| 1723920
|
|
Crash [@ mozilla::dom::StorageDBThread::Get] with out-of-bounds access via IPC
|
Core
|
Storage: localStorag
|
jjalkanen
|
RESO
|
FIXE
|
2022-08-26
|
| 1725854
|
|
IPC Parent Crash [@ wgpu_core::hub::Storage$LT$T$C$I$GT$::iter::_$u7b$$u7b$closure$u7d$$u7d$] with potential use-after-free
|
Core
|
Graphics: WebGPU
|
dmalyshau
|
RESO
|
FIXE
|
2023-08-03
|
| 1729422
|
|
Crash [@ RefPtr<nsCycleCollector>::operator!] through [@ mozilla::dom::indexedDB::(anonymous namespace)::FactoryOp::PermissionRetry]
|
Core
|
Storage: IndexedDB
|
nobody
|
RESO
|
WORK
|
2023-06-25
|
| 1763634
|
|
Assertion failure: aGUIEvent->IsTrusted(), at layout/base/PresShell.cpp:6805
|
Core
|
DOM: Events
|
masayuki
|
VERI
|
FIXE
|
2022-11-20
|
| 1776658
|
|
Crash [@ std::__atomic_base<unsigned long>::load] through [@ JSObject::shape]
|
Core
|
XPConnect
|
kmaglione+bmo
|
VERI
|
FIXE
|
2023-02-28
|
| 1820389
|
|
AddressSanitizer: global-buffer-overflow [@ nsRoleMapEntry::IsOfType] with READ of size 4
|
Core
|
Disability Access AP
|
jteh
|
RESO
|
FIXE
|
2023-10-17
|
| 1820983
|
|
AddressSanitizer: global-buffer-overflow [@ mozilla::a11y::Accessible::GetLevel] with READ of size 4
|
Core
|
Disability Access AP
|
jteh
|
RESO
|
FIXE
|
2024-04-28
|
| 1828690
|
|
Assertion failure: mGroup->IsPotentiallyCrossOriginIsolated() == (Top()->GetOpenerPolicy() == nsILoadInfo::OPENER_POLICY_SAME_ORIGIN_EMBEDDER_POLICY_REQUIRE_CORP), at docshell/base/BrowsingContext.cpp:809
|
Core
|
DOM: Content Process
|
kmaglione+bmo
|
RESO
|
FIXE
|
2023-10-17
|
| 1832306
|
|
Crash [@ nsIContent::GetEventTargetParent] through [@ mozilla::dom::BrowserParent::RecvAccessKeyNotHandled]
|
Core
|
DOM: UI Events & Foc
|
masayuki
|
VERI
|
FIXE
|
2023-10-17
|
| 1847529
|
|
AddressSanitizer: stack-buffer-underflow [@ __asan_memcpy] with READ of size 16781312 with potentially corrupted FontEntry
|
Core
|
Graphics: Text
|
jfkthame
|
RESO
|
FIXE
|
2024-01-03
|
| 1873866
|
|
UndefinedBehaviorSanitizer: mozilla/Range.h:32:33: runtime error: applying non-zero offset 261120 to null pointer with HostWebGLContext::InvalidateFramebuffer
|
Core
|
Graphics: CanvasWebG
|
jgilbert
|
RESO
|
FIXE
|
2024-09-16
|
| 1878286
|
|
UndefinedBehaviorSanitizer: /gfx/thebes/gfxPlatformFontList.cpp:3108:33: runtime error: applying non-zero offset 5544 to null pointer
|
Core
|
Graphics: Text
|
jfkthame
|
RESO
|
FIXE
|
2024-09-16
|