| 626775 |
Tab modal dialog spoofing (DOMWillOpenModalDialog + navigation) |
-- |
RESOLVED |
| 629816 |
CERT_DecodeCertPackage reads bytes outside the input buffer |
P1 |
RESOLVED |
| 635852 |
Investigate if PresShell::GetCurrentEventFrame() should check that mCurrentEventContent's ownerDoc == mDocument |
-- |
RESOLVED |
| 698296 |
crash in js::SweepBackgroundThings @ js::gc::Arena::finalize |
-- |
NEW |
| 718088 |
offer to re-set keyword.URL if it has a non-default value |
-- |
RESOLVED |
| 722831 |
some grayscale png images display improperly when "gfx.color_management.enablev4" enabled |
-- |
RESOLVED |
| 738396 |
Java applets may read arbitrary files on a user's system |
-- |
VERIFIED |
| 738952 |
"Save as..." File menu entry or Ctrl+S produces unexpected results when having a PDF file opened within PDF Viewer |
-- |
VERIFIED |
| 743252 |
Don't print the URL and other information when printing PDFs |
-- |
RESOLVED |
| 760394 |
android.database.CursorWindowAllocationException: Cursor window allocation of <n>*2048 kb failed. at android.database.CursorWindow.<init>(CursorWindow.java) |
P2 |
RESOLVED |
| 761448 |
[FIX] "ASSERTION: We should never be reusing a shared inner window" with pagehide event |
-- |
RESOLVED |
| 771942 |
[FIX] DataDocumentContentPolicy should apply to chrome documents |
-- |
RESOLVED |
| 784730 |
"ASSERTION: wrapper already in new scope" with canvas, adoptNode |
-- |
RESOLVED |
| 787158 |
crash in nsHttpConnection::OnSocketWritable |
-- |
RESOLVED |
| 787927 |
Prevent self-hosted JS script from being registered with the debugger |
-- |
RESOLVED |
| 791244 |
Undo the pref for the temporary hangserver for beta channels until Socorro is awesome |
-- |
RESOLVED |
| 793925 |
CFX should recognize modules shipped with platform |
P1 |
RESOLVED |
| 794427 |
Calling function expression by name via .call() method hits stack limit |
-- |
RESOLVED |
| 799142 |
Crash because ~TimerEventAllocator() may be called before TimerEventAllocator::Free() is called [@ nsRunnable::Release() ] |
P2 |
VERIFIED |
| 799242 |
Crash [@ nsRefreshDriver::Tick] with resizing and opening new tabs |
-- |
VERIFIED |
| 799523 |
Crash on entering full screen mode in OS X (Retina HiDPI) |
-- |
RESOLVED |
| 799695 |
Background too dark |
-- |
RESOLVED |
| 803870 |
XSS using timed document navigations |
-- |
VERIFIED |
| 805406 |
crash in gfxContext::PushClipsToDT with Direct2D 1.1 (d3d11.dll 6.2 or 6.3) |
-- |
RESOLVED |
| 805729 |
WebRTC crash [@nr_ice_candidate_pair_stun_cb] |
P1 |
RESOLVED |
| 806820 |
crash in SuppressDeletedPropertyHelper |
-- |
VERIFIED |
| 808402 |
FTP use-after-free crash [@nsInputStreamPump::Cancel] |
-- |
VERIFIED |
| 809652 |
Have SecurityWrapper deny access for various sketchy SM extensions |
-- |
RESOLVED |
| 810726 |
Infinite loop in nsBlockInFlowLineIterator::FindValidLine() with specific layout |
P1 |
RESOLVED |
| 811557 |
DLL Hijacking - Firefox Stub installer |
-- |
VERIFIED |
| 812695 |
[Read comment #414] [D2D] Text Rendering Issues on Windows 7 with Platform Update KB2670838 (MSIE 10 Prerequisite) or on Windows 8.1 |
-- |
RESOLVED |
| 812893 |
Heap-use-after-free in nsOverflowContinuationTracker::Finish, with -moz-columns |
-- |
RESOLVED |
| 813442 |
Crash opening/closing a <select> while entering/leaving fullscreen mode |
-- |
RESOLVED |
| 814552 |
IonMonkey: Assertion failure: masm.framePushed() == frameSize(), at ion/CodeGenerator.cpp:342 or Crash [@ MarkInternal<js::ion::IonCode>] |
-- |
RESOLVED |
| 816457 |
java.lang.NullPointerException: at org.mozilla.gecko.LightweightTheme.getCroppedBitmap(LightweightTheme.java) |
-- |
RESOLVED |
| 817775 |
Marketplace promo is active on beta on about:home, but it shouldn't be |
-- |
VERIFIED |
| 818079 |
Tab menu overlaps URL bar |
-- |
VERIFIED |
| 818241 |
Conditional jump/move depends on uninitialized data in Quartz backend |
-- |
RESOLVED |
| 819775 |
js_InitRandom: Don't use pointer values in seeding the random number generator |
-- |
RESOLVED |
| 820022 |
java.lang.NullPointerException: at org.mozilla.gecko.GeckoApp.onBackPressed(GeckoApp.java) |
-- |
RESOLVED |
| 820602 |
areweslimyet.com shows ~40MB regression (~11%) in leaked windows |
-- |
RESOLVED |
| 821126 |
Heap-use-after-free in nsFrameList::InsertFrames |
-- |
RESOLVED |
| 821329 |
Input widgets don't accept character input with MacOS's build-in handwriting feature |
-- |
VERIFIED |
| 821479 |
Out-of-bounds read crash in PropertyProvider::GetSpacingInternal |
-- |
RESOLVED |
| 821955 |
SVGPointList shouldn't throw when methods are called with points that are not DOMSVGPoint |
-- |
RESOLVED |
| 823236 |
crash in mozilla::layers::ShmemYCbCrImage::IsValid on ICS and above |
-- |
RESOLVED |
| 823285 |
Private browsing downloads not cleared from Android notification bar |
-- |
VERIFIED |
| 823343 |
Exclude x86 from Google Play |
-- |
RESOLVED |
| 824856 |
Crash [@ QuoteString] or [@ js_NewStringCopyN] or "Assertion failure: limit >= start," |
-- |
VERIFIED |
| 824971 |
Heap-use-after-free in mozilla::MediaInputPort::Disconnect |
-- |
RESOLVED |
| 825035 |
Blocklisted click-to-play notification only fades in/out once per window per session |
-- |
VERIFIED |
| 825498 |
Hardware keyboard doesn't work in content since 20121223 nightly on ASUS Transformer TF101 |
-- |
RESOLVED |
| 825651 |
Another WebRTC use-after-free crash |
P1 |
VERIFIED |
| 825697 |
Components.lookupMethod allows calling of SOW functions |
-- |
RESOLVED |
| 825721 |
OOB Write in pixman_fill_sse2 |
-- |
RESOLVED |
| 825927 |
Audit/Clean up buffer handling in nICEr STUN code |
P3 |
RESOLVED |
| 826163 |
Out-of-bound read in gfxSkipCharsIterator::SetOffsets |
-- |
RESOLVED |
| 826471 |
compartment mismatch in nsWindowSH::NewResolve for _content with Xrays |
-- |
RESOLVED |
| 826581 |
Crash [@ js::RegExpShared::compile] |
-- |
VERIFIED |
| 826649 |
GC: Recalculation of GC fullness in EndSweepPhase broken |
-- |
RESOLVED |
| 826723 |
Don't ask/give Google Suggestions in Private Browsing mode |
-- |
VERIFIED |
| 826995 |
Fix CSS columns-related security issues (or disable the feature) |
-- |
RESOLVED |
| 827070 |
Heap-buffer-overflow WRITE in nsSaveAsCharset::DoCharsetConversion |
-- |
RESOLVED |
| 827106 |
freeing unallocated address with webgl |
-- |
RESOLVED |
| 827145 |
Need to return denied from getUserMedia permissions if an error is returned due to no devices |
-- |
VERIFIED |
| 827190 |
Heap-use-after-free in mozilla::ResetDir |
-- |
RESOLVED |
| 827208 |
Tabs tray button hit area is too wide |
-- |
VERIFIED |
| 827426 |
ASan: Out-of-bounds read [@ LossyConvertEncoding8to16::write_sse2] with test_undoManager.html |
-- |
RESOLVED |
| 827468 |
Calling CharacterData method on an Element causes "Assertion failure: !objRef.ptr" |
-- |
RESOLVED |
| 827591 |
Abort when CSSOM modifies an @page rule, due to reassigning an nsAutoPtr |
-- |
RESOLVED |
| 827596 |
Assigning the same pointer value to an nsAutoPtr shouldn't crash exploitably |
-- |
RESOLVED |
| 827687 |
Out of bounds read [@ ElementAnimations::EnsureStyleRuleFor] with CSS animation |
-- |
RESOLVED |
| 827821 |
IonMonkey: Assertion failure: type == MIRType_Boolean || type == MIRType_Int32 || type == MIRType_Double || type == MIRType_String || type == MIRType_Object, at ion/MIR.h:1557 |
-- |
RESOLVED |
| 827870 |
Assertion when setting expando on a document xray |
-- |
RESOLVED |
| 827946 |
Linux crash in skia::BGRAConvolve2D |
-- |
VERIFIED |
| 827979 |
add Growl support back |
-- |
VERIFIED |
| 828147 |
WebRTC use-after-free crash [@nr_ice_candidate_pair_set_state] |
P1 |
VERIFIED |
| 828149 |
Firefox Health Report causes crash during application shutdown [on Talos Linux64 opt] |
-- |
RESOLVED |
| 828312 |
HTML file with Javascript completely hangs Firefox 18.0 |
-- |
RESOLVED |
| 828606 |
https://zynga.com/play/cityville doesnt work for a month in nightly |
-- |
VERIFIED |
| 828778 |
find alternative way for providers to specify activation notification icon |
-- |
VERIFIED |
| 828780 |
"last-pb-context-exiting" doesn't fire when private window is closed |
-- |
RESOLVED |
| 828815 |
SVGRectElement["onxxx"] = Function does not work, No Tooltip on SVG graphic (StatCounter) |
-- |
VERIFIED |
| 828892 |
Favicons are missing for the default bookmarked pages besides about: ones |
-- |
RESOLVED |
| 829120 |
ABORT: AddStream duplicate transaction pointer: '!mStreamTransactionHash.Get(aHttpTransaction)' |
-- |
RESOLVED |
| 829360 |
"last-pb-context-exited" doesn't fire when private window is closed |
-- |
RESOLVED |
| 829435 |
Japanese characters appear completely garbled in PDF viewer |
P1 |
VERIFIED |
| 829460 |
DeveloperToolbar.jsm includes CmdCmd.jsm, which is gone |
-- |
RESOLVED |
| 829557 |
Firefox freezes when content is copied to clipboard with the Zero Clipboard library (based on Flash) |
-- |
VERIFIED |
| 829813 |
Crash [@ js::Shape::attributes] or [@ js::baseops::GetAttributes] |
-- |
RESOLVED |
| 829870 |
Appear the non-expected color gap on window that are opened from private one. |
-- |
VERIFIED |
| 829886 |
Can't select options in a select list whose parent is translated with a transform on mac |
-- |
VERIFIED |
| 829907 |
Failure to exit when quitting with an active getUserMedia camera stream |
-- |
VERIFIED |
| 829921 |
click events not delivered with trivial CSS transform, margin, overflow: hidden |
-- |
RESOLVED |
| 829927 |
java.lang.IllegalStateException: Couldn''t read row 0, col 1 from CursorWindow. Make sure the Cursor is initialized correctly before accessing data from it. at android.database.CursorWindow.nativeGetString(Native Method) at upgradeDatabaseFrom12to13 |
-- |
RESOLVED |
| 829952 |
Scrolling using some high-resolution-scroll aware touchpads feels slow |
-- |
RESOLVED |
| 829953 |
about:healthreport resets everytime you close that tab |
-- |
VERIFIED |
| 829954 |
OOM crash in mozilla::gfx::AlphaBoxBlur::Blur |
P1 |
VERIFIED |
| 830066 |
Drag & drop links into toolkit downloads manager to download files fails (TypeError: aInitiatingDocument is undefined) |
-- |
VERIFIED |
| 830086 |
NullPointerException in my webapp in Firefox 18 |
-- |
RESOLVED |
| 830098 |
Heap-use-after-free in mozilla::WalkAncestorsResetAutoDirection |
-- |
RESOLVED |
| 830134 |
The updater.exe loads the cryptsp.dll from the update directory while perfoming an update. |
-- |
VERIFIED |
| 830192 |
Out of bounds read in nsCellMap::GetRowSpanForNewCell |
-- |
RESOLVED |
| 830242 |
[QAC generated] Double clicking a folder in the right side pane opens first item into the current tab. And sent the 'library' into the background. |
-- |
RESOLVED |
| 830269 |
crash in js::ion::IonBuilder::makeCallHelper |
-- |
RESOLVED |
| 830299 |
Crash in settings app (or, with crash worked around, missing header) |
-- |
RESOLVED |
| 830389 |
compartment mismatch in js_ValueToSource inside js::ReportIsNotFunction |
-- |
RESOLVED |
| 830399 |
compartment mismatch in nsXMLHttpRequest::GetInterface (with addon?) |
-- |
RESOLVED |
| 830445 |
Webpage animation regression in https://www.fitbit.com/zip |
-- |
RESOLVED |
| 830492 |
Reduce total number of fsync() required by FHR |
P2 |
RESOLVED |
| 830595 |
compartment mismatch in nsJSContext::ExecuteScript (with Babylon toolbar and Free Download Manager?) |
-- |
RESOLVED |
| 830654 |
crash in js::ObjectImpl::getPrivate |
-- |
VERIFIED |
| 830665 |
Re-enable "for each" for scripts loaded from XUL/chrome:// |
-- |
RESOLVED |
| 830943 |
Incorrect behavior on emscripten "bullet" test |
-- |
RESOLVED |
| 830948 |
Crash [@ nsGlobalWindow::GetInnerHeight(int*)] while clicking View -> Zoom -> Zoom In on Firefox Aurora 20 |
-- |
VERIFIED |
| 830975 |
[FIX] nsDocument::FlushPendingNotifications looks suspicious |
-- |
RESOLVED |
| 831018 |
crash in js::IsWrapper |
-- |
RESOLVED |
| 831055 |
"Assertion failure: [infer failure] Missing type in object [0x241d1f0] lastIndex: float," |
-- |
RESOLVED |
| 831095 |
Use-After-Free crash @xul!nsImageLoadingContent::OnStopContainer |
-- |
RESOLVED |
| 831188 |
about:plugins lists blocklisted and user-disabled plugins |
P2 |
VERIFIED |
| 831296 |
PGO Build Drawing Inverted Images on Canvas |
-- |
RESOLVED |
| 831472 |
Crash [@ nsGlobalWindow::GetInnerScreenRect()] due to lack of null check |
-- |
VERIFIED |
| 831530 |
Nearly permaorange Windows PGO-only canvas/test/test_canvas.html | pixel 50,25 of c597 is 255,0,0,255; expected 0,255,0,255 +/- 0 |
-- |
RESOLVED |
| 831658 |
"Assertion failure: inUse_.empty()," |
-- |
VERIFIED |
| 831668 |
Heap-use-after-free in mozilla::dom::SVGTransformBinding::genericGetter |
-- |
RESOLVED |
| 831673 |
UAF with SVG.createMatrix with ASAN |
-- |
RESOLVED |
| 831805 |
Block malicious Mozilla Framework Assistant (em:creator is Mozilla.org) |
-- |
RESOLVED |
| 831846 |
Compartment mismatch with evalcx and watch |
-- |
VERIFIED |
| 832011 |
Assertion with Components.lookupMethod(canvas, "itemProp") |
-- |
RESOLVED |
| 832091 |
crash in xpc::XPCWrappedNativeXrayTraits::resolveDOMCollectionProperty mainly with Java |
-- |
RESOLVED |
| 832103 |
Crash [@ PropertyAccess<(PropertyAccessKind)1>] or [@ js::types::TypeCompartment::resolvePending] or "Assertion failure: hasAllFlags(OBJECT_FLAG_DYNAMIC_MASK)," |
-- |
VERIFIED |
| 832162 |
JAR/ZIP crash [@nsZipArchive::BuildSynthetics/HashName] |
-- |
RESOLVED |
| 832193 |
Content Security Policy: a source of *.something.com is mistakenly interpreted as a source of http://*:80 |
-- |
RESOLVED |
| 832197 |
Crash [@ js::gc::Cell::zone] or "Assertion failure: shared->activeUseCount == 0," |
-- |
VERIFIED |
| 832198 |
crash in -[ChildView drawRect:inContext:alternate:] |
-- |
RESOLVED |
| 832203 |
Assertion failure: shared->activeUseCount == 0, at vm/RegExpObject.cpp:656 |
-- |
VERIFIED |
| 832341 |
Black background in IE's test drive The Bayou |
-- |
VERIFIED |
| 832547 |
FHR user-facing page design |
P1 |
VERIFIED |
| 832576 |
WebGL uniform setters got 3-4x slower due to refactoring |
-- |
RESOLVED |
| 832641 |
Menu items slow to paint/respond after peeking their sub-menu popups |
-- |
RESOLVED |
| 832899 |
crash with __proto__ and Events (destructor of xul!mozilla::dom::battery::BatteryManager) |
-- |
RESOLVED |
| 832942 |
Searches to Google.com over SSL cause OOM error page on ARMv6 builds |
P1 |
VERIFIED |
| 832998 |
web page is MUCH slower in FF than in Chrome |
-- |
RESOLVED |
| 833000 |
Talos Regression trobopan on Android, Jan 19 |
-- |
RESOLVED |
| 833518 |
New HTMLElement bindings caused ~20MB regression in peak memory consumption on areweslimyet |
-- |
RESOLVED |
| 833777 |
UI fails to load intermittently |
-- |
RESOLVED |
| 833823 |
Random, unpredictable behavior with multiple YouTube embeds |
-- |
RESOLVED |
| 834075 |
pdf.js: The PDF url in the address bar becomes wrong in a certain situation. |
P3 |
VERIFIED |
| 834127 |
Windows is intermittently not setting WS_VISIBLE on the Plugin Hang UI dialog |
P2 |
VERIFIED |
| 834240 |
Crash [@ sizeOfThis] or Crash [@ CheckMarkedThing] due to OOM |
-- |
RESOLVED |
| 834243 |
crash in mozilla::layers::LayerManagerOGL/CompositorOGL::Initialize with abort message: "We need a context on Android" |
P5 |
RESOLVED |
| 834286 |
Missing text and garbled characters problems in some Japanese PDFs |
-- |
RESOLVED |
| 834395 |
[WebRTC/DataChannel] SIGBUS in sctp_lower_sosend |
-- |
RESOLVED |
| 834417 |
nsEventStateManager::sClickHoldCallback should have a strong ref to ESM |
-- |
RESOLVED |
| 834681 |
Add support for basic distribution modifications |
-- |
VERIFIED |
| 835140 |
Twitter 'slideshow' of user pictures won't load (Nightly 21) |
-- |
VERIFIED |
| 835499 |
Crash [@ js::ion::IonFrameIterator::ionScript] or [@ js::ion::GetPcScript] or Assertion failure: type() == IonFrame_OptimizedJS, at ion/IonFrames.cpp:855 |
-- |
VERIFIED |
| 835814 |
Heap-use-after-free in nsAsyncDOMEvent::Run |
-- |
VERIFIED |
| 835835 |
WebRTC use-after-free crash [@sipcc::PeerConnectionMedia::ShutdownMediaTransport] |
P1 |
RESOLVED |
| 835838 |
Slideshow is forever loading on http://edition.cnn.com/ |
-- |
RESOLVED |
| 835953 |
Releasing webcam access in gUM still leaves the green icon UI showing the camera is active shown |
P1 |
VERIFIED |
| 836016 |
Cannot reinstall an app after uninstalling it |
-- |
VERIFIED |
| 836044 |
Aurora stub installer doesn't seem to be working |
-- |
VERIFIED |
| 836225 |
crash when shaping supplementary-plane text with graphite font |
-- |
RESOLVED |
| 836274 |
IonMonkey: Assertion failure: [infer failure] Missing type pushed 0: float, at jsinfer.cpp:318 |
-- |
VERIFIED |
| 836356 |
Text unreadable in Crash Reporter on Android |
-- |
RESOLVED |
| 836811 |
crash in nsMixedContentBlocker::ShouldLoad |
-- |
RESOLVED |
| 836838 |
Avoid race condition in distribution initialization |
-- |
RESOLVED |
| 836844 |
CSS background is not painted correctly. The background is cut off by the height of the view. |
-- |
VERIFIED |
| 836875 |
Background is no longer painted in Print output/Print preview |
-- |
RESOLVED |
| 836890 |
Assertion failure: "AncestorHasDirAuto set on node but not its children" with nested dir=auto |
-- |
RESOLVED |
| 836931 |
WebRTC use-after-free crash [@nr_ice_srvrflx_stun_finished_cb] |
P1 |
RESOLVED |
| 836951 |
crash in nsSecureBrowserUIImpl::MapInternalToExternalState |
-- |
VERIFIED |
| 836990 |
Assertions with transform-style: preserve-3d, overflow, position |
-- |
RESOLVED |
| 837033 |
Leak with expando on ValidityState |
-- |
RESOLVED |
| 837037 |
Frequent Windows test_peerConnection_basicAudio.html | application crashed [@ 0x1cf3c0] [@ 0x12f91a] [@ 0x2ff968] [@ 0x12fa1d] [@ sipcc::PeerConnectionImpl::IceGatheringCompleted_m] |
-- |
RESOLVED |
| 837075 |
crash in nsDocShell::GetAllowMixedContentAndConnectionData @ nsINode::NodePrincipal |
-- |
VERIFIED |
| 837370 |
crash in TypeConstraintFreeze::newType @ js::types::TypeCompartment::addPendingRecompile |
-- |
RESOLVED |
| 837418 |
Crash [@ JS::Handle<JSString*>::operator->] or [@ JSString::isAtom] |
-- |
RESOLVED |
| 837461 |
pdf.js Black squares appear in some PDF documents even though the original PDFs does not have them. |
-- |
VERIFIED |
| 837486 |
Reposition pinned tabs when resetting tab strip underflow |
-- |
VERIFIED |
| 837539 |
WebRTC crash [@VDCVideoNewPlugIn] |
P1 |
RESOLVED |
| 837714 |
Assertion failure: allocated(), at ../../gc/Heap.h:472 or Opt-Crash [@ js::GCMarker::drainMarkStack] |
-- |
VERIFIED |
| 837815 |
Reading list button opens Top Sites, not Reading List |
-- |
RESOLVED |
| 837843 |
20130204 21.0a1 nightly load hangs if browser shutdown while on about:compartments page |
-- |
RESOLVED |
| 837845 |
Multi-GB memory spike when using regular expressions |
-- |
VERIFIED |
| 837874 |
crash in mozilla::MediaManager::Get |
P1 |
RESOLVED |
| 838001 |
Input Method can't be opened to type to input fields in a panel on Firefox 19+ |
-- |
VERIFIED |
| 838105 |
crash in gfxUserFontSet::UserFontCache::Entry::KeyEquals |
-- |
VERIFIED |
| 838169 |
WebRTC use-after-free crash [@mozilla::NrIceCtx::Release] |
P1 |
RESOLVED |
| 838239 |
[hidpi] wrong devicePixelRatio in browser history |
-- |
VERIFIED |
| 838359 |
There's no obvious (to users) reason why we're showing yellow-triangle-with-exclamation-point vs. globe, for mixed-content sites |
-- |
VERIFIED |
| 838400 |
Context menus are too compact Android 2.3 HTC Sense |
-- |
RESOLVED |
| 838440 |
Thumbnails disappear after rotation |
-- |
VERIFIED |
| 838489 |
Remaining dir=auto use after frees |
-- |
RESOLVED |
| 838513 |
High CPU load on JIRA Dashboard activity stream since FF 18.x |
-- |
RESOLVED |
| 838541 |
Storage events leak from private browsing windows to normal windows |
-- |
VERIFIED |
| 838583 |
Favicons are tiny in Awesomebar history tab |
-- |
VERIFIED |
| 838603 |
Startup crash spike on Android with abort message: "OpenGL-accelerated layers are a hard requirement on this platform [...]" |
-- |
VERIFIED |
| 838713 |
Skip slow-startup-check if Services.startup.interrupted is true |
-- |
RESOLVED |
| 838745 |
java.lang.IndexOutOfBoundsException: Invalid index <n>, size is <n> at java.util.ArrayList.throwIndexOutOfBoundsException(ArrayList.java) at org.mozilla.gecko.AboutHomePromoBox$<m>.onGotTypes(AboutHomePromoBox.java) |
-- |
RESOLVED |
| 838864 |
keyword.URL reset interferes poorly with some partner add-ons |
-- |
RESOLVED |
| 839141 |
Upgrade Mozilla to NSS 3.14.3 (once it's ready) |
-- |
RESOLVED |
| 839209 |
Assertion failure: kind == GetGCThingTraceKind(*thingp), at gc/Marking.cpp:353 |
-- |
VERIFIED |
| 839280 |
devtools increase CC graph size |
-- |
RESOLVED |
| 839380 |
zh-hk locale should use zh-tw translation instead of zh-cn |
-- |
VERIFIED |
| 839515 |
Tiny fonts in the remote connection screen |
-- |
VERIFIED |
| 839621 |
qcms_transform_create can return null, and some of the calling code isn't ready for it |
-- |
RESOLVED |
| 839792 |
From add-on, TypeError: "_appendCurrentResult" is read-only |
-- |
RESOLVED |
| 839882 |
java.lang.NullPointerException: at android.text.Selection.setSelection(Selection.java) |
-- |
RESOLVED |
| 839913 |
Fix HTMLAreaElement's stringifier |
-- |
RESOLVED |
| 840124 |
implement postMessage API for remote report |
P1 |
RESOLVED |
| 840195 |
Update fails if FF is installed in a non-default install path |
-- |
VERIFIED |
| 840263 |
[FIX] nsDocumentViewer::LoadComplete doesn't guarantee that window object stays alive |
-- |
RESOLVED |
| 840278 |
Crypt demo broken on nightly (21) |
-- |
VERIFIED |
| 840344 |
Assertion failure: !other->mOtherDirection with multiple createAnswer() calls |
P2 |
VERIFIED |
| 840353 |
Heap-use-after-free in nsAsyncDOMEvent::Run |
-- |
RESOLVED |
| 840480 |
use-after-poison in nsIFrame::Properties() |
-- |
VERIFIED |
| 840739 |
Flash links in private windows are converting normal windows into private windows. |
-- |
VERIFIED |
| 840750 |
Backout bug 818340 from Aurora after 2/19/2013 merge day |
-- |
RESOLVED |
| 840881 |
Wrong menu rendering with layout.css.devPixelsPerPx non-default (makes some menus unusable) |
-- |
VERIFIED |
| 840882 |
Homograph attack prevention is incomplete |
-- |
RESOLVED |
| 840898 |
CSSValueListBinding crash with out-of-range .item() |
-- |
RESOLVED |
| 840901 |
crash in nsDocLoader::DoFireOnStateChange with Whitesky's ID Vault (bundled with HP computers?) |
-- |
RESOLVED |
| 841011 |
Autoconfiguration via mozilla.cfg no longer works in Nightly: "Failed to read the configuration file. Please contact your system administrator." |
-- |
RESOLVED |
| 841020 |
Volume status (level/mute) are not persistent in Youtube html5 video |
-- |
VERIFIED |
| 841094 |
"extensions" directory disappeared after updating to Feb12th Nightly |
-- |
VERIFIED |
| 841239 |
Pandora.com stops playing music due to jplayer error frequently, using nightly |
-- |
VERIFIED |
| 841308 |
Bug 832641 caused panels to flicker as they're animating open |
-- |
VERIFIED |
| 841359 |
Avoid logging script errors coming from private windows in the global error console |
-- |
RESOLVED |
| 841363 |
DuckDuckGo search layout is broken |
-- |
VERIFIED |
| 841462 |
IonMonkey: Assertion failure: isObject(), at ./dist/include/js/Value.h:1111 or Crash on Heap with invalid read |
-- |
VERIFIED |
| 841466 |
Add GetParentObject() for WebIDL objects with a form owner |
-- |
RESOLVED |
| 841554 |
Ensure FHR search engine works in non en-US locales |
P2 |
VERIFIED |
| 841712 |
Copy in Error Console has some errors |
-- |
RESOLVED |
| 841823 |
Tracking bug for minimal support of PWPB in Firefox 21 |
P4 |
RESOLVED |
| 841919 |
Turn off --enable-metro on Aurora after Firefox 21 uplift to Aurora |
-- |
VERIFIED |
| 841967 |
What should we do about security.notification_enable_delay? |
-- |
RESOLVED |
| 842015 |
Normal tabs are converted to private tabs |
-- |
VERIFIED |
| 842025 |
crash in js::ion::IonBuilder::getTypedArrayLength |
-- |
RESOLVED |
| 842039 |
Updater removes command line option after update |
-- |
VERIFIED |
| 842078 |
Global-buffer-overflow in nsDocLoader::Stop |
-- |
RESOLVED |
| 842089 |
Crash with event listeners on mozCaptureStream() |
-- |
VERIFIED |
| 842185 |
"Remove From History" doesn't work |
-- |
VERIFIED |
| 842262 |
location of the ProfLD directory on Android has been unexpectedly changed [was: firefox android not loading fonts in the user profile directory anymore] |
-- |
RESOLVED |
| 842300 |
IonMonkey: Crash [@ js::GetObjectClass] with invalid read |
-- |
VERIFIED |
| 842305 |
IonMonkey: Assertion failure: v->toGCThing(), at gc/Marking.cpp:470 or Crash [@ zone] |
-- |
VERIFIED |
| 842334 |
Ensure distribution directory is still at the top level after the move of the browser into the browser directory |
-- |
RESOLVED |
| 842389 |
ProgressiveUpdate returning incorrect value |
-- |
RESOLVED |
| 842442 |
Return NO_DEVICES_FOUND error when only video or only audio is requested with no suitable device available |
P1 |
VERIFIED |
| 842482 |
Crash with array buffer from other global |
-- |
RESOLVED |
| 842561 |
Assert/ensure that the inheritance chain for DOM objects matches the interface inheritance chain |
-- |
RESOLVED |
| 842687 |
Stack corruption in plug-in code caused by PRBool to bool switch |
P1 |
RESOLVED |
| 842772 |
don't include mask-type in property_database.js if the pref is disabled |
-- |
RESOLVED |
| 842799 |
|Document.prototype instanceof Node| inside <script> returns false |
-- |
VERIFIED |
| 842986 |
Implement MozFrameLoaderOwner on HTMLFrameElement |
-- |
RESOLVED |
| 843005 |
Disable Android SQLite locking in databases for REL 11 and higher |
-- |
RESOLVED |
| 843029 |
Add more retries to ensureDatabaseIsNotLocked |
-- |
RESOLVED |
| 843040 |
xulrunner nsinstall command fails symlink create due to file exists |
-- |
RESOLVED |
| 843190 |
Camera/mics can't be shared in getUserMedia if the permissions UI is disabled |
-- |
VERIFIED |
| 843214 |
getUserMedia - Request video for video #1, then request video/audio in video #2 in same/different tab - video #2 shows no camera/mic stream |
P1 |
VERIFIED |
| 843247 |
Hyperlinks from other applications only open in new window when using private browsing (instead of in a new tab) |
-- |
RESOLVED |
| 843273 |
Graphics driver block request: Intel driver <= 8.15.10.2302/HD Graphics for Direct2D on Windows 7 |
-- |
VERIFIED |
| 843342 |
PDF doesn't print correctly on USPS.com with pdfjs (pdf.js does not support automatic print using Adobe JavaScript) |
-- |
VERIFIED |
| 843434 |
Assertion failure in nsUnicharStreamLoader::WriteSegmentFun with ISO-2022-JP |
-- |
RESOLVED |
| 843619 |
Remove tab tray menu |
-- |
VERIFIED |
| 843671 |
cannot enter comment in plugin crash UI |
P2 |
VERIFIED |
| 843701 |
[es-ES]Library does not open with Ctrl+Shift+B in Firefox19.0 |
-- |
VERIFIED |
| 843733 |
With Ion enabled on Android, shumway demo keeps using up memory and eventually dies |
-- |
RESOLVED |
| 843739 |
back out bug 770877 (take .com, .net, and .name off the IDN whitelist) |
-- |
RESOLVED |
| 843816 |
Detect duplicate sessions |
-- |
VERIFIED |
| 843821 |
Support reading distribution resources from a /system location |
-- |
VERIFIED |
| 843827 |
Makefile entry missing for MDPI phone |
-- |
VERIFIED |
| 843933 |
Disable health report on Aurora 21 |
-- |
RESOLVED |
| 843971 |
The sharing dialog for getUserMedia always reports the last shared set of devices, not the devices actively in use in a tab |
-- |
VERIFIED |
| 844181 |
3/1: Let's enable FHR on Aurora |
-- |
VERIFIED |
| 844211 |
Only check the XBL bit if XBL scopes are disabled |
-- |
RESOLVED |
| 844275 |
Fix ALL the compositor startup bugs |
-- |
VERIFIED |
| 844336 |
Aurora win32 L10N builds broken by bug 823218 |
-- |
VERIFIED |
| 844341 |
The position of the downloads indicator changes position when downloading background themes. |
-- |
REOPENED |
| 844406 |
Greasemonkey script stops working correctly in Firefox 20. 'self-hosted' builtin functions destroy js-callstack in certain case. |
-- |
RESOLVED |
| 844461 |
charset=iso-8859-1 parameter causes blank white page flash |
-- |
RESOLVED |
| 844466 |
When opening a link from a modal dialog, the tab strip doesn't show the new tab until you close the dialog |
-- |
RESOLVED |
| 844479 |
Printing a PDF via print preview doesn't work |
-- |
RESOLVED |
| 844527 |
Update nsSTSPreloadList with latest Chromium additions (2013-03-20 edition) |
-- |
RESOLVED |
| 844553 |
plugins disabled by Aurora 21.x |
P2 |
VERIFIED |
| 844580 |
crash in js::ObjectImpl::nativeLookup |
-- |
RESOLVED |
| 844671 |
Tabs sent through Sync should not open in private browsing windows |
-- |
RESOLVED |
| 844676 |
gUM <video> surface not available immediately in dual-GPU MacBooks |
-- |
RESOLVED |
| 844750 |
CSS background-images don't render properly |
-- |
VERIFIED |
| 844783 |
Calling external javascript functions from XBL has stopped working |
-- |
RESOLVED |
| 844785 |
xulrunner builds on nightly and aurora are only 46 bytes big |
-- |
RESOLVED |
| 844832 |
Installation directory rights allows all |
-- |
RESOLVED |
| 844935 |
Temporarily remove homescreen wallpaper feature due to impact on auto updates |
-- |
VERIFIED |
| 844958 |
Restart idle-daily timer logic broken |
-- |
RESOLVED |
| 845093 |
Remaining dir=auto use after frees: the sequel |
-- |
RESOLVED |
| 845125 |
Mac: Crash when printing csptesting.herokuapp.com to PDF w/ heap-use-after-free |
-- |
RESOLVED |
| 845273 |
Firefox 20 (beta) declares "Corrupted Content Error" when loading website with Access-Control-Allow-Origin header |
-- |
VERIFIED |
| 845283 |
Intermittent dom/media/tests/crashtests/799419.html | Exited with code -1073741819 during test run | application crashed [@ msvcr100.dll + 0x7d101] |
P1 |
RESOLVED |
| 845335 |
Manifest change for supporting small-screens (LDPI) |
-- |
VERIFIED |
| 845555 |
After showing statistics, context menu item to switch to hide statistics instead of offering to show statistics again |
-- |
VERIFIED |
| 845681 |
Closing all windows and quitting Firefox afterwards leads to about:sessionrestore to be shown on next startup |
-- |
VERIFIED |
| 845729 |
crash in mozilla::MediaPluginReader::DecodeVideoFrame @ libstagefright.so@0x1... on Samsung Galaxy SII and Note with qcom hw running ICS |
P5 |
RESOLVED |
| 845734 |
crash in mozilla::MediaPluginHost::CreateDecoder @ libcutils.so@0x50.. on Sony Xperia S, T, V and Z running JB 4.1 |
P5 |
RESOLVED |
| 845743 |
Firefox 19.0 does not support BIG5-HKSCS encoding. Version 18.0 does |
-- |
RESOLVED |
| 845837 |
Drag and Drop features in Blackboard Learn 9.1 SP9 broken after updating to Firefox 19 |
-- |
VERIFIED |
| 845842 |
Firefox Health Report is exhausting JS stack [too much recursion] |
P1 |
RESOLVED |
| 845881 |
HTTP status 204 is considered a preflight failure in FX 20 beta 1 |
-- |
RESOLVED |
| 846144 |
border-radius not respected on element with background-image: url(), background-size 100%, and at least one transform set. |
-- |
RESOLVED |
| 846186 |
Tilt error flooding error console (TypeError: mouseLerp is undefined) |
-- |
RESOLVED |
| 846334 |
Panels are flickering when opened in Social API |
-- |
VERIFIED |
| 846465 |
crash in mozilla::MediaPluginHost::CreateDecoder @ libstagefright.so@0x79877 when playing mp3 files on HTC devices running JB |
-- |
VERIFIED |
| 846612 |
Heap-buffer-overflow in soundtouch::TDStretchSSE::calcCrossCorr |
-- |
RESOLVED |
| 846710 |
nsISVGPoint / DOMSVGTranslatePoint refcounting and cycle collection handling seems to be broken |
-- |
RESOLVED |
| 846731 |
The user can be moved to the private tabs when closing normal tabs |
-- |
RESOLVED |
| 846774 |
We need to find out what Gecko is doing when geckoEventSync aborts due to timeout |
-- |
RESOLVED |
| 846805 |
Add 'az', 'my', 'sah' to the Firefox build |
-- |
RESOLVED |
| 846848 |
[OS.File] Handle UNC-formatted paths |
-- |
VERIFIED |
| 846984 |
Crash [@ js_NewStringCopyN] with a threadsafe js shell |
-- |
RESOLVED |
| 847627 |
The clear Downloads History at shutdown option should be updated |
-- |
RESOLVED |
| 847837 |
crash in mozilla::MediaPluginHost::CreateDecoder @ libstagefright.so@0x7... on Samsung Galaxy S Advance, Ace 2 and Beam with samsung hw, Galaxy Mini 2 and Ace Plus with qcom hw running Gingerbread |
-- |
RESOLVED |
| 848136 |
Use WAL for Health Report database |
P2 |
RESOLVED |
| 848237 |
Heap-use-after-free in mozilla::plugins::child::_geturlnotify |
P2 |
RESOLVED |
| 848417 |
Mozilla Maintenance Service buffer overflow allowing privilege escalation |
-- |
RESOLVED |
| 848644 |
Use-after-free caused by us replacing the nsHTMLEditor's edit rules object while running scripts from the flush happening in nsEditor::IsPreformatted triggered by execCommand from web content |
-- |
VERIFIED |
| 848733 |
IonMonkey: Don't eliminate callee phi when inlining natives |
-- |
RESOLVED |
| 848946 |
nsIDOMDataChannel is leaking on shutdown |
-- |
VERIFIED |
| 849014 |
IonMonkey: Crash [@ js::RegExpGuard::operator*] or "Assertion failure: isRegExp()," |
-- |
VERIFIED |
| 849597 |
Crash when inline script in an XML doc framed by <object> removes the <object> |
-- |
VERIFIED |
| 849658 |
Incorrect viewport when loading page |
-- |
RESOLVED |
| 849727 |
Heap-use-after-free in mozilla::ResetDir |
-- |
RESOLVED |
| 849732 |
Heap-use-after-free in mozilla::WalkAncestorsResetAutoDirection |
-- |
RESOLVED |
| 849785 |
DST regressed sunspider date tests |
-- |
RESOLVED |
| 849888 |
WebRTC heap-buffer-overflow crash with SignalingAgentTest.CreateUntilFailThenWait [@sub_print_msg] |
-- |
RESOLVED |
| 849903 |
uplift patches related to JBIG2 |
-- |
RESOLVED |
| 849947 |
FHR submission counts vs Blocklist ping |
P1 |
RESOLVED |
| 850424 |
Private browsing downloads not cleared when last private tab is closed |
-- |
VERIFIED |
| 850450 |
Longitudinal recording of build ID |
P1 |
RESOLVED |
| 850483 |
Send blocklist ping info as part of FHR payload |
P4 |
VERIFIED |
| 850492 |
Arbitrary code execution by Maintenance Service with junctions |
-- |
VERIFIED |
| 850587 |
Autoplay not working with getUserMedia in video element in Nightly |
-- |
VERIFIED |
| 850693 |
java.lang.ClassCastException: android.os.BinderProxy cannot be cast to org.mozilla.gecko.NotificationService$NotificationBinder at org.mozilla.gecko.NotificationServiceClient$NotificationServiceConnection.onServiceConnected(NotificationServiceClient.java) |
-- |
RESOLVED |
| 850730 |
Firefox UI sets random attributes on root nodes, leads to spec violations |
-- |
RESOLVED |
| 850931 |
Heap-use-after-free in nsFrameList::FirstChild |
-- |
RESOLVED |
| 851436 |
pinned tabs sometimes scroll with normal tabs |
-- |
RESOLVED |
| 851473 |
Restart dialogues say opposite feature enable/disable things when toggling Private browsing with checkbox or drop-down (Always use private browsing mode / Never remember history) |
-- |
VERIFIED |
| 851489 |
Private Browsing is not enabled after selecting "Always use private browsing mode" |
-- |
VERIFIED |
| 851519 |
Keyboard commands may apply to the wrong downloads panel entry |
-- |
VERIFIED |
| 851630 |
Can't open popup notifications with the keyboard (focus gets stuck at the identity icon) |
-- |
VERIFIED |
| 851781 |
Heap-use-after-free in nsContentUtils::RemoveScriptBlocker |
-- |
RESOLVED |
| 851788 |
crash in JSScript::clearTraps |
-- |
VERIFIED |
| 851934 |
crash in js::mjit::stubs::ValueToBoolean on Outlook.com |
-- |
VERIFIED |
| 851987 |
Crash [@ nsGlobalWindow::GetChildWindow] with event.view, lookupMethod |
-- |
RESOLVED |
| 852315 |
plugin crash running script during plugin destruction |
P2 |
VERIFIED |
| 852467 |
nsDisableOldMaxSmartSizePrefEvent runs on the gecko main thread, blocks for long periods of time |
-- |
RESOLVED |
| 852530 |
notificationBox is not visible on Linux |
P1 |
VERIFIED |
| 852915 |
[Win7 SP0] crash in mozilla::MediaDecoderReader::DecodeToFirstAudioData |
-- |
RESOLVED |
| 852923 |
nsBoxObject::GetPresShell flushes without keeping the doc alive |
-- |
RESOLVED |
| 853033 |
nsIPrintSettings should have IID revved |
-- |
RESOLVED |
| 853106 |
Disable WebRTC pref in Firefox 21 |
P1 |
RESOLVED |
| 853387 |
crash in nsNPAPIPluginInstance::HandleEvent @ libnpgeplugin with Google Earth Plugin (in-process in 32-bit mode) on Google Maps |
P2 |
VERIFIED |
| 853522 |
crash in mozilla::MediaPluginHost::DestroyDecoder @ libstagefright.so@0xd... on Samsung Galaxy Tab 2 with espresso & espresso10 hw running JB |
-- |
VERIFIED |
| 853615 |
Dragging tab out of window breaks CTP |
P2 |
VERIFIED |
| 853709 |
Its possible to call a content level constructor as if from a chrome/privileged page |
-- |
VERIFIED |
| 853776 |
Remove packaged app signature verification code from mozilla-aurora due to incompatibility with system NSS |
-- |
RESOLVED |
| 854001 |
crash in mozilla::dom::InstanceClassHasProtoAtDepth |
-- |
RESOLVED |
| 854019 |
in-content XBL bindings don't work right in remote XUL domains |
-- |
RESOLVED |
| 854088 |
old MozillaMaintenance Service registry entry not updated, leads to Trusted Path Privilege Escalation |
-- |
RESOLVED |
| 854124 |
PageDown (JavaScript Markdown editor) behaves strangely |
-- |
RESOLVED |
| 854606 |
Use more transactions |
P1 |
RESOLVED |
| 854863 |
20MB regression in application 'Data' size after first startup |
-- |
RESOLVED |
| 855236 |
Crash with SIGTRAP |
-- |
VERIFIED |
| 856445 |
Startup crash on LG Optimus Black (LG P970) |
-- |
VERIFIED |
| 856728 |
TopSitesView.java executes a DB cursor on the main thread |
-- |
RESOLVED |
| 856739 |
AwesomeBar.onDestroy does DB access on the main thread |
-- |
RESOLVED |
| 856823 |
Turn off --enable-metro on Aurora after uplift to Aurora |
-- |
VERIFIED |
| 857291 |
SPNEGO / MS KRB5 no longer working. Tries to use NTLM SSP instead. |
-- |
VERIFIED |
| 857324 |
Tbpl's bottom-right summary pane cuts off entries as of the 2013-03-08 nightly |
-- |
VERIFIED |
| 857355 |
Hide HTMLInputElement's inputMode API behind a pref and only turn it on for Aurora/Nightly |
-- |
VERIFIED |
| 857487 |
Deleting a table row horked |
-- |
VERIFIED |
| 857588 |
Search engine list empty when the profile is on a network drive. |
-- |
VERIFIED |
| 857672 |
Address Bar not working |
-- |
VERIFIED |
| 857883 |
Crash with onreadystatechange and reload |
-- |
VERIFIED |
| 857906 |
Loading forever (progress indicator(tab icon) is continue spinning and status display is continue showing) on multipart motion jpeg site |
-- |
VERIFIED |
| 858305 |
Need change to abouthealth.css to work around lack of flexbox support |
-- |
VERIFIED |
| 858433 |
web page not displayed properly in Firefox20 and 21beta. |
-- |
VERIFIED |
| 858459 |
drop-down select menu closes without selecting in Firefox 20.0 |
-- |
VERIFIED |
| 858561 |
Move BrowserDB.expireHistory from GeckoApp.onPause to GeckoApplication.onActivityPause |
-- |
RESOLVED |
| 858704 |
provider manifests |
-- |
VERIFIED |
| 859014 |
Remaining dir=auto issues (1): Heap-use-after-free in mozilla::ResetDir |
-- |
RESOLVED |
| 859016 |
Remaining dir=auto issues (2): Heap-use-after-free in mozilla::WalkAncestorsResetAutoDirection |
-- |
RESOLVED |
| 859099 |
crash in nsObjectLoadingContent::DoStopPlugin |
P1 |
RESOLVED |
| 859172 |
Firefox now trying to mistakenly decode non-UTF8 links as UTF-8 in UTF-8 webpages |
-- |
VERIFIED |
| 859425 |
Move decoding/storing favicons to background thread |
-- |
RESOLVED |
| 859434 |
Close thumbnail cursor in TopSitesView |
-- |
RESOLVED |
| 859591 |
Aborted transactions sometimes block all remaining transactions forever |
-- |
RESOLVED |
| 859768 |
Add dictionary for Estonian, including dictionary license addition to about:license |
-- |
VERIFIED |
| 859994 |
Remove the Marketplace promo from Fennec |
-- |
VERIFIED |
| 860180 |
U+30D8 causes XML error in UTF-16BE |
-- |
RESOLVED |
| 860897 |
Add locale to stub installer fallback url |
-- |
VERIFIED |
| 860971 |
UAF with video and onresize event |
-- |
VERIFIED |
| 861270 |
menu behavior is unstable depending on value of devPixelsPerPx |
-- |
VERIFIED |
| 861455 |
Daily collection when upload is disabled does not collect pull only providers |
P1 |
RESOLVED |
| 862182 |
Use refcounting when holding on to MediaResource* pointers |
-- |
RESOLVED |
| 862523 |
Android: blocklist the STAGEFRIGHT feature on the following Hardware's: antares, endeavoru, harmony, picasso, picasso_e, ventana |
-- |
VERIFIED |
| 862599 |
Telemetry submission appears broken on Fx21 |
-- |
RESOLVED |
| 862606 |
"Assertion failure: [barrier verifier] Unmarked edge: shape" with gczeal(4), adoptNode |
-- |
VERIFIED |
| 862702 |
new Image causes HTMLImageElement.prototype to be the wrong object in Firefox 20 |
-- |
RESOLVED |
| 863338 |
beta 21 branch still uses a beta version of nspr 4.9.6, please pick up final release tag |
-- |
RESOLVED |
| 863714 |
crash in nsCSSScanner::Next mainly with AMD Radeon HD 6310 |
-- |
RESOLVED |
| 863792 |
Plugins can re-enter in instantiate, causing plugin tags to lose track of them. |
-- |
RESOLVED |
| 864558 |
It's a horrible idea to do |new JS::Value[n]| and not root it/its contents while filling it in, and while using it after |
-- |
RESOLVED |
| 864734 |
crash in mozilla::ReentrantMonitorAutoEnter::~ReentrantMonitorAutoEnter @ libstagefright.so@0xf... on Samsung devices running Gingerbread |
-- |
RESOLVED |
| 864776 |
Remove mn, sw during beta-release migration for Firefox 21 |
-- |
RESOLVED |
| 865147 |
Crash in nsContentUtils::ContentIsDescendantOf if select.add() is called with incorrect parameters |
-- |
RESOLVED |
| 865701 |
crash in nsFrameManager::ReResolveStyleContext with AMD Radeon 6310/6320 |
-- |
RESOLVED |
| 865947 |
<marquee> evals arbitrary strings |
-- |
RESOLVED |
| 865948 |
nsScriptSecurityManager::CheckLoadURIWithPrincipal is broken for nsExpandedPrincipal |
-- |
RESOLVED |
| 866544 |
[Mac] Buffer overflow of nsAutoTArray "breakState" |
-- |
VERIFIED |
| 866825 |
nsDOMSVGZoomEvent::m{Previous,New}Scale are used uninitialized |
-- |
VERIFIED |
| 867482 |
Crash [@ js::types::Type::ObjectType] or [@ GetValueType] or Assertion failure: !val.isMagic(), at jsobj.cpp |
-- |
VERIFIED |
| 867737 |
Update FHR reporting URL |
-- |
RESOLVED |
| 868369 |
crash in MarkInternal |
-- |
RESOLVED |
| 868826 |
Firefox Mobile JB devices have lost H.264/MP3 support as of May 5th |
-- |
VERIFIED |
| 868996 |
Magento Insert Image button don't work any more. JavaScript TypeError: opener is null |
-- |
RESOLVED |
| 871887 |
marquee's _setEventListener does not work |
-- |
RESOLVED |
| 872351 |
display:none does not work with <input type=range> on FF21 |
-- |
RESOLVED |
| 872439 |
Changes in packager breaks Firefox + libxul build |
-- |
RESOLVED |
| 878509 |
Restore the HTMLImageElement.lowsrc, x, y attributes that were unintentionally removed |
-- |
RESOLVED |
