|
Core
|
DOM: Workers
|
bugmail
|
VERI
|
FIXE
|
2021-12-16
|
| 1463884
|
|
Assertion failure: NS_IsMainThread() || sServoFFILock->LockedForWritingByCurrentThread()
|
Core
|
Layout
|
jfkthame
|
VERI
|
FIXE
|
2019-08-07
|
| 1826206
|
|
ThreadSanitizer: data race [@ Close] vs. [@ nsBufferedInputStream::Fill]
|
Core
|
Networking
|
nika
|
VERI
|
FIXE
|
2023-12-06
|
| 1798591
|
|
ThreadSanitizer: data race [@ Weight] vs. [@ operator=]
|
Core
|
Graphics: Text
|
nobody
|
VERI
|
FIXE
|
2023-12-06
|
| 1453127
|
|
SEGV in mozilla::MediaEncoder::AudioTrackListener::NotifyRealtimeTrackData
|
Core
|
WebRTC: Audio/Video
|
apehrson
|
VERI
|
FIXE
|
2024-05-30
|
| 997242
|
|
crash in nsRefPtr<DeviceStorageFileDescriptor>::~nsRefPtr | libxul.so@0xa39019 | libxul.so@0xa3903f | AsyncLatencyLogger::Release()
|
Core
|
DOM: Device Interfac
|
dhylands
|
VERI
|
FIXE
|
2015-08-30
|
| 1758223
|
|
ThreadSanitizer: data race [@ UnsetFlags] vs. [@ style::gecko::wrapper::GeckoNode::flags]
|
Core
|
CSS Parsing and Comp
|
emilio
|
VERI
|
FIXE
|
2023-03-05
|
| 1665411
|
|
Hard to explain macOS-specific use-after-free crashes
|
Core
|
Memory Allocator
|
gsvelto
|
VERI
|
FIXE
|
2023-12-26
|
| 1472734
|
|
Assertion failure: js::CurrentThreadIsGCSweeping(), at js/src/gc/DeletePolicy.h:78 with OOM
|
Core
|
JavaScript Engine
|
jcoppeard
|
VERI
|
FIXE
|
2023-12-06
|
| 1823365
|
|
initialization race leading to use after free in MakeGlyphAtlas()
|
Core
|
Graphics: Text
|
jfkthame
|
VERI
|
FIXE
|
2024-05-30
|
| 1277213
|
|
Missing continuation state reset after auth dialog cancellation
|
Core
|
Networking: HTTP
|
jhorak
|
VERI
|
FIXE
|
2017-02-09
|
| 1165188
|
|
Assertion failure: js::CurrentThreadCanAccessRuntime(runtime_), at ../../../dist/include/js/HeapAPI.h:132
|
Core
|
JavaScript Engine
|
nobody
|
VERI
|
DUPL
|
2015-10-25
|
| 1154876
|
|
Flash calls PPluginModuleChild::SendSetCursor() off the main thread
|
Core Graveyard
|
Plug-ins
|
smichaud
|
VERI
|
FIXE
|
2022-05-16
|
| 980876
|
|
crash in mozilla::dom::GamepadService::NewAxisMoveEvent(unsigned int, unsigned int, double)
|
Core
|
DOM: UI Events & Foc
|
ted
|
VERI
|
FIXE
|
2019-03-13
|