369216
|
|
[FIX]Crash [@ NS_GetInnermostURI] when calling addBinding with null as the second parameter
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2007-12-17
|
373794
|
|
EXC_BAD_ACCESS crash with gif image
|
Core
|
Graphics: ImageLib
|
crowderbt
|
RESO
|
FIXE
|
2007-05-01
|
247116
|
|
Web pages bounce/shake/jump when "Bookmarks Toolbar Items" is empty and placed to right of menu bar
|
Firefox
|
Toolbars and Customi
|
dtownsend
|
RESO
|
FIXE
|
2015-04-07
|
370555
|
|
URL bar not always updated when scripts interact with about:blank windows
|
Firefox
|
Security
|
dveditz
|
RESO
|
FIXE
|
2008-09-22
|
359192
|
|
window.open(..., "dialog=yes") disables close button in popup window
|
Core
|
DOM: Core & HTML
|
jaas
|
RESO
|
FIXE
|
2007-05-30
|
371525
|
|
password trouble with multiple accounts after update to firefox 2.0.0.2 or 1.5.0.10
|
Toolkit
|
Password Manager
|
jdinbox
|
RESO
|
FIXE
|
2008-07-31
|
332771
|
|
delayed S/Mime verification broken when message opened in separate window
|
Thunderbird
|
Security
|
kaie
|
RESO
|
FIXE
|
2007-05-29
|
377017
|
|
Javascript - crash on accessing a css rule after deleteRule() [@ nsCSSSelector::ToStringInternal]
|
Core
|
CSS Parsing and Comp
|
martijn.martijn
|
RESO
|
FIXE
|
2011-06-09
|
370149
|
|
crash SEGV [@ nsArray::QueryElementAt() ] in DOM Inspector
|
Core
|
Disability Access AP
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2007-05-16
|
371124
|
|
Crash [@ LookupUCProperty] with unminimised testcase, using stirdom scriptfuzzer and xbl bindings
|
Core
|
DOM: Core & HTML
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2019-03-13
|
372576
|
|
crash [@ DoDeletingFrameSubtree] with textbox inside toolbarbutton
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2013-01-27
|
282933
|
|
Page crashes Firefox [@ nsObjectFrame::PluginNotAvailable ]
|
Core Graveyard
|
Plug-ins
|
mrbkap
|
RESO
|
FIXE
|
2022-05-16
|
377906
|
|
Bump Thunderbird version to 15012pre
|
Thunderbird
|
Build Config
|
mscott
|
RESO
|
FIXE
|
2007-04-30
|
374855
|
|
Update version strings to 1.5.0.12pre and 2.0.0.4pre
|
Firefox Build System
|
General
|
nrthomas
|
RESO
|
DUPL
|
2018-11-26
|
378958
|
|
Move NSPR pull-tag for 1.8.1.4 and 1.8.0.12
|
Firefox Build System
|
General
|
nrthomas
|
RESO
|
FIXE
|
2018-03-02
|
348492
|
|
Frames not destroyed with <mmultiscripts> and <mtd>
|
Core
|
MathML
|
rbs
|
RESO
|
FIXE
|
2007-12-17
|
369542
|
|
Crash [@ nsHTMLReflowState::ComputePadding] on branch, with partly minimised testcase from bug 363813
|
Core
|
Layout
|
roc
|
RESO
|
FIXE
|
2013-01-27
|
336574
|
|
Crash when window gets destroyed during an overflow event
|
Core
|
DOM: Events
|
smaug
|
RESO
|
FIXE
|
2007-08-17
|
336744
|
|
Crash when window gets destroyed during popuphiding event
|
Core
|
XUL
|
smaug
|
RESO
|
FIXE
|
2016-04-27
|
368501
|
|
Table Properties Windows Cut Off
|
Core
|
XUL
|
smaug
|
RESO
|
FIXE
|
2008-07-31
|
369150
|
|
Crash [@ nsHTMLFramesetFrame::GetNoResize] with dynamic changes
|
Core
|
Layout: Images, Vide
|
smaug
|
RESO
|
FIXE
|
2018-08-29
|
369249
|
|
Crash [@ nsSVGPathSegList::GetItem] with pathSegList.getItem(-1);
|
Core
|
SVG
|
smaug
|
RESO
|
FIXE
|
2007-12-13
|
350830
|
|
Remove x-u-escape encoder/decoder
|
Core
|
Internationalization
|
smontagu
|
RESO
|
FIXE
|
2007-05-30
|
372871
|
|
[da] error in netError.dtd gives XUL Dialog of Death in Thunderbird
|
Mozilla Localization
|
da / Danish
|
sskroeder
|
RESO
|
FIXE
|
2007-05-10
|
374116
|
|
Crash [@ JS_GetPrivate] with E4X
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2011-06-09
|
374193
|
|
[FIX]Crash [@ nsCSSFrameConstructor::GetFrameFor] with mtable, th and an xbl binding
|
Core
|
Layout
|
bzbarsky
|
VERI
|
FIXE
|
2011-06-09
|
363997
|
|
When using windows vista RTM, cannot load ultimateknicks.com
|
NSPR
|
NSPR
|
moco
|
VERI
|
FIXE
|
2013-07-01
|
376062
|
|
Trunk builds cannot connect with the internet on Vista RC1 / UDP / LSP / Layered Service Provider
|
NSPR
|
NSPR
|
moco
|
VERI
|
FIXE
|
2007-05-09
|
361856
|
|
Assertion failure: overwriting @ js_AddScopeProperty with certain watcher functions
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2007-05-06
|
306533
|
|
[FIX]###!!! ASSERTION: out of bounds: 'PRInt32(aIndex) >= 0 && aIndex <= length', file nsChildIterator.h, line 133
|
Core
|
Layout: Block and In
|
bzbarsky
|
VERI
|
FIXE
|
2007-05-15
|
370490
|
|
Spidermonkey 1.6 release and HEAD fail to build with JS_C_STRINGS_ARE_UTF8 due to use of cx in jsopcode.c
|
Core
|
JavaScript Engine
|
bob
|
VERI
|
FIXE
|
2007-05-08
|
374877
|
|
Update JS_GetImplementationVersion() for 1.6.1/1.7rc
|
Core
|
JavaScript Engine
|
bob
|
VERI
|
FIXE
|
2007-05-08
|
369404
|
|
Assertion failure: !SPROP_HAS_STUB_SETTER(sprop) || (sprop->attrs & JSPROP_GETTER)
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2007-12-14
|
172261
|
|
[FIX]Permission denied to call JS methods defined in Window after pressing back button
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
VERI
|
FIXE
|
2007-05-15
|
317876
|
|
Crash with evil testcase on hovering after reload with display:table-row, display:inherit
|
Core
|
Layout: Tables
|
bzbarsky
|
VERI
|
FIXE
|
2014-01-04
|
323656
|
|
[FIX]Frames with anonymous box inside cause broken inheritance
|
Core
|
Layout
|
bzbarsky
|
VERI
|
FIXE
|
2011-11-30
|
372376
|
|
Memory corruption with <tr style="display: inherit">
|
Core
|
Layout: Tables
|
bzbarsky
|
VERI
|
FIXE
|
2007-12-16
|
367121
|
|
self-modifying script detection can be circumvented
|
Core
|
JavaScript Engine
|
crowderbt
|
VERI
|
FIXE
|
2008-02-26
|
85872
|
|
Inheritance from elements with display:table-cell broken
|
Core
|
CSS Parsing and Comp
|
dbaron
|
VERI
|
FIXE
|
2007-04-27
|
351102
|
|
try/catch-guard/finally bytecode still GC-unsafe
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-06-14
|
367561
|
|
JSOP_(GET|SET)METHOD and JSOP_SETCONST assume atoms indexes < 64K
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-06-14
|
370488
|
|
GC hazard in GetProperty from jsxml.c
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-05-30
|
373072
|
|
XML.prototype.namespace() does not check for xml list
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-04-06
|
373082
|
|
Simpler sharing of XML and XMLList functions
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-05-01
|
374106
|
|
E4X XMLList.contains halts execution when there is a complex match
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-04-06
|
374112
|
|
This use of E4X setName causes "Assertion failure: !IS_EMPTY(nameqn->uri)"
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-04-06
|
374160
|
|
Crash [@ JS_InstanceOf] with E4X..@c[0] = 3
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2011-06-09
|
374163
|
|
Setting E4X's __proto__ to null causes toString to crash with a stack overflow
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-04-17
|
306902
|
|
MathML crash [@ szone_free] [@ nsUnicodeRenderingToolkit::GetTextSegmentBoundingMetrics] [@ SetFontCharsetInfo] [@ OutlineMetrics]
|
Core
|
MathML
|
jaas
|
VERI
|
FIXE
|
2008-02-08
|
376395
|
|
New version of JEP (0.9.6.1), please land on trunk and branches
|
Core Graveyard
|
Plug-ins
|
jaas
|
VERI
|
FIXE
|
2022-05-16
|
371576
|
|
Script elements added with appendChild no longer execute synchronously (was: Firefox 2.0.0.2 update breaks Backbase enabled web sites)
|
Core
|
DOM: Core & HTML
|
jonas
|
VERI
|
FIXE
|
2019-03-13
|
376987
|
|
XSS using addEventListener
|
Core
|
DOM: Core & HTML
|
jstenback+bmo
|
VERI
|
FIXE
|
2019-03-13
|
377356
|
|
Security checks in nsEventReceiverSH::AddEventListenerHelper can be circumvented
|
Core
|
DOM: Core & HTML
|
jstenback+bmo
|
VERI
|
FIXE
|
2019-03-13
|
335801
|
|
Loading a cert URL can make an http page look like https (gold address bar, lock icon)
|
Core Graveyard
|
Security: UI
|
kaie
|
VERI
|
FIXE
|
2016-09-27
|
370061
|
|
OpenBSD: sync with reality, they've had GCC3 for a long time
|
Core
|
XPCOM
|
martynas
|
VERI
|
FIXE
|
2007-05-09
|
370063
|
|
OpenBSD: sync with reality - they define uint32_t and bool
|
Core Graveyard
|
Plug-ins
|
martynas
|
VERI
|
FIXE
|
2022-05-16
|
362708
|
|
Crash [@ nsGfxScrollFrameInner::GetActualScrollbarSizes] on print preview with branch builds with unminimised testcase
|
Core
|
Layout
|
MatsPalmgren_bugz
|
VERI
|
FIXE
|
2011-06-13
|
373882
|
|
Crash [@ nsMathMLContainerFrame::FixInterFrameSpacing] on print preview with mtable
|
Core
|
MathML
|
MatsPalmgren_bugz
|
VERI
|
FIXE
|
2007-04-26
|
367630
|
|
Crash with use of sharp variable in function [@ js_PCToLineNumber]
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2011-06-13
|
375711
|
|
"Assertion failure: c <= cs->length" [@ AddCharacterRangeToCharSet] with /[Q-b]/i
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2011-06-13
|
280610
|
|
Kids of fieldset should have it as style context parent
|
Core
|
Layout: Form Control
|
nobody
|
VERI
|
FIXE
|
2007-04-27
|
329394
|
|
XUL textbox in XHTML page: focusing gives document.commandDispatcher has no properties
|
Toolkit
|
UI Widgets
|
sdwilsh
|
VERI
|
FIXE
|
2007-05-21
|
316569
|
|
Memory leak in XTF when using nsXTFInterfaceAggregator
|
Core Graveyard
|
XTF
|
smaug
|
VERI
|
FIXE
|
2014-08-11
|
378325
|
|
Crash [@ PresShell::FlushPendingNotifications] when removing window on focus and then reappearing again
|
Core
|
DOM: UI Events & Foc
|
smaug
|
VERI
|
FIXE
|
2019-03-13
|
377215
|
|
Crash when loading Investools ProphetCharts since JEP 0.9.6.1 landed
|
Plugins Graveyard
|
Java (Java Embedding
|
smichaud
|
VERI
|
FIXE
|
2016-04-28
|
377779
|
|
New version of JEP (0.9.6.2), please land on trunk and branches
|
Plugins Graveyard
|
Java (Java Embedding
|
smichaud
|
VERI
|
FIXE
|
2016-04-28
|
368859
|
|
large sharp variable numbers are silently rounded down
|
Core
|
JavaScript Engine
|
sync2d
|
VERI
|
FIXE
|
2007-04-20
|