317502
|
|
Crash [@ nsIFrame::GetPosition() line 664]
|
Core
|
Layout
|
dbaron
|
RESO
|
FIXE
|
2011-06-13
|
309075
|
|
Right-clicking a partially off-screen link shouldn't scroll the page
|
Core
|
DOM: UI Events & Foc
|
masayuki
|
RESO
|
FIXE
|
2019-03-13
|
314231
|
|
If link target URL has non-ASCII char that is not encoded by UTF-8, the default file name is always escaped at "Save Link Target As..."
|
SeaMonkey
|
UI Design
|
masayuki
|
RESO
|
FIXE
|
2006-01-22
|
315434
|
|
Security error with remote <xul:tabbox>: can't switch tabs if chrome has focus
|
Toolkit
|
UI Widgets
|
mrbkap
|
RESO
|
FIXE
|
2006-03-12
|
321558
|
|
document.write not Honoring TITLE
|
Core
|
DOM: Core & HTML
|
mrbkap
|
RESO
|
FIXE
|
2019-03-13
|
323048
|
|
"Copy Folder Location" does not work anymore
|
SeaMonkey
|
MailNews: Message Di
|
bugzilla
|
RESO
|
FIXE
|
2006-08-20
|
301678
|
|
[FIX]xml object parsed from string from flash throws permission denied error when accessed
|
Core
|
XML
|
bzbarsky
|
RESO
|
FIXE
|
2006-03-12
|
312415
|
|
Selected images (from a selection of the document to print) are black
|
Core
|
Printing: Output
|
bzbarsky
|
RESO
|
FIXE
|
2006-05-18
|
318473
|
|
[FIX]Page with <script type="[whitespace]"> in it never finishes loading
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
321195
|
|
Light/dark motifs randomly work and change in Firefox 1.5
|
Core
|
CSS Parsing and Comp
|
dbaron
|
RESO
|
FIXE
|
2006-01-11
|
318618
|
|
Unchecked malloc in CertReader
|
Core Graveyard
|
Installer: XPInstall
|
dveditz
|
RESO
|
FIXE
|
2015-12-11
|
252201
|
|
In <pageInfoOverlay.js>, "Warning: reference to undefined property elts[i][aAttrName]"
|
SeaMonkey
|
Page Info
|
florian
|
RESO
|
FIXE
|
2006-08-20
|
309044
|
|
Flashplayer 8 "Bad NPObject as private data!"
|
Core Graveyard
|
Plug-ins
|
jstenback+bmo
|
RESO
|
FIXE
|
2022-05-16
|
313988
|
|
[10.3] Positioned select drop-down doesn't work
|
Core Graveyard
|
Widget: Mac
|
mark
|
RESO
|
FIXE
|
2009-11-21
|
320488
|
|
crash [@ nsSHistory::EvictWindowContentViewers]
|
Core
|
DOM: Navigation
|
marria
|
RESO
|
FIXE
|
2011-06-09
|
319203
|
|
Can't have install.js and install.rdf in the same XPI file
|
Firefox
|
Installer
|
mozilla
|
RESO
|
FIXE
|
2006-01-12
|
313365
|
|
Bidi: RTL textareas with a vertical scrollbar always have a horizontal scrollbar as well
|
Core
|
Layout: Form Control
|
nobody
|
RESO
|
FIXE
|
2008-04-07
|
299343
|
|
Can't copy and paste into the beginning of a line
|
Core
|
DOM: Editor
|
peterv
|
RESO
|
FIXE
|
2010-09-17
|
306349
|
|
Adding horizontal padding to the anonymous div inside a textarea breaks RTL textareas
|
Core
|
Layout
|
roc
|
RESO
|
FIXE
|
2008-04-07
|
208843
|
|
large downloads fail (partial file downloaded)
|
Core Graveyard
|
Networking: FTP
|
sfraser_bugs
|
RESO
|
FIXE
|
2024-02-08
|
314208
|
|
'Check for Updates...' doesn't check for extension updates
|
Firefox Graveyard
|
Help Documentation
|
steffen.wilberg
|
RESO
|
FIXE
|
2016-04-22
|
314814
|
|
Not all links that open new windows are diverted
|
Firefox Graveyard
|
Help Documentation
|
steffen.wilberg
|
RESO
|
FIXE
|
2016-04-22
|
312550
|
|
Incorrect wrapping in RTL textarea with horizontal scrollbar
|
Core
|
Layout: Text and Fon
|
uriber
|
RESO
|
FIXE
|
2008-07-31
|
319914
|
|
Pasting the character 173 (0xAD, ­) into textbox causes crash [@ nsFontMetricsWin::ResolveForwards]
|
Core Graveyard
|
GFX: Win32
|
win32
|
RESO
|
FIXE
|
2009-01-22
|
316885
|
|
CVE-2006-0292 Unrooted access in jsinterp.c
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-04-18
|
319391
|
|
"eval('...') = ..." gives "invalid assignment lefthand side" as a compile-time error instead of as a runtime error
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2011-08-05
|
320032
|
|
Parenthesization dereferences ECMA Reference type, incorrectly
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-01-12
|
320119
|
|
Setting this.name in the prototype of an inherited object no longer works.
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-01-14
|
321549
|
|
E4X: inconsistencies in the use of {} syntax
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-07-07
|
321971
|
|
JSOP_FINDNAME replaces JSOP_BINDNAME, does not prefix it
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-07-07
|
322312
|
|
CVE-2006-0299 * ("AnyName") entrainment and (given future chrome use of e4x) access control hazard
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-02-02
|
322499
|
|
runtime->anynameObject + runtime->functionNamespaceObject circular dependency
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-07-07
|
317265
|
|
[FIX]Crash when following the steps in this evil testcase, using float:right [@ nsINodeInfo::GetDocument]
|
Core
|
XBL
|
bzbarsky
|
VERI
|
FIXE
|
2006-08-15
|
317855
|
|
[FIX]Crash on reload with evil xul testcase, using -moz-box, -moz-grid-group, float: left [@ nsIFrame::GetNextSibling]
|
Core
|
Layout
|
bzbarsky
|
VERI
|
FIXE
|
2011-06-09
|
317934
|
|
CVE-2006-0294 [FIX]Crash with evil testcase, switching from position:relative to static
|
Core
|
Layout
|
bzbarsky
|
VERI
|
FIXE
|
2009-04-24
|
305970
|
|
Certain UI operations (opening dialogs, drag and drop) cause refresh, prolonged hang (CPU at 100%)
|
Core Graveyard
|
GFX: Gtk
|
dbaron
|
VERI
|
FIXE
|
2009-01-22
|
322045
|
|
CVE-2006-0293 GC hazard during function allocation.
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-08-29
|
314222
|
|
If link target URL has non-ASCII char that is not encoded by UTF-8, the default file name is always escaped at "Save Link As..."
|
Firefox
|
File Handling
|
masayuki
|
VERI
|
FIXE
|
2006-03-12
|
316049
|
|
crash on GM Canada web site [@ nsHTMLDocument::GetPixelDimensions 936bc96d]
|
Core
|
DOM: Core & HTML
|
mrbkap
|
VERI
|
FIXE
|
2019-03-13
|
319296
|
|
memory corruption via QueryInterface() (CVE-2006-0295)
|
Core
|
DOM: Core & HTML
|
mrbkap
|
VERI
|
FIXE
|
2019-03-13
|
320172
|
|
Crash when evaluating scripts in content loaded with Prototype Ajax [@ Variables]
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2011-06-09
|
179307
|
|
Sheet being displayed causes backwards typing in other windows' form fields
|
Camino Graveyard
|
HTML Form Controls
|
sfraser_bugs
|
VERI
|
FIXE
|
2006-03-08
|
310919
|
|
CSS in userContent.css crashes on XML (rss v2.0) display
|
Core
|
Layout
|
bzbarsky
|
VERI
|
FIXE
|
2018-08-29
|
319847
|
|
CVE-2006-0296 XULDocument.persist() allows an attacker to inject bogus RDF data into localstore.rdf
|
Core
|
Security
|
mrbkap
|
VERI
|
FIXE
|
2007-04-01
|
319872
|
|
CVE-2006-0297 probably an integer overflow in jsxml.c
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2006-04-18
|
313929
|
|
E4X: Sequence ]] should be allowed inside CDATA section
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-01-12
|
316862
|
|
'Disassemble to bytecode' is a bit broken
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-07-07
|
320854
|
|
o.hasOwnProperty('length') lies when o has function in proto chain
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-04-04
|
105894
|
|
Clicking a partially off-screen link shouldn't scroll the page
|
Core
|
DOM: UI Events & Foc
|
masayuki
|
VERI
|
FIXE
|
2019-03-13
|
316990
|
|
window.hasOwnProperty('functionname') broken by split windows
|
Core
|
DOM: Core & HTML
|
mrbkap
|
VERI
|
FIXE
|
2019-03-13
|
320008
|
|
e4x - quote escaped wrongly, works as expected in rhino.
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2006-07-07
|
323387
|
|
"late-appearing" tooltip/child window causes wrong window to be in front/misplaced focus
|
Camino Graveyard
|
General
|
sfraser_bugs
|
VERI
|
FIXE
|
2006-02-21
|
319004
|
|
CVE-2005-4134 overlong document.title setting can corrupt history data, causing non-responsive temporary hang (crash?) on subsequent startups
|
Core Graveyard
|
History: Global
|
ajschult784
|
VERI
|
FIXE
|
2018-08-01
|
315210
|
|
Using munder:hover {display:-moz-box;} crashes [@ nsBox::SyncLayout] Mozilla
|
Core
|
MathML
|
bernd_mozilla
|
VERI
|
FIXE
|
2006-08-15
|
316636
|
|
Crash [@ nsRect::nsRect(const nsRect & {...}) line 56]
|
Core
|
Layout
|
bernd_mozilla
|
VERI
|
FIXE
|
2011-06-13
|
316821
|
|
Crash with moz-border-radius and small font-size
|
Core
|
Web Painting
|
bernd_mozilla
|
VERI
|
FIXE
|
2018-08-29
|
317714
|
|
Crash loading www.cnn.com [@ js_Interpret]
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2011-06-13
|
318922
|
|
E4X: invalid syntax to use a memory variable crashes Firefox
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-07-07
|
322430
|
|
Remove "deprecated with statement usage" strict warning
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2009-09-24
|
306067
|
|
null pointer dereference crash [@ nsAutoCompleteController::HandleKeyNavigation]
|
Toolkit
|
Autocomplete
|
bryner
|
VERI
|
FIXE
|
2007-12-01
|
318969
|
|
[FIX]crash [@ js_LinkFunctionObject b429c37f] jsfun.c line 2028
|
Core
|
XPConnect
|
bzbarsky
|
VERI
|
FIXE
|
2011-06-09
|
288945
|
|
clicking links in client-side image maps scrolls the page to the bottom of the imagemap, making it impossible to click some imagemap links
|
Core
|
DOM: UI Events & Foc
|
events
|
VERI
|
FIXE
|
2019-03-13
|
300765
|
|
Strange flickering with graphical links in this testcase
|
Core
|
DOM: Events
|
events
|
VERI
|
FIXE
|
2006-03-12
|
313807
|
|
Mac: Unicode keyboard layouts stop working after visiting a page with <applet> tag
|
Core Graveyard
|
GFX: Mac
|
jaas
|
VERI
|
FIXE
|
2011-08-05
|
315637
|
|
New version of JEP (0.9.5+b), please land on trunk and branch
|
Core Graveyard
|
Plug-ins
|
jaas
|
VERI
|
FIXE
|
2022-05-16
|
320770
|
|
ecma/Math/15.8.2.13 - Math.pow on MacOSX
|
Core
|
JavaScript Engine
|
jaas
|
VERI
|
FIXE
|
2006-07-07
|
308120
|
|
Infinite recursion crash in frame construction involving XBL
|
Core
|
XBL
|
jonas
|
VERI
|
FIXE
|
2007-12-17
|
318276
|
|
Crash [@ nsXULDocument::LoadOverlay ]
|
Core
|
XUL
|
jwalden
|
VERI
|
FIXE
|
2011-06-09
|
311399
|
|
Crash [@ SetOrigin] during rendering context destruction [Mac]
|
Core Graveyard
|
GFX: Mac
|
mark
|
VERI
|
FIXE
|
2011-08-05
|
317289
|
|
hang (never finish/freeze) printing selection in iframe
|
Core
|
Printing: Output
|
masayuki
|
VERI
|
FIXE
|
2006-02-15
|
315509
|
|
Crash: array_unshift doesn't handle holes properly [@ js_DeleteProperty - array_unshift]
|
Core
|
JavaScript Engine
|
moz_bug_r_a4
|
VERI
|
FIXE
|
2021-08-08
|
315797
|
|
js_Interpret uses undefined variables on recursion error
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2006-01-14
|
321928
|
|
Allow "show in finder" on in-progress downloads
|
Camino Graveyard
|
Downloading
|
nick.kreeger
|
VERI
|
FIXE
|
2006-02-16
|
322374
|
|
Crash [@ libobjc.A.dylib.227.0.0] when clearing download list
|
Camino Graveyard
|
Downloading
|
nick.kreeger
|
VERI
|
FIXE
|
2007-11-06
|
262222
|
|
Relative URLs in Live Bookmark link elements not resolved
|
Firefox
|
Bookmarks & History
|
sayrer
|
VERI
|
FIXE
|
2006-08-27
|
321487
|
|
Crash when moving caret backwards over text frame consisting of a single CR [nsTextFrame::PeekOffset]
|
Core
|
Layout: Text and Fon
|
uriber
|
VERI
|
FIXE
|
2006-03-12
|