| 353894
|
|
[FIX]Crash [@ nsBlockBandData::Init] with position:fixed on mathml when position:static !important rule is removed in mathml.css
|
Core
|
MathML
|
bzbarsky
|
RESO
|
FIXE
|
2006-12-04
|
| 353897
|
|
[FIX]Crash [@ nsMathMLContainerFrame::FixInterFrameSpacing] using position:fixed when position: static rule in mathml.css is removed
|
Core
|
MathML
|
bzbarsky
|
RESO
|
FIXE
|
2006-10-31
|
| 324474
|
|
Revoked S/MIME certificate difficult to detect in received messages
|
MailNews Core
|
Security: S/MIME
|
kaie
|
RESO
|
FIXE
|
2009-08-05
|
| 350524
|
|
Crash [@ nsTableRowFrame::CollapseRowIfNecessary] with border-collapse, visibility:collapse, colspan=0
|
Core
|
Layout: Tables
|
bernd_mozilla
|
RESO
|
FIXE
|
2011-06-13
|
| 351328
|
|
Crash [@ nsCSSRendering::PaintBackgroundWithSC] with colspan=0
|
Core
|
Layout: Tables
|
bernd_mozilla
|
RESO
|
FIXE
|
2011-06-13
|
| 347421
|
|
[mac] xforms is part of the default build
|
Release Engineering
|
General
|
build
|
RESO
|
FIXE
|
2013-08-12
|
| 307809
|
|
Crash involving nested elements with style="display: -moz-grid-group;" [@ nsGridRowLayout::GetGrid]
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-13
|
| 348836
|
|
Error reported in long line can hang JavaScript console
|
Core
|
JavaScript Engine
|
crowderbt
|
RESO
|
FIXE
|
2013-03-19
|
| 354124
|
|
Flash plugin no longer works with JavaScript disabled
|
Core Graveyard
|
Plug-ins
|
jstenback+bmo
|
RESO
|
WORK
|
2022-05-16
|
| 350370
|
|
[FIX] Crash [@ nsStyleContext::FindChildWithRules] with ::first-line, appending rows and table-cells, etc
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2013-01-26
|
| 323531
|
|
crash when deleting all attachments after(!) detaching all of them from one mail [@ CompareAttachmentPartId]
|
Thunderbird
|
Mail Window Front En
|
mkmelin+mozilla
|
RESO
|
FIXE
|
2016-02-21
|
| 351685
|
|
Total email count is set to 0 after compacting an Inbox
|
MailNews Core
|
Database
|
mozilla
|
RESO
|
FIXE
|
2008-07-31
|
| 352801
|
|
1.5.0.7 keeps asking for password
|
Thunderbird
|
General
|
mozilla
|
RESO
|
FIXE
|
2022-07-24
|
| 310267
|
|
crash [@ nsBidiPresUtils::Resolve] [@ nsCachedStyleData::GetStyleData]
|
Core
|
Layout: Text and Fon
|
smontagu
|
RESO
|
FIXE
|
2011-06-13
|
| 351501
|
|
Null deref crash [@ nsSVGUtils::CoordToFloat] with large percentage "stroke-width"
|
Core
|
SVG
|
tor
|
RESO
|
FIXE
|
2006-10-31
|
| 350238
|
|
<x/>.@*++ causes "Assertion failure: JS_UPTRDIFF(fp->sp, fp->spbase) <= depthdiff" at jsinterp.c:392
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-11-10
|
| 351116
|
|
Crash if formal parameter and inner function have the same name [@ js_DecompileFunction]
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2011-06-13
|
| 352606
|
|
Crash [@ js_GetGCThingFlags] involving post-decrement operator
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2011-06-13
|
| 352873
|
|
Assertion "JSVAL_IS_OBJECT(rval)" or "(jsval *)mark >= sp" involving finally{return} in "with"
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2007-05-16
|
| 354924
|
|
Crash [@ js_Invoke] [@ QuoteString] with export/import and setter
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2011-06-13
|
| 353704
|
|
crash (not sure what I did, could have been on blogger.com) [@ js_SetProtoOrParent] [@ xpsp2res.dll] [@ 0x20202020]
|
Core
|
XPConnect
|
dbaron
|
VERI
|
FIXE
|
2011-06-13
|
| 352271
|
|
Crash dereferencing 0xdadadada [@ ReportCompileErrorNumber] called from CheckDestructuring
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2011-06-13
|
| 325222
|
|
[FIX]Crash with evil xul/mathml testcase, involving mi display: block and eq [@ nsLineLayout::ReflowFrame]
|
Core
|
MathML
|
bzbarsky
|
VERI
|
FIXE
|
2006-10-20
|
| 355478
|
|
Crash with E4X, hasOwnProperty
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2007-05-16
|
| 313400
|
|
document.createRange().extractContents() crashes [@ nsRange::CloneContents]
|
Core
|
DOM: Core & HTML
|
ajvincent
|
VERI
|
FIXE
|
2013-04-04
|
| 353264
|
|
Crash [@ js_Execute]
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2011-06-13
|
| 355655
|
|
running script can be recompiled (CVE-2006-5463)
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2007-06-14
|
| 355982
|
|
Script("") no longer works
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2006-11-09
|
| 355569
|
|
XML.prototype.hasOwnProperty is exploitable (CVE-2006-5747)
|
Core
|
JavaScript Engine
|
general
|
VERI
|
FIXE
|
2008-10-17
|
| 351973
|
|
GC hazard with unrooted ids in Object.toSource
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-05-26
|
| 353165
|
|
GC hazard with xml_getMethod
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-05-26
|
| 354145
|
|
Wrong assumptions about immutable XML
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2006-11-10
|
| 354151
|
|
Bad assumptions about Array elements in jsxml.c
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2006-11-10
|
| 353160
|
|
1.5.0.7 does not allow text to be entered in "password" field of Java applet
|
Core Graveyard
|
Plug-ins
|
jaas
|
VERI
|
FIXE
|
2022-05-16
|
| 347591
|
|
thunderbird accountManager.size macAccountManager.size 6em too small
|
Mozilla Localization
|
en-GB / English (Uni
|
mamozrk
|
VERI
|
FIXE
|
2006-12-14
|
| 341227
|
|
Crash called from [@ nsIFrame::GetStyleData] called from nsCSSRendering::PaintBackgroundWithSC
|
Core
|
Layout: Tables
|
nobody
|
VERI
|
FIXE
|
2011-06-13
|
| 345907
|
|
Add support for missing built-in derived schemas
|
Core Graveyard
|
XForms
|
sspeiche
|
VERI
|
FIXE
|
2016-07-15
|