Thu May 16 2024 11:39:20 PDT
  • Classification: Client Software, Developer Infrastructure, Components, Server Software, Other
  • Reporter: nth10sd@gmail.com
This result was limited to 500 bugs. See all search results for this query.
ID Type Summary Product Comp Assignee▲ Status▲ Resolution Updated
1555169 Differential Testing: Different output message on ARM32 Core JavaScript Engine: J nobody NEW --- 2022-10-11
1793929 Crash [@ vixl::UseScratchRegisterScope::AcquireNextAvailable] Core JavaScript Engine: J nobody NEW --- 2024-04-09
1876404 Assertion failure: desired && OffsetFromAligned(desired, allocGranularity) == 0, at gc/Memory.cpp:258 Core JavaScript Engine nobody NEW --- 2024-04-16
504624 Consider using the Courgette algorithm in product updates Toolkit Application Update nobody NEW --- 2024-02-20
922900 Have a way to ignore certain flags in My Dashboard bugzilla.mozilla.org MyDashboard nobody NEW --- 2019-10-15
1538386 Global Object property resolution is observable with for-in Core JavaScript Engine: J nobody NEW --- 2023-11-28
1682104 Unable to compile SpiderMonkey ARM64 simulator builds on Windows 10 with Clang 11 Core JavaScript Engine: J nobody NEW --- 2024-04-09
1879261 AddressSanitizer: stack-overflow on address 0x7ffe0e51de38 Core JavaScript Engine nobody NEW --- 2024-04-09
1879994 UndefinedBehaviorSanitizer: jit/arm64/vixl/MozSimulator-vixl.cpp:550:5: runtime error: call to function js::jit::Bailout(js::jit::BailoutStack*, js::jit::BaselineBailoutInfo**) through pointer to incorrect function type 'long (*)(long, long)' Core JavaScript Engine: J nobody NEW --- 2024-04-09
1401391 Add ability to save/preserve file modification time when downloading file WebExtensions General nobody NEW --- 2022-10-11
1414128 Add-ons with multiple authors only show the first one Toolkit Add-ons Manager nobody NEW --- 2021-04-19
1453852 --gc-zeal runtime flag should accept "," as sole delimiter Core JavaScript: GC nobody NEW --- 2022-10-11
436373 "ASSERTION: uid validity seems to have changed, blowing away db: 'PR_FALSE'" MailNews Core Networking: IMAP mozilla NEW --- 2022-10-10
436622 "ASSERTION: morkBool_kFalse: '0'" when going back to an IMAP folder after deleting a message from the trash MailNews Core Database mozilla NEW --- 2022-10-10
426946 [meta] Thunderbird startup/shutdown console noise tracker Thunderbird General nobody NEW --- 2023-02-17
426951 "WARNING: NS_ENSURE_TRUE(cv) failed" during startup Thunderbird General nobody NEW --- 2022-10-10
432845 Number of unread messages show up as a negative number after clicking the "stop" button Thunderbird Mail Window Front En nobody NEW --- 2022-10-10
432859 Make renaming of a saved search not use a modal window, edit in-line instead Thunderbird Mail Window Front En nobody NEW --- 2022-10-10
436928 "ASSERTION: removing non-existent listener: 'index != -1'" when clicking "Manage message filters" MailNews Core Filters nobody NEW --- 2022-10-10
463554 "ASSERTION: not-null m_mime_delivery_state: 'm_mime_delivery_state != nsnull'" when sending a mail with an executable attachment that gets blocked by SMTP server MailNews Core Composition nobody NEW --- 2022-10-10
497076 "ASSERTION: fix this: 'node->isSubscribable'" MailNews Core Backend nobody NEW --- 2022-10-10
515063 [autoconfig] STARTTLS/SSL detection can be slightly tuned Thunderbird Account Manager nobody NEW --- 2022-10-10
518465 Make Thunderbird multi-process Thunderbird General nobody NEW --- 2023-09-19
631922 "ASSERTION: bad width: 'metrics.width>=0'" at www.successmagazine.com Core Layout nobody NEW --- 2022-10-10
787232 Upload xpcshells in the form of a xpcshell-<platform>.zip (or other archive format) file to FTP directories Firefox Build System General nobody NEW --- 2022-10-10
793882 [meta] Bugs found by running our test suites under Valgrind through tbpl build machines Core General nobody NEW --- 2022-10-10
794313 MIME type (application/x-javascript) attachments should be able to be viewed by a browser bugzilla.mozilla.org General nobody NEW --- 2019-04-06
799232 Support running mochitests in mach under Valgrind Firefox Build System Mach Core nobody NEW --- 2022-10-10
805748 Mismatched delete vs malloc in MimeRebuffer::~MimeRebuffer() MailNews Core MIME nobody NEW --- 2014-11-24
819579 Missing jsshell Mac builds on FTP (32-bit js debug and 64-bit js opt) Firefox Build System General nobody NEW --- 2022-10-10
821965 In jit_test.py, add a default --suppressions= argument to point to cross-architecture.sup in build/valgrind Core JavaScript Engine nobody NEW --- 2022-10-10
915960 Fall back to ar on PATH if AR is not defined, instead of ":" Firefox Build System General nobody NEW --- 2022-10-10
978614 Replace Simplified Chinese and Traditional Chinese options under "Languages" Participation Infras Phonebook nobody NEW --- 2021-07-29
979646 Have the build system, in all platforms, create a binary after compilation as well as a symbols file Core JavaScript Engine nobody NEW --- 2022-10-11
1231970 Add AddressSanitizer SpiderMonkey builds on Windows to treeherder Core JavaScript Engine nobody NEW --- 2022-10-11
1232037 Output results in machine-readable format (json?) Testing mozregression nobody NEW --- 2022-10-11
1233909 mozregression should go back further than one year for some 64-bit debug js shells Testing mozregression nobody NEW --- 2022-10-11
1236101 [meta] Bugs that block autoBisect from using mozregression Testing mozregression nobody NEW --- 2023-11-17
956526 Make flag requestee textbox width slightly longer/larger to accommodate large user names Bugzilla User Interface ui NEW --- 2022-05-25
1888964 Assertion failure: !done(), at vm/Scope.h:1674 Core JavaScript Engine arai.unmht ASSI --- 2024-04-10
473791 Optimized PNG files for TB icons Thunderbird General f.kayser ASSI --- 2022-10-10
436366 "ASSERTION: tried to add duplicate listener: 'index == -1'" when replying to a message Thunderbird Mail Window Front En nobody REOP --- 2022-10-10
1231969 Support AddressSanitizer SpiderMonkey builds on Windows with clang-cl Core JavaScript Engine sphink REOP --- 2022-10-11
1592487 Assertion failure: CurrentThreadCanAccessRuntime(cx->runtime()), at js/src/threading/ProtectedData.cpp:65 Core JavaScript Engine allstars.chh RESO FIXE 2019-11-05
1449887 Assertion failure: !fun->hasInferredName(), at js/src/frontend/BytecodeEmitter.cpp:5492 Core JavaScript Engine andrebargull RESO FIXE 2018-05-15
1574415 Differential Testing: Different output message involving TypedArrays Core JavaScript Engine: J andrebargull RESO FIXE 2022-01-10
1607665 Crash [@ ??] with BigInt64Array and --no-ggc Core JavaScript Engine andrebargull RESO FIXE 2020-06-05
1791352 Differential Testing: Different output message involving --ion-eager Core JavaScript Engine: J andrebargull RESO FIXE 2024-04-09
1863651 Unallocated instruction, Hit MOZ_CRASH(UNIMPLEMENTED ) at jit/arm64/vixl/Simulator-vixl.cpp:755 Core JavaScript: WebAssem andrebargull RESO FIXE 2024-04-09
1878378 Assertion failure: isExceptionPending(), at vm/JSContext.cpp:1136 Core JavaScript Engine andrebargull RESO FIXE 2024-04-09
1891195 Assertion failure: asValue() % sizeof(std::conditional_t<std::is_void_v<std::remove_pointer_t<U>>, char, std::remove_pointer_t<U>>) == 0, at vm/SharedMem.h:84 Core JavaScript Engine andrebargull RESO FIXE Sat 07:13
1608674 Crash [@ __strlen_avx2] with oomTest Core JavaScript Engine arai.unmht RESO FIXE 2020-01-16
1659884 Assertion failure: !lookup(aLookup).found(), at dist/include\mozilla/HashTable.h:2153 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
1794288 Assertion failure: !cx->isExceptionPending(), at vm/JSContext-inl.h:252 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
1873399 Assertion failure: !stencil.canLazilyParse, at frontend/Stencil.cpp:2626 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
1891412 Assertion failure: isDouble(), at dist/include/js/Value.h:1070 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-16
489130 Crash [@ js_ValueToString] or "Assertion failure: !(pnu->pn_dflags & PND_BOUND), at ../jsemit.cpp" Core JavaScript Engine brendan RESO DUPL 2011-06-13
496532 let initializer scope is wacky Core JavaScript Engine brendan RESO FIXE 2012-01-04
511835 Crash [@ QuoteString] or [@ js_HashString] or "Assertion failure: (*flagp & GCF_FINAL) == 0, at ../jsgc.cpp" Core JavaScript Engine brendan RESO FIXE 2011-06-13
514819 Crash [@ js_IsAboutToBeFinalized] or [@ js_GetGCThingTraceKind] with defineSetter, eval, for...in Core JavaScript Engine brendan RESO FIXE 2013-03-19
515892 Crash [@ js_Interpret] or "Assertion failure: JSVAL_IS_OBJECT(v), at ../jsapi.h" Core JavaScript Engine brendan RESO FIXE 2011-06-13
516262 Crash [@ js_Interpret] or "Assertion failure: script->nfixed == 2, at ../jsinterp.cpp" Core JavaScript Engine brendan RESO FIXE 2011-06-13
516263 "Assertion failure: kind == JSLOCAL_VAR, at ../jsfun.cpp" with eval, for...in Core JavaScript Engine brendan RESO FIXE 2009-11-20
517076 Crash [@ js_CallIteratorNext] or "Assertion failure: STOBJ_GET_CLASS(obj) != &js_BlockClass, at ../jsscope.cpp" Core JavaScript Engine brendan RESO FIXE 2011-06-13
520513 "Assertion failure: !(evalcg->flags & TCF_IN_FOR_INIT), at ../jsemit.cpp" or "Assertion failure: 0, at ../jsemit.cpp" Core JavaScript Engine brendan RESO FIXE 2013-01-19
521694 "Assertion failure: traceOp == JSOP_TRACE || traceOp == JSOP_NOP, at ../jsops.cpp" with yield Core JavaScript Engine brendan RESO FIXE 2013-01-19
543436 Crash [@ JSFunctionBox::joinable] or [@ JSCompiler::setFunctionKinds] Core JavaScript Engine brendan RESO FIXE 2013-01-19
546069 "Assertion failure: cg->stackDepth >= 0, at ../jsemit.cpp" Core JavaScript Engine brendan RESO FIXE 2010-07-30
560796 Crash [@ DropWatchPointAndUnlock] or "Assertion failure: hasSetterValue() && rawSetter, at ../jsscope.h" Core JavaScript Engine brendan RESO FIXE 2013-01-19
562028 Crash [@ QuoteString] or "Assertion failure: (uintN)js_GetSrcNoteOffset(sn, 0) == ss->top - 1, at ../jsopcode.cpp" or "Assertion failure: strcmp(rval, exception_cookie) == 0, at ../jsopcode.cpp" Core JavaScript Engine brendan RESO FIXE 2013-01-19
566815 Crash [@ js_GetMethod] or [@ js_TryMethod] Core JavaScript Engine brendan RESO FIXE 2013-01-19
569843 TM: "Assertion failure: tracecx->bailExit," with e4x, delete Core JavaScript Engine brendan RESO FIXE 2013-01-14
574280 TM: "Assertion failure: scope->canProvideEmptyScope(&js_ObjectOps, clasp)," Core JavaScript Engine brendan RESO FIXE 2013-01-14
1353352 [wasm] Crash [@ memcpy] or Assertion failure: pool_.numEntries() == 0, at js/src/jit/shared/IonAssemblerBufferWithConstantPools.h:712 Core JavaScript Engine: J bugzilla RESO FIXE 2017-06-28
1586951 Cranelift: thread '<unnamed>' panicked at 'attempt to subtract with overflow', third_party/rust/cranelift-codegen/src/simple_preopt.rs:511:36 Core JavaScript: WebAssem bugzilla RESO FIXE 2019-10-29
1655848 AddressSanitizer: SEGV [@ js::gc::CellWithTenuredGCPointer] or [@ js::gc::detail::GetCellLocation] with ARM64 simulator Core JavaScript: WebAssem chris RESO FIXE 2024-04-09
1664953 AddressSanitizer: SEGV [@ EmitTruncate] Core JavaScript Engine dbezhetskov RESO FIXE 2024-04-09
507657 TM: "Assertion failure: obj == cx->fp->scopeChain, at ../jstracer.cpp" with eval, for, function, defineSetter Core JavaScript Engine dmandelin RESO FIXE 2009-10-05
509982 TM: Crash [@ js_GetUpvar] or "Assertion failure: (fun->u.i.script)->upvarsOffset != 0, at ../jstracer.cpp" Core JavaScript Engine dmandelin RESO FIXE 2013-01-14
556525 JM: Crash [@ js::SweepScopeProperties] or "Assertion failure: !JSVAL_IS_NULL(id), at ../jsscope.cpp" Core JavaScript Engine dmandelin RESO FIXE 2013-01-14
1473523 Differential Testing: Different output message involving __proto__ and TypedArrays Core JavaScript Engine: J evilpies RESO FIXE 2018-10-29
1548759 Assertion failure: !cx->isExceptionPending(), at js/src/builtin/TestingFunctions.cpp:1942 or Assertion failure: !JS_IsExceptionPending(cx_), at vm/JSContext.h:1185 Core JavaScript Engine evilpies RESO FIXE 2019-06-11
488816 TM: Crash [@ 0x000fdf5b] Core JavaScript Engine gal RESO FIXE 2013-02-25
515440 TM: "Assertion failure: tm->reservedDoublePoolPtr > tm->reservedDoublePool, at ../jstracer.cpp" Core JavaScript Engine gal RESO FIXE 2013-01-19
496682 Crash [@ FindPropertyValue] or "Assertion failure: right->pn_arity != PN_LIST || !(right->pn_xflags & PNX_DESTRUCT), at ../jsparse.cpp" Core JavaScript Engine general RESO FIXE 2011-06-09
503679 Crash [@ js_PutCallObject] Core JavaScript Engine general RESO FIXE 2011-06-13
506178 TM: Crash [@ js_GetClosureArg] Core JavaScript Engine general RESO DUPL 2011-06-09
508504 "Assertion failure: !cx->throwing, at ../jsiter.cpp" with defineSetter, defineGetter, watch, eval, slice, yield, Function Core JavaScript Engine general RESO FIXE 2009-10-05
1304640 Differential Testing: Different output message involving RegExp Core JavaScript Engine: J hv1989 RESO FIXE 2016-10-19
1304641 Differential Testing: Different output message involving startTraceLogger Core JavaScript Engine: J hv1989 RESO FIXE 2016-10-19
1304643 Differential Testing: Different output message involving Object.create Core JavaScript Engine: J hv1989 RESO FIXE 2016-10-24
1308802 Differential Testing: Different output message involving Math functions Core JavaScript Engine: J hv1989 RESO FIXE 2016-10-19
1314438 Differential Testing: Different output message involving Math functions Core JavaScript Engine: J hv1989 RESO FIXE 2016-11-15
508512 "Assertion failure: !JS_IsExceptionPending(cx), at ../jsiter.cpp" Core JavaScript Engine igor RESO FIXE 2009-10-05
1571918 Differential Testing: Different output message on ARM32 involving Math.atan2 Core JavaScript Engine: J iireland RESO FIXE 2022-01-10
1668197 [warp] Crash [@ WarpCacheIRTranspiler::emitMathHypot2NumberResult] Core JavaScript Engine iireland RESO FIXE 2024-04-09
1687661 Issue involving IonMonkey and Math.trunc Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
1688346 Issue involving IonMonkey and Math.trunc Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
1776356 Assertion failure: fallibleScope_ ([OOM] Cannot allocate a new chunk in an infallible scope.), at ds/LifoAlloc.cpp:169 Core JavaScript Engine iireland RESO FIXE 2024-04-09
1779867 Differential Testing: Different output message involving branch pruning and --fast-warmup Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
1794317 LeakSanitizer: [@ js::irregexp::InitializeNamedCaptures] with RegExp Core JavaScript Engine iireland RESO FIXE 2024-04-09
1828312 Assertion failure: typeVreg + 1 == payloadVreg, at jit/shared/Lowering-shared.cpp:100 Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
1870925 Assertion failure: [barrier verifier] Unmarked edge: JS Script 38d5a84660b0 'baseline-ic-stub-code' edge to JS JitCode 38d5a84672e0, at gc/Verifier.cpp:385 Core JavaScript Engine: J iireland RESO FIXE Tue 21:13
1312620 Differential Testing: Different output message involving zero Core JavaScript Engine: J j_schulte RESO FIXE 2016-12-15
1325551 Assertion failure: !cx->isExceptionPending(), at js/src/jscntxtinlines.h:242 Core JavaScript Engine jcoppeard RESO FIXE 2017-03-06
1501154 Assertion failure: throwing, at js/src/vm/JSContext.cpp:1449 Core JavaScript Engine jcoppeard RESO FIXE 2018-10-24
1501157 Assertion failure: CurrentThreadCanAccessRuntime(cx->runtime()), at js/src/threading/ProtectedData.cpp:59 Core JavaScript Engine jcoppeard RESO FIXE 2018-10-24
1510145 Assertion failure: arena->bufferedCells()->isEmpty(), at js/src/gc/GC.cpp:2433 with recomputeWrappers Core JavaScript Engine jcoppeard RESO FIXE 2019-08-07
1542387 Assertion failure: WeakMapBase::checkMarkingForZone(zone), at js/src/gc/GC.cpp:5286 Core JavaScript: GC jcoppeard RESO DUPL 2023-10-23
1564012 Assertion failure: comp == compartment || (srcKind == JS::TraceKind::Object && InCrossCompartmentMap(static_cast<JSObject*>(src), thing)), at js/src/gc/GC.cpp:4257 Core JavaScript Engine jcoppeard RESO FIXE 2019-08-20
1600238 Crash [@ JS::shadow::Zone::needsIncrementalBarrier] with WeakRefs Core JavaScript Engine jcoppeard RESO FIXE 2020-02-03
1603917 Unexpected tracer kind while tracing kept objects Core JavaScript Engine jcoppeard RESO FIXE 2019-12-18
1608355 Assertion failure: (incMarkBits[i] & MarkBitMaskBothBits) != MarkBitMaskGrayOrBlack, at js/src/gc/Verifier.cpp:707 with grayRoot Core JavaScript: GC jcoppeard RESO FIXE 2020-01-13
1652650 Build failure with deterministic js shells Core JavaScript Engine jcoppeard RESO FIXE 2024-04-09
1688517 Crash [@ js::Nursery::enterZealMode] Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1689039 Assertion failure: false (chunksToDecommit().append(chunk)), at gc/Nursery.cpp:152 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1691901 MOZ_CRASH [@ js::gcstats::Statistics::lookupChildPhase] Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1707422 Assertion failure: pos == wholeChars + wholeLength, at vm/StringType.cpp:865 Core JavaScript Engine jcoppeard RESO FIXE 2024-04-09
1770266 Assertion failure: crossZoneRecords.has(object), at gc/FinalizationObservers.cpp:444 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1787351 Crash[@ js::CompartmentsInZoneIter::CompartmentsInZoneIter] or Assertion failure: !done(), at gc/PublicIterators.h:54 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1796901 Assertion failure: zoneIsDead, at js/src/gc/GC.cpp:2083 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1880870 Assertion failure: false (EraseCallback(nurseryCollectionCallbacks.ref(), callback, data)), at gc/GC.cpp:1557 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1886940 Assertion failure: !cx->isExceptionPending(), at gc/GCAPI.cpp:492 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1314545 Differential Testing: Different output message involving Object.freeze Core JavaScript Engine: J jdemooij RESO FIXE 2016-11-11
1317943 Differential Testing: Different output message involving Object.freeze Core JavaScript Engine: J jdemooij RESO FIXE 2016-11-22
1318634 Assertion failure: *isOwnProperty == (receivers.empty() && convertUnboxedGroups.empty()), at js/src/jit/BaselineInspector.cpp:897 Core JavaScript Engine jdemooij RESO FIXE 2016-11-21
1321437 Differential Testing: Different output message involving Object.freeze Core JavaScript Engine: J jdemooij RESO FIXE 2017-01-16
1334356 Crash [@ js::jit::IonCannon] or Assertion failure: Should have monitored undefined result, at js/src/jit/MacroAssembler.cpp:1597 Core JavaScript Engine jdemooij RESO FIXE 2017-02-03
1404636 Differential Testing: Different output message involving typed arrays Core JavaScript Engine: J jdemooij RESO FIXE 2018-08-28
1455954 Differential Testing: Different output message involving regex Core JavaScript Engine: J jdemooij RESO FIXE 2018-05-14
1466363 Differential Testing: Different output message involving Object.seal Core JavaScript Engine: J jdemooij RESO FIXE 2018-06-22
1534902 Assertion failure: !JS_IsDeadWrapper(origTarget) (We don't want a dead proxy in the wrapper map), at js/src/proxy/CrossCompartmentWrapper.cpp:549 Core JavaScript Engine jdemooij RESO FIXE 2019-04-09
1547179 Assertion failure: collectCoverage(), at js/src/vm/Realm.cpp:341 Core JavaScript Engine jdemooij RESO FIXE 2019-06-11
1557664 LeakSanitizer: [@ ShellPrincipals] with newGlobal Core JavaScript Engine jdemooij RESO FIXE 2019-06-12
1560432 Build failure with js shells on Windows Core JavaScript Engine jdemooij RESO FIXE 2022-01-10
1563051 LeakSanitizer: [@ js::jit::BaselineDebugModeOSRInfo] with Debugger Core JavaScript Engine jdemooij RESO FIXE 2019-07-16
1563889 Hit MOZ_CRASH(Failed to allocate profile string) at js/src/jit/JitScript.cpp:197 Core JavaScript Engine: J jdemooij RESO FIXE 2019-08-02
1567327 Assertion failure: !used(), at js/src/jit/Label.h:86 with Baseline Interpreter Core JavaScript Engine jdemooij RESO FIXE 2019-12-02
1568080 Assertion failure: jit::IsBaselineJitEnabled(), at js/src/jit/Ion.cpp:2116 Core JavaScript Engine jdemooij RESO FIXE 2019-07-23
1574725 Assertion failure: CurrentThreadCanAccessRuntime(rt), at js/src/gc/Cell.h:258 with evalInWorker Core JavaScript Engine jdemooij RESO FIXE 2022-01-10
1577224 Assertion failure: inhibitNops_ && (isPoolEmptyFor(InstSize) || canNotPlacePool_), at js/src/jit/shared/IonAssemblerBufferWithConstantPools.h:1121 with Baseline Interpreter on the stack Core JavaScript Engine: J jdemooij RESO FIXE 2022-01-10
1589002 Hit MOZ_CRASH(*** Zone mismatch 0x7f7ec2bc3000 vs. 0x7f7ec2527000 at argument 0) at js/src/vm/JSContext-inl.h:49 Core JavaScript Engine jdemooij RESO FIXE 2019-10-18
1592524 Assertion failure: mir->resumePoint(), at js/src/jit/CodeGenerator.cpp:296 Core JavaScript Engine jdemooij RESO FIXE 2020-06-05
1593175 Crash [@ js::jit::CodeGeneratorShared::encode] or Assertion failure: lir->mir()->needsSnapshot(), at js/src/jit/CodeGenerator.cpp:1725 Core JavaScript Engine jdemooij RESO FIXE 2019-11-06
1598778 AddressSanitizer: heap-buffer-overflow [@ void ConsumeSpaces<unsigned char>] with READ of size 1 Core JavaScript Engine jdemooij RESO FIXE 2020-06-05
1598784 LeakSanitizer: [@ js::jit::PendingBlock] Core JavaScript Engine jdemooij RESO FIXE 2019-12-02
1602190 Differential Testing: Different output message involving Math.fround Core JavaScript Engine: J jdemooij RESO FIXE 2019-12-12
1604631 Differential Testing: Different output message involving evalcx Core JavaScript Engine: J jdemooij RESO FIXE 2020-01-22
1606511 LeakSanitizer: [@ WorkerInput] Core JavaScript Engine jdemooij RESO FIXE 2021-07-28
1652854 AddressSanitizer: SEGV or Crash [@ js::SetObject::trace] or Assertion failure: !arr->getDenseElement(i).isMagic(JS_ELEMENTS_HOLE), at vm/NativeObject-inl.h:855 Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
1667680 [warp] Assertion failure: script->length() <= JitOptions.ionMaxScriptSize, at jit/TrialInlining.cpp:42 Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
1667685 [warp] Assertion failure: !icScript_->hasInlinedChild(entry.pcOffset()), at jit/TrialInlining.cpp:358 with gc Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
1667699 [warp] Assertion failure: hasBaseScript(), at vm/JSFunction.h:463 with relazifyFunctions Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
1699622 Assertion failure: targetProto->isUsedAsPrototype(), at gc/GC.cpp:8052 Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
1875363 MOZ_CRASH involving disnative Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
1893554 Assertion failure: rematFrame->script() == frame->script(), at jit/BaselineBailouts.cpp:1783 Core JavaScript Engine: J jdemooij RESO FIXE 2024-05-07
1559062 LeakSanitizer: [@ js::DebuggerFrame::onStepSetter] with Debugger Core JavaScript Engine jimb RESO FIXE 2019-06-17
1564230 Assertion failure: isExceptionPending(), at js/src/vm/JSContext.cpp:1215 with Debugger Core JavaScript Engine jimb RESO FIXE 2019-10-03
1591342 Assertion failure: UncheckedUnwrap(wrappedDebugger) == debugger->object, at js/src/debugger/Debugger.cpp:356 Core JavaScript Engine jimb RESO FIXE 2019-11-06
505932 Shape regeneration does not touch most empty scopes Core JavaScript Engine jorendorff RESO FIXE 2011-09-26
506347 Assertion failure: OBJ_SCOPE(pobj)->object == pobj, at ../jsinterp.cpp Core JavaScript Engine jorendorff RESO FIXE 2009-09-02
509636 "Assertion failure: pn->pn_type != TOK_COMMA, at ../jsemit.cpp" Core JavaScript Engine jorendorff RESO FIXE 2009-09-30
510709 "Assertion failure: PN_TYPE(pn) == TOK_FUNCTION, at ../jsparse.cpp" Core JavaScript Engine jorendorff RESO FIXE 2009-10-01
511836 "Assertion failure: JSVAL_IS_INT(v), at ../jsapi.h" Core JavaScript Engine jorendorff RESO FIXE 2013-01-19
1445854 Crash [@ JS::Rooted] or Assertion failure: isInt32(), at dist/include/js/Value.h:649 with --enable-streams Core JavaScript Engine jorendorff RESO FIXE 2018-10-11
1512008 Assertion failure: CheckedUnwrap(promiseObj)->is<PromiseObject>(), at js/src/jsapi.cpp:4054 with ReadableStream Core JavaScript Engine jorendorff RESO FIXE 2018-12-11
1556119 LeakSanitizer: [@ js::Thread] with evalInWorker Core JavaScript Engine jorendorff RESO FIXE 2019-06-14
1556136 LeakSanitizer: [@ GetLine] Core JavaScript Engine jorendorff RESO FIXE 2019-06-12
1576969 thread '<unnamed>' panicked at 'assertion failed: `(left == right)` left: `68`, right: `64`: Invalid registers for REX-less Op1 encoding', third_party/rust/cranelift-codegen/src/isa/x86/binemit.rs:75:5 Core JavaScript: WebAssem jseward RESO FIXE 2020-06-05
1555979 Assertion failure: !node->isEmptyScope(), at js/src/frontend/FullParseHandler.h:484 with class Core JavaScript Engine khyperia RESO FIXE 2019-06-07
995704 Crash [@ EnterIon] or [@ js::jit::IonCannon] or [@ js::RunScript] Core JavaScript Engine: J kvijayan RESO FIXE 2016-06-04
1423173 Differential Testing: Different output message involving Object.freeze and __proto__ Core JavaScript Engine: J kvijayan RESO FIXE 2018-08-28
1570157 Hit MOZ_CRASH(Expected available JSContext) at js/src/vm/HelperThreads.cpp:1232 with evalInWorker Core JavaScript Engine kwright RESO FIXE 2019-08-13
1570173 Crash [@ js::AutoUnsafeCallWithABI::AutoUnsafeCallWithABI] or Assertion failure: cx, at js/src/threading/ProtectedData.cpp:52 Core JavaScript Engine kwright RESO FIXE 2019-09-13
1516738 Assertion failure: size_t(reg) < mozilla::ArrayLength(names), at js/src/jit/x86-shared/Constants-x86-shared.h:194 with wasm Core JavaScript: WebAssem lhansen RESO FIXE 2019-08-07
1518331 Assertion failure: false (offset.isValid()), at js/src/jit/shared/Assembler-shared.h:286 Core JavaScript: WebAssem lhansen RESO FIXE 2020-04-06
1546874 Assertion failure: !used(), at js/src/jit/Label.h:86 Core JavaScript Engine lhansen RESO FIXE 2019-06-07
1675216 Assertion failure: !temp.Is(rt), at jit/arm64/vixl/MacroAssembler-vixl.cpp:1205 Core JavaScript: WebAssem lhansen RESO FIXE 2024-04-09
1707774 Live range splitting can lead to conflicting assignments (was: Assertion failure: *def->output() == alloc, at jit/RegisterAllocator.cpp:257) Core JavaScript Engine: J lhansen RESO FIXE 2024-04-09
1710312 AddressSanitizer: SEGV or Crash [@ js::jit::MachineState::read] Core JavaScript Engine: J lhansen RESO FIXE 2024-04-09
805663 [Browser] Add UA override for Itaú Unibanco (Brazilian bank); desktop website has its right side truncated in B2G browser Core Layout lmandel RESO DUPL 2013-01-09
502432 Crash [@ JS_HashTableRawLookup] Core JavaScript Engine mail RESO DUPL 2011-06-09
1414174 [wasm] Assertion failure: !cx->isExceptionPending(), at js/src/jscntxtinlines.h:294 Core JavaScript Engine mail RESO FIXE 2017-11-12
1473830 Differential Testing: Different output message involving forEach Core JavaScript Engine: J mgaudet RESO FIXE 2020-04-06
1560425 Remove old performance measurement API Core JavaScript Engine mgaudet RESO FIXE 2019-07-03
1562146 Assertion failure: uncompressedStart < uncompressedLimit (subtraction below requires a non-empty range), at js/src/vm/Compression.h:79 with ES6 classes Core JavaScript Engine mgaudet RESO FIXE 2019-10-11
1604952 Differential Testing: Different output message involving deferred parser allocation Core JavaScript Engine mgaudet RESO FIXE 2019-12-20
1293575 Differential Testing: Different output message involving arguments Core JavaScript Engine: J nicolas.b.pierron RESO FIXE 2018-09-07
1316830 Differential Testing: Different output message involving addition Core JavaScript Engine: J nicolas.b.pierron RESO FIXE 2016-11-16
1319242 Differential Testing: Different output message involving addition Core JavaScript Engine: J nicolas.b.pierron RESO FIXE 2017-01-05
1534810 Differential Testing: Different output message involving IonMonkey on ARM64 and Math.round Core JavaScript Engine: J nicolas.b.pierron RESO FIXE 2019-04-15
1534834 Assertion failure: (ptrBits & 0x7) == 0, at dist/include/js/Value.h:778 Core JavaScript Engine nicolas.b.pierron RESO DUPL 2019-04-15
1545379 Crash [@ vixl::Instruction::InstructionBits] Core JavaScript Engine nicolas.b.pierron RESO DUPL 2019-06-17
1546050 Assertion failure: !canNotPlacePool_, at js/src/jit/shared/IonAssemblerBufferWithConstantPools.h:971 Core JavaScript Engine nicolas.b.pierron RESO FIXE 2019-06-06
1555153 Differential Testing: Different output message involving division on ARM64 Core JavaScript Engine: J nicolas.b.pierron RESO FIXE 2022-01-10
1877357 Assertion failure: v.isUndefined(), at vm/StringType.cpp:2467 Core JavaScript Engine: J nicolas.b.pierron RESO FIXE 2024-04-09
1304638 Differential Testing: Different output message involving Object.freeze Core JavaScript Engine: J nobody RESO FIXE 2017-05-10
1314172 Assertion failure: usesBalance <= 0 (More use checks than operand checks), at js/src/jit/IonAnalysis.cpp:2755 Core JavaScript Engine: J nobody RESO FIXE 2018-10-26
1329129 Assertion failure: fallibleScope_ ([OOM] Cannot allocate a new chunk in an infallible scope.), at js/src/ds/LifoAlloc.cpp:105 Core JavaScript Engine nobody RESO DUPL 2017-02-02
1337967 Assertion failure: !cycleEnd_, at js/src/jit/MoveResolver.h:278 Core JavaScript Engine: J nobody RESO DUPL 2019-08-07
1418189 Differential Testing: Different output message involving evalInCooperativeThread Core JavaScript Engine: J nobody RESO INVA 2017-12-05
1812558 Assertion failure: fallibleScope_ ([OOM] Cannot allocate a new chunk in an infallible scope.), at ds/LifoAlloc.cpp:169 Core JavaScript Engine: J nobody RESO DUPL 2024-04-09
433567 Replace Mozilla Corporation references with Mozilla Messaging Thunderbird Installer nth10sd RESO FIXE 2008-11-11
1581005 Detect UBSan support via getBuildConfiguration in TestingFunctions.cpp Core JavaScript Engine nth10sd RESO FIXE 2019-09-20
1877358 AddressSanitizer: SEGV on unknown address 0x70007fff8003 when WASM exceptions are disabled Core JavaScript: WebAssem rhunt RESO FIXE 2024-04-09
1573289 Assertion failure: !hasBlackEntries(), at js/src/gc/Marking.cpp:2485 Core JavaScript Engine sphink RESO DUPL 2019-11-05
1650501 LeakSanitizer: [@ NewString] Core JavaScript Engine: J sphink RESO FIXE 2024-04-09
1873328 AddressSanitizer: stack-overflow on address 0x7ffe5ed61d08 with ubi node takeCensus Core JavaScript Engine sphink RESO FIXE 2024-04-09
1566974 Assertion failure: !lazyScript->treatAsRunOnce(), at js/src/frontend/BytecodeEmitter.cpp:2220 Core JavaScript Engine tcampbell RESO FIXE 2019-07-22
1577580 LeakSanitizer: [@ js::frontend::LazyScriptCreationData::init] involving oomTest Core JavaScript Engine tcampbell RESO FIXE 2019-09-13
994281 Assertion failure: bufferByteLength - arrayByteOffset >= arrayByteLength, at vm/TypedArrayObject.cpp or Assertion failure: arrayByteOffset <= bufferByteLength, at vm/TypedArrayObject.cpp Core JavaScript Engine: J terrence.d.cole RESO FIXE 2016-06-04
1523515 Differential Testing: Different output message involving 32-bit ARM simulator and --arm-hwcap=vfp Core JavaScript Engine: J wingo RESO FIXE 2019-02-13
1590920 Weird location crash or Assertion failure: &instance->code() == &segment.code() || trap == Trap::IndirectCallBadSig, at WasmSignalHandlers.cpp or Assertion failure: jitCaller->footer()->type() == jit::ExitFrameType::DirectWasmJitCall, at WasmFrameIter.cpp Core JavaScript: WebAssem wingo RESO FIXE 2020-06-05
1766806 Assertion failure: *def->output() == alloc, at jit/RegisterAllocator.cpp:270 Core JavaScript: WebAssem ydelendik RESO FIXE 2024-04-09
1593415 Assertion failure: false, at js/src/builtin/ReflectParse.cpp:3092 with nullish coalescing Core JavaScript Engine ystartsev RESO FIXE 2019-11-15
1478503 Differential Testing: Different output message involving Object.preventExtensions Core JavaScript Engine: J andrebargull RESO FIXE 2018-08-06
1879688 Assertion failure: masm.framePushed() == frameSize(), at jit/CodeGenerator.cpp:3664 Core JavaScript Engine: J andrebargull RESO FIXE 2024-04-09
1879783 AddressSanitizer: SEGV on unknown address 0x000000000001 or Assertion failure: maxLength <= ArrayBufferObject::ByteLengthLimit, at vm/SharedArrayObject.cpp:65 Core JavaScript Engine andrebargull RESO FIXE 2024-04-09
1871952 AddressSanitizer: SEGV on unknown address 0x000000000000 [@ js::BaseScript::enclosingScope] or Assertion failure: lazyScript->isReadyForDelazification(), at frontend/CompilationStencil.h:753 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
1883179 Assertion failure: script->filename(), at builtin/ModuleObject.cpp:1056 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
432851 Tools -> Import -> Filters -> Eudora doesn't work. Thunderbird Migration beckley RESO WONT 2016-05-30
510644 TM: "Assertion failure: JSVAL_IS_DOUBLE(val), at ../jsopcode.cpp" Core JavaScript Engine brendan RESO FIXE 2013-01-19
510783 "Assertion failure: !(pn->pn_dflags & flag), at ../jsparse.h" Core JavaScript Engine brendan RESO FIXE 2011-03-31
589103 Crash [@ JS_GetGlobalForScopeChain] or [@ js::JSScriptedProxyHandler::has] Core JavaScript Engine brendan RESO FIXE 2013-01-19
1879016 Unable to compile build without Intl api (--without-intl-api) Core JavaScript Engine bthrall RESO FIXE 2024-04-09
1879437 LeakSanitizer: detected memory leaks [@ js::jit::JitHintsMap::addIonHint] Core JavaScript Engine: J dpalmeiro RESO FIXE 2024-04-09
484628 TM: "Assertion failure: *regs.pc == JSOP_CALL || *regs.pc == JSOP_DUP, at ../jsinterp.cpp" Core JavaScript Engine gal RESO DUPL 2013-02-25
489040 TM: Crash [@ TraceRecorder::getThis] Core JavaScript Engine gal RESO FIXE 2013-01-19
503488 TM: Different invalid instanceof operand values with JIT off/on Core JavaScript Engine gal RESO WORK 2012-01-04
504516 TM: Crash with a "divide by zero" error (really -2147483648 / -1) Core JavaScript Engine gal RESO FIXE 2013-01-19
567059 Crash [@ js_LookupPropertyWithFlags] or "Assertion failure: isNative()," Core JavaScript Engine gal RESO FIXE 2013-03-11
567387 Crash [@ js_CallGCMarker] or "Assertion failure: obj_, at ../jscntxtinlines.h" with Proxy.createFunction Core JavaScript Engine gal RESO FIXE 2011-06-13
567580 TM: Crash [@ JSObject::getClass] or [@ js::TraceRecorder::record_JSOP_BINDNAME] with Proxy.createFunction Core JavaScript Engine gal RESO FIXE 2015-05-18
568867 Crash [@ js_Interpret] or "Assertion failure: !JSVAL_IS_PRIMITIVE(regs.sp[-1])," Core JavaScript Engine gal RESO FIXE 2011-06-13
472454 TM: Crash [@ js_CheckRedeclaration] Core JavaScript Engine general RESO WORK 2011-06-09
479747 TM: Crash [@ nanojit::Assembler::freeRsrcOf] or "Assertion failure: s0->isQuad(), at ../jstracer.cpp" Core JavaScript Engine general RESO WORK 2013-01-19
496541 TM: Different result returned with testcase involving print, for..in, return Core JavaScript Engine general RESO WORK 2012-01-04
496544 TM: Different values with testcase containing for, print, return Core JavaScript Engine general RESO WORK 2012-01-04
507556 TM: Different values with testcase containing for, for...each, uneval Core JavaScript Engine general RESO WORK 2012-01-04
496816 Rounding difference between JIT and interpreter Core JavaScript Engine graydon RESO FIXE 2012-01-04
491013 "Assertion failure: OBJ_SCOPE(obj)->object == pobj, at ../jsobj.cpp" or "Assertion failure: OBJ_IS_CLONED_BLOCK(obj), at ../jsobj.cpp" Core JavaScript Engine igor RESO FIXE 2009-08-03
568281 "Assertion failure: pc >= script->main && pc < script->code + script->length," with defineSetter, Array.reduce Core JavaScript Engine igor RESO WORK 2013-01-19
1499607 Assertion failure: fallibleScope_ ([OOM] Cannot allocate a new chunk in an infallible scope.), at js/src/ds/LifoAlloc.cpp:145 Core JavaScript Engine iireland RESO FIXE 2018-11-05
1870756 Assertion failure: cx_->hadResourceExhaustion(), at jit/WarpOracle.cpp:206 Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
1892184 Assertion failure: kind != BailoutKind::Unknown, at jit/shared/Lowering-shared.cpp:275 Core JavaScript Engine: J iireland RESO FIXE 2024-05-02
1871186 Assertion failure: buffer, at gc/Nursery.cpp:1620 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1877406 Assertion failure: slots == calculateDynamicSlots(), at vm/JSObject-inl.h:45 Core JavaScript Engine jcoppeard RESO FIXE 2024-04-09
1884746 Assertion failure: !zone->uniqueIds().has(tgt), at gc/StableCellHasher-inl.h:140 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1407058 Differential Testing: Different output message involving Object.defineProperty Core JavaScript Engine: J jdemooij RESO FIXE 2017-10-12
1878466 AddressSanitizer: SEGV on unknown address 0x000000000000 or MOZ_CRASH(Invalid object. Dead wrapper?) at vm/JSObject.h:662 Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
1878511 MOZ_CRASH(If all our globals are dead, why is someone expecting a global?) at vm/Compartment.cpp:593 Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
1501666 Assertion failure: stepperCount == trappingScript->stepModeCount(), at js/src/vm/Debugger.cpp:2382 Core JavaScript Engine jorendorff RESO FIXE 2019-05-10
1678785 AddressSanitizer: SEGV [@ vixl::Memory::Read] Core JavaScript: WebAssem jseward RESO FIXE 2024-04-09
483940 TM: trace through val[obj] (both setting and getting) rather than aborting Core JavaScript Engine jwalden RESO WONT 2011-06-09
1516720 Assertion failure: byteRegs.has(r), at js/src/jit/x86-shared/MacroAssembler-x86-shared.cpp:1013 Core JavaScript: WebAssem lhansen RESO FIXE 2019-02-05
1524692 Assertion failure: expect != replace && replace != output && output != expect, at js/src/jit/arm/MacroAssembler-arm.cpp:5333 with wasm Core JavaScript: WebAssem lhansen RESO FIXE 2019-08-07
1535194 Silent overflow in diffB during far jump setup leads to branch-to-wild-location Core JavaScript: WebAssem lhansen RESO FIXE 2020-06-04
1535482 Assertion failure: !used(), at js/src/jit/Label.h:85 with --arm-asm-nop-fill=1 Core JavaScript: WebAssem lhansen RESO FIXE 2020-06-05
1535848 Crash [@ js::jit::MacroAssembler::patchCall] or Assertion failure: vixl::is_int26(relTarget00), at js/src/jit/arm64/MacroAssembler-arm64.cpp:672 Core JavaScript: WebAssem lhansen RESO FIXE 2020-06-05
1691320 AddressSanitizer: heap-use-after-free, WRITE of size 4 Core JavaScript: WebAssem lhansen RESO FIXE 2024-04-09
1745117 Assertion failure: ArrayBufferObject::maxBufferByteLength() % PageSize == 0, at wasm/WasmMemory.cpp:266 Core JavaScript: WebAssem lhansen RESO FIXE 2024-04-09
1767202 AddressSanitizer: heap-buffer-overflow with Debugger Core JavaScript: WebAssem lhansen RESO FIXE 2024-04-09
1875650 Assertion failure: !obj->nonCCWRealm()->realmFuses.optimizeGetIteratorFuse.intact(), at jit/CacheIR.cpp:13809 Core JavaScript Engine mgaudet RESO FIXE 2024-04-09
1219128 Assertion failure: inited == hasPrototype(key), at vm/GlobalObject.h:334 with OOM Core JavaScript Engine: J nicolas.b.pierron RESO FIXE 2024-02-03
1456392 Differential Testing: Different output message involving baselineCompile Core JavaScript Engine: J nicolas.b.pierron RESO FIXE 2018-08-22
1534492 Assertion failure: base() != other.reg(), at js/src/jit/MoveResolver.h:109 Core JavaScript Engine nicolas.b.pierron RESO FIXE 2019-04-09
1534840 Assertion failure: !canNotPlacePool_, at js/src/jit/shared/IonAssemblerBufferWithConstantPools.h:971 Core JavaScript Engine nicolas.b.pierron RESO FIXE 2019-04-23
460405 "ASSERTION: Expected only one call!: '!gCallCount++'" when shutting down Thunderbird with Lightning Calendar General nobody RESO WORK 2008-11-06
460406 "ASSERTION: can't get xpt search path" when shutting down Thunderbird with Lightning Calendar General nobody RESO WORK 2008-11-06
805664 Redirect loop prevents access to Santander Brasil (Brazilian bank) Web Compatibility Site Reports nobody RESO FIXE 2024-03-07
1529377 Assertion failure: !canNotPlacePool_, at js/src/jit/shared/IonAssemblerBufferWithConstantPools.h:971 on ARM64 Core JavaScript Engine: J nobody RESO DUPL 2019-03-12
1530535 Crash [@ JSObject::getClass] or Assertion failure: MIR instruction returned value with unexpected type, at js/src/jit/MacroAssembler.cpp:2029 Core JavaScript Engine: J nobody RESO DUPL 2019-04-15
1684347 EatsAtLeastFromLoopEntry is incorrect for quantifiers containing lookahead assertions Core JavaScript Engine: J nobody RESO DUPL 2024-04-09
1542279 Assertion failure: newMaxNurseryChunks > 0, at js/src/gc/Nursery.cpp:1243 Core JavaScript: GC pbone RESO FIXE 2019-04-09
1567292 LeakSanitizer: [@ js::Mutex::heldMutexStack] with evalInWorker Core JavaScript Engine pbone RESO FIXE 2019-07-26
433107 Drop down arrow for "To/CC/BCC/.." too close to the edge, widget doesn't show focus Thunderbird Message Compose Wind philringnalda RESO FIXE 2008-09-15
1567040 LeakSanitizer: [@ js::wasm::StackMap::create] Core JavaScript: WebAssem rhunt RESO FIXE 2019-09-11
1777604 Assertion failure: instCache_[offset] == instValue, at jit/arm64/vixl/MozCachingDecoder.h:77 Core JavaScript: WebAssem rhunt RESO FIXE 2024-04-09
1810697 LeakSanitizer: [@ js::wasm::ShareableBytes] Core JavaScript: WebAssem rhunt RESO FIXE 2024-04-09
1538083 Differential Testing: Different output message involving IonMonkey on ARM64 and Math.trunc Core JavaScript Engine: J sean.stangl RESO FIXE 2019-04-22
432840 [mac] Include symbolic link to Applications folder Thunderbird Installer standard8 RESO FIXE 2008-09-12
1459754 Differential Testing: Different output message involving __defineGetter__ Core JavaScript Engine: J tcampbell RESO FIXE 2018-06-07
1723601 Assertion failure: u.scripted.s.script_, at vm/JSFunction.h:448 Core JavaScript Engine tcampbell RESO FIXE 2024-04-09
423524 Consistently get CGContextGetType: invalid context Errors in Terminal Core Graphics vladimir RESO FIXE 2008-03-18
1878673 Crash [@ EmitUnarySimd128] or Assertion failure: producer_ != nullptr, at it/MIR.h:248 Core JavaScript Engine: J ydelendik RESO FIXE 2024-04-09
1880770 Crash [@ __strlen_avx2] or [@ UTF8CharsToString] Core JavaScript: WebAssem ydelendik RESO FIXE 2024-04-09
1787628 Unable to compile js shell on Linux Firefox Build System General ahochheiden RESO FIXE 2022-08-31
1872555 Assertion failure: !mArena || arena == mArena, at memory/build/mozjemalloc.cpp:4615 Core JavaScript Engine andrebargull RESO FIXE 2024-04-09
1688190 AddressSanitizer: SEGV or Assertion failure: !warmUpData_.isEnclosingScript() (Enclosing scope is not computed yet), at vm/JSScript.cpp:705 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
1559099 Cranelift: Segfault crash Core JavaScript: WebAssem bugzilla RESO FIXE 2020-08-08
801955 Run Valgrind builds on all mozilla-central-based trees (inbound, try, fx-team, etc) Release Engineering General catlee RESO FIXE 2018-05-08
1681597 Assertion failure: !outerScript->hadEagerTruncationBailout(), at jit/BaselineBailouts.cpp:2029 Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
1811171 LeakSanitizer: [@ js::jit::IonScript::New] with finally Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
1870747 Assertion failure: Integer input should be equal or higher than Lowerbound., at jit/VMFunctions.cpp:2911 Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
1888346 Assertion failure: cx_->hadResourceExhaustion(), at jit/WarpOracle.cpp:206 Core JavaScript Engine: J iireland RESO FIXE 2024-04-09
850965 Wrong section highlighted in dropdown on mobile devices www.mozilla.org General indiasuny000 RESO FIXE 2013-10-17
1395744 Assertion failure: atomsZone->isGCMarking(), at js/src/jsgc.cpp:4122 Core JavaScript Engine jcoppeard RESO FIXE 2017-10-17
1711342 AddressSanitizer: SEGV or MOZ_CRASH(This promise should never be rejected) Core JavaScript Engine jcoppeard RESO FIXE 2024-04-09
1883144 Assertion failure: !cx->isExceptionPending(), at vm/Interpreter.cpp:483 Core JavaScript: GC jcoppeard RESO FIXE 2024-04-09
1496892 Crash [@ MOZ_CrashPrintf] Core JavaScript Engine jdemooij RESO FIXE 2018-10-22
1876660 Crash [@ __strlen_avx2] involving disnative Core JavaScript Engine jdemooij RESO FIXE 2024-04-09
793989 Self-serve should be able to request arbitrary builds on a push (not just retriggers or complete sets of dep/PGO/Nightly builds) Release Engineering General johnlzeller RESO FIXE 2018-05-08
806007 [Browser] Images keep flashing continuously in US embassy (for Brazil) website in B2G browser Core Graphics: ImageLib justin.lebar+bug RESO FIXE 2012-11-17
1027846 Differential Testing: Different output message involving length Core JavaScript Engine: J jwalden RESO INVA 2022-02-24
1510193 Differential Testing: Different output message involving TypeError messages Core JavaScript Engine: J lhansen RESO FIXE 2018-12-02
1565768 Assertion failure: baseline || ion || cranelift, at js/src/wasm/WasmCompile.cpp:130 with asm.js and wonky compiler selection Core JavaScript: WebAssem lhansen RESO FIXE 2019-07-31
1666051 Test cases (was: Crash at weird memory address on 32-bit builds) Core JavaScript Engine lhansen RESO FIXE 2024-04-09
1658976 Unable to compile 32-bit SpiderMonkey builds on 64-bit Linux Firefox Build System General mhentges RESO FIXE 2020-08-29
266076 Bookmark menu context menu accesskeys don't work Firefox Bookmarks & History nobody RESO WORK 2007-04-05
715365 Include native symbols in jsshell-* files Firefox Build System General nobody RESO WONT 2018-03-02
751700 Compile separate js shells with --enable-more-deterministic Release Engineering General nobody RESO INVA 2020-12-04
794627 Run mochitests in Valgrind tbpl builds on test slaves Release Engineering General nobody RESO INCO 2018-05-08
795124 Run other tests (besides PGO tests) on Valgrind builds on test machines Release Engineering General nobody RESO INCO 2018-05-08
797158 Run B2G tests in Valgrind tbpl builds on test slaves Release Engineering General nobody RESO WONT 2018-05-08
801911 Run jstests and jit-tests in Valgrind tbpl builds on test slaves Release Engineering General nobody RESO INCO 2018-05-08
803739 Run xpcshell tests in Valgrind tbpl builds on test slaves Release Engineering General nobody RESO INCO 2018-05-08
803757 Run crashtests in Valgrind tbpl builds on test slaves Release Engineering General nobody RESO INCO 2018-05-08
803758 Run jsreftests in Valgrind tbpl builds on test slaves Release Engineering General nobody RESO INCO 2018-05-08
806057 PDF file gets saved with web page file name instead with its own one Firefox PDF Viewer nobody RESO WORK 2013-02-21
1193057 Crash [@ js::ScopeCoordinateName] or [@ js::RunScript] Core JavaScript Engine nobody RESO WORK 2017-12-13
1240987 Attaching a MacBook Pro to a TV via HDMI causes Google Maps to have a black background Core Graphics nobody RESO WORK 2019-01-15
1296243 Differential Testing: Different output message involving enableShellAllocationMetadataBuilder Core JavaScript Engine: J nobody RESO INVA 2016-10-05
1325188 Crash [@ JSRope::leftChild] or Assertion failure: (uintptr_t(p) & OutOfLineTraceKindMask) == 0, at /home/fuzz3lin/shell-cache/js-dbg-32-linux-5206da513654/objdir-js/dist/include/js/HeapAPI.h:225 Core JavaScript Engine nobody RESO WORK 2019-02-13
1335533 Assertion failure: !JS_IsExceptionPending(cx), at js/src/jsexn.h:124 Core JavaScript Engine nobody RESO WORK 2018-07-26
1408815 Session Restore for multiple windows via "Close all windows" on taskbar closes each window independently, causing only last window closed to restore Firefox Menus nobody RESO WORK 2021-10-14
1534484 Assertion failure: Integer input should be lower or equal than Upperbound., at js/src/jit/MacroAssembler.cpp:2029 Core JavaScript Engine nobody RESO DUPL 2019-04-15
1568070 LeakSanitizer: Multiple leaks [@ vixl::CachingDecoder] or [@ vixl::Redirection] with ARM64 simulator Core JavaScript Engine nobody RESO INVA 2019-07-25
1471136 Update fuzzer shell flags combinations Core JavaScript Engine: J nth10sd RESO FIXE 2018-09-04
1498177 Assertion failure: lowLimit < highLimit, at js/src/gc/GC.cpp:2098 Core JavaScript Engine pbone RESO FIXE 2018-10-15
1520076 Hit MOZ_CRASH(Zone not scheduled) at js/src/gc/GC.cpp:7150 Core JavaScript Engine pbone RESO FIXE 2019-01-23
1556137 LeakSanitizer: [@ SetGCCallback] with setGCCallback Core JavaScript: GC pbone RESO FIXE 2019-06-10
1562437 LeakSanitizer: [@ js::Mutex::heldMutexStack] Core JavaScript Engine pbone RESO FIXE 2019-07-23
1573266 MOZ_CRASH(Mutex ordering violation) when thread creation fails Core JavaScript Engine pbone RESO FIXE 2019-09-25
1299147 Assertion failure: !cycleEnd_, at js/src/jit/MoveResolver.h:278 Core JavaScript Engine: J sean.stangl RESO FIXE 2017-10-26
1463501 Assertion failure: !IsInsideNursery(cell), at js/src/jit/VMFunctions.cpp:695 Core JavaScript Engine sphink RESO FIXE 2019-05-24
1878098 Assertion failure: self.get(), at builtin/TestingFunctions.cpp:5274 Core JavaScript Engine sphink RESO FIXE 2024-04-09
1427860 Crash [@ JSScript::functionNonDelazifying] involving saveIncrementalBytecode Core JavaScript Engine tcampbell RESO FIXE 2018-11-27
1268020 Implement "tools_menu" context WebExtensions Frontend tomica RESO FIXE 2018-06-19
1879166 Assertion failure: !cx->isExceptionPending(), at vm/Interpreter.cpp:483 Core JavaScript Engine tschuster RESO FIXE 2024-04-09
1891658 Assertion failure: js::gc::IsCellPointerValid(&obj), at dist/include/js/Value.h:633 Core JavaScript: WebAssem ydelendik RESO FIXE 2024-04-30
1894586 Assertion failure: js::gc::IsCellPointerValid(str), at dist/include/js/Value.h:615 Core JavaScript: WebAssem ydelendik RESO FIXE Tue 11:34
1694916 AddressSanitizer: SEGV or Assertion failure: !warmUpData_.isEnclosingScript() (Enclosing scope is not computed yet), at vm/JSScript.cpp:705 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
725424 Pressing Menu->Reload repeatedly without waiting for Fennec to finish reloading makes Fennec try to access a wyciwyg URL Core DOM: Navigation bzbarsky RESO FIXE 2019-03-04
397522 Optimized PNG files for icons Firefox Theme nobody RESO FIXE 2008-05-05
400023 Minefield doesn't quit when some modal dialogs are open Firefox General nobody RESO DUPL 2008-03-17
432857 Drop down arrow missing for IMAP folders Thunderbird Mail Window Front En nobody RESO WORK 2014-01-16
696308 Run Valgrind builds on Mac slaves Release Engineering General nobody RESO INCO 2018-05-08
803763 Run Valgrind builds on Android Tinderboxes Release Engineering General nobody RESO INCO 2018-05-08
1053996 Assertion failure: entry - begin_ <= (255), at asmjs/AsmJSModule.cpp Core JavaScript Engine: J jdemooij RESO FIXE 2016-10-06
944252 crash in libGLESv2_POWERVR_SGX540_120.so@0x4fe56 Core Graphics jgilbert RESO WORK 2016-05-09
668452 Make it easier for non-Mozilla devs to get and use the JavaScript Debug Shell Release Engineering General lukasblakk+bugs RESO FIXE 2013-08-12
801913 Run reftests in Valgrind tbpl builds on test slaves Release Engineering General nobody RESO INCO 2018-05-08
948321 Differential Testing: Different division results on x86 platforms Core JavaScript Engine: J nobody RESO WORK 2017-12-12
1085299 Differential Testing: Different output message involving Object.preventExtensions Core JavaScript Engine: J nobody RESO WORK 2021-02-18
1609308 Try to better handle OOMs in Cranelift Core JavaScript: WebAssem nobody RESO INAC 2021-06-02
432902 In some versions, "Import Everything" does nothing, shows a dialog with no options Thunderbird Migration acelists RESO FIXE 2016-07-06
577646 JM: Crash [@ js::mjit::JaegerShot] Core JavaScript Engine adrake RESO FIXE 2013-01-14
580694 JM: "Assertion failure: kind == GetFinalizableThingTraceKind(str)," Core JavaScript Engine adrake RESO FIXE 2013-01-19
580712 JM: Crash [@ js::DefaultValue] or "Assertion failure: &obj != NULL," Core JavaScript Engine adrake RESO FIXE 2013-01-14
582279 JM: Crash [@ js::mjit::Compiler::generateMethod] or "Assertion failure: str->header()->isFlat()," Core JavaScript Engine adrake RESO FIXE 2011-06-09
583675 JM: "Assertion failure: begin <= end," Core JavaScript Engine adrake RESO FIXE 2013-01-19
583680 JM: Crash [@ 0xf7685768] Core JavaScript Engine adrake RESO FIXE 2013-01-19
583692 JM: Crash [@ 0x02ffffec] Core JavaScript Engine adrake RESO FIXE 2011-06-09
1416948 Unable to compile opt js shells with --enable-gczeal --enable-debug-symbols --disable-tests Core JavaScript Engine allstars.chh RESO DUPL 2017-11-14
1542980 Build failure with deterministic js shells Core JavaScript Engine allstars.chh RESO FIXE 2022-01-10
1476417 Differential Testing: Different output message involving arguments Core JavaScript Engine: J andrebargull RESO FIXE 2018-08-03
1481032 Assertion failure: reqCapacity < oldCapacity, at js/src/vm/NativeObject.cpp:988 Core JavaScript Engine andrebargull RESO FIXE 2018-08-09
1545354 Assertion failure: promise->state() == JS::PromiseState::Pending, at builtin/Promise.cpp:1117 Core JavaScript Engine andrebargull RESO FIXE 2022-01-10
1650526 Issue involving negative zero and Math.pow Core JavaScript Engine: J andrebargull RESO FIXE 2024-04-09
1684020 Assertion failure: next == JSOp::CheckThis || next == JSOp::CheckReturn || next == JSOp::CheckThisReinit || next == JSOp::CheckLexical, at vm/Interpreter.cpp:3715 or Assertion failure: v.isSymbol() || v.isBigInt(), at jsnum.cpp:1944 Core JavaScript Engine andrebargull RESO FIXE 2024-04-09
1769723 Differential Testing: Different output message involving --ion-eager Core JavaScript Engine: J andrebargull RESO FIXE 2024-04-09
1851520 AddressSanitizer: global-buffer-overflow on address Core JavaScript Engine andrebargull RESO FIXE 2024-04-09
590519 Compile failure on ARM - "'rdtsc' was not declared in this scope" Core JavaScript Engine anygregor RESO FIXE 2010-08-28
605011 "Assertion failure: JS_CHECK_STACK_SIZE(cx->stackLimit, &stackDummy)," Core JavaScript Engine anygregor RESO FIXE 2013-01-19
1122334 Assertion failure: next->isKind(PNK_ARRAYPUSH), at jsreflect.cpp Core JavaScript Engine arai.unmht RESO FIXE 2015-01-23
1155473 Add js 32-bit ARM-simulator Mac shells to treeherder Core JavaScript Engine arai.unmht RESO FIXE 2015-11-25
1194022 Assertion failure: next.type != TOK_DIV && next.type != TOK_REGEXP (next token requires contextual specifier to be parsed unambiguously), at frontend/TokenStream.h Core JavaScript Engine arai.unmht RESO FIXE 2015-08-14
1195578 Assertion failure: next.type != TOK_DIV && next.type != TOK_REGEXP (next token requires contextual specifier to be parsed unambiguously), at frontend/TokenStream.h Core JavaScript Engine arai.unmht RESO FIXE 2015-09-12
1204368 Assertion failure: next.type != TOK_DIV && next.type != TOK_REGEXP (next token requires contextual specifier to be parsed unambiguously), at frontend/TokenStream.h Core JavaScript Engine arai.unmht RESO FIXE 2015-09-17
1212719 Assertion failure: false (MOZ_ASSERT_UNREACHABLE: this token was previously looked up with a different modifier, potentially making tokenization non-deterministic), at frontend/TokenStream.h Core JavaScript Engine arai.unmht RESO FIXE 2015-10-26
1236638 Assertion failure: [barrier verifier] Unmarked edge: atom, at js/src/gc/Verifier.cpp:301 Core JavaScript Engine arai.unmht RESO FIXE 2016-01-05
1247701 Differential Testing: Different output message involving .exec Core JavaScript Engine: J arai.unmht RESO FIXE 2016-04-14
1263525 Differential Testing: Different output message involving std_Array and Object.prototype.prototype Core JavaScript Engine: J arai.unmht RESO FIXE 2016-05-26
1263532 Assertion failure: isOptimizable, at js/src/jsstr.cpp:3863 Core JavaScript Engine arai.unmht RESO FIXE 2016-06-04
1263558 Assertion failure: isObject(), at dist/include/js/Value.h:1281 Core JavaScript Engine arai.unmht RESO FIXE 2016-05-24
1263811 Differential Testing: Different output message involving arguments Core JavaScript Engine: J arai.unmht RESO FIXE 2016-04-25
1264561 Differential Testing: Different output message involving RegExp Core JavaScript Engine: J arai.unmht RESO FIXE 2017-01-05
1268574 Crash [@ js::IsSelfHostedFunctionWithName] Core JavaScript Engine arai.unmht RESO FIXE 2016-05-03
1271857 Assertion failure: len != 0, at js/src/builtin/RegExp.cpp:1478 Core JavaScript Engine arai.unmht RESO FIXE 2016-05-12
1272523 Assertion failure: args[0].isString(), at js/src/builtin/Intl.cpp:835 Core JavaScript Engine arai.unmht RESO FIXE 2017-02-09
1317460 Assertion failure: throwing, at js/src/jscntxt.cpp:911 Core JavaScript Engine arai.unmht RESO FIXE 2016-11-25
1317824 Assertion failure: isObject(), at dist/include/js/Value.h:657 Core JavaScript Engine arai.unmht RESO FIXE 2016-11-21
1332881 Crash [@ js::CloseIterator] or Assertion failure: isObject(), at dist/include/js/Value.h:642 Core JavaScript Engine arai.unmht RESO FIXE 2017-02-18
1340089 Crash [@ js::frontend::Parser<js::frontend::FullParseHandler>::switchStatement] or Assertion failure: keyNonZero(l), at js/src/ds/InlineTable.h:269 Core JavaScript Engine arai.unmht RESO FIXE 2017-03-06
1479076 Assertion failure: thingZone == zone || thingZone->isAtomsZone(), at js/src/gc/GC.cpp:4153 Core JavaScript Engine arai.unmht RESO FIXE 2018-08-06
1518662 Assertion failure: !cx->isExceptionPending(), at js/src/vm/Interpreter.cpp:447 with async Core JavaScript Engine arai.unmht RESO FIXE 2019-01-10
1519255 Assertion failure: !JS_IsExceptionPending(cx_), at js/src/vm/JSContext.h:1127 Core JavaScript Engine arai.unmht RESO FIXE 2019-03-24
1519322 Assertion failure: deleted, at js/src/shell/js.cpp:1100 with Promise Core JavaScript Engine arai.unmht RESO FIXE 2019-01-12
1519612 Assertion failure: !cx->isExceptionPending(), at js/src/vm/JSContext-inl.h:288 with Promise.reject Core JavaScript Engine arai.unmht RESO FIXE 2019-01-15
1522339 Assertion failure: deleted, at js/src/shell/js.cpp:1098 Core JavaScript Engine arai.unmht RESO FIXE 2019-03-27
1526234 Add --dump-bytecode to fuzz-flags.txt Core JavaScript Engine arai.unmht RESO FIXE 2019-02-13
1527768 Hit MOZ_CRASH(Invalid object. Dead wrapper?) at js/src/vm/JSObject.h:652 with async Core JavaScript Engine arai.unmht RESO FIXE 2019-02-27
1564365 Assertion failure: promise->state() == JS::PromiseState::Pending, at js/src/builtin/Promise.cpp:1119 with --blinterp-eager Core JavaScript Engine arai.unmht RESO FIXE 2019-08-13
1750935 Differential Testing: Different output message involving RegExp and --fast-warmup Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
1879699 LeakSanitizer: detected memory leaks [@ OffThreadCompileToStencil] Core JavaScript Engine arai.unmht RESO FIXE 2024-04-09
1891598 Assertion failure: isFunctionFrame(), at vm/Stack.h:588 Core JavaScript Engine arai.unmht RESO FIXE 2024-04-30
1066414 Assertion failure: opn->isArity(PN_NAME), at frontend/ParseNode.cpp Core JavaScript Engine arpad.borsos RESO FIXE 2014-09-13
1124480 Assertion failure: opn->isArity(PN_NAME), at frontend/ParseNode.cpp Core JavaScript Engine arpad.borsos RESO FIXE 2015-01-22
776314 "Assertion failure: src->length() > 0 && chars[0] == '('," Core JavaScript Engine benjamin RESO FIXE 2013-01-19
776332 Crash [@ JSFunction::toString] with --enable-root-analysis Core JavaScript Engine benjamin RESO FIXE 2012-07-25
777834 "Assertion failure: ptr," Core JavaScript Engine benjamin RESO FIXE 2013-01-14
780405 "Assertion failure: strictModeState != StrictMode::UNKNOWN," Core JavaScript Engine benjamin RESO FIXE 2013-01-19
785305 "Assertion failure: pn->isArity(PN_NAME) || pn->isArity(PN_NULLARY)," Core JavaScript Engine benjamin RESO FIXE 2013-01-19
842884 "Assertion failure: 0," Core JavaScript Engine benjamin RESO FIXE 2013-02-27
846984 Crash [@ js_NewStringCopyN] with a threadsafe js shell Core JavaScript Engine benjamin RESO FIXE 2013-03-17
595921 JM: "Assertion failure: newShape != initialShape," Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-14
643839 Crash [@ js::gc::MarkChildren] Core JavaScript Engine bhackett1024 RESO FIXE 2013-03-13
648837 TM: Crash [@ js_NativeGetInline] or [@ js_GetProperty] or "Assertion failure: newShape->slot == lastProperty()->slot," Core JavaScript Engine bhackett1024 RESO WORK 2015-10-25
660538 TM: Crash [@ js::DefaultValue] or "Assertion failure: v.isObject()," Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-14
690292 JM: Different output with testcase involving E4X with and without -m, -a and -n Core JavaScript Engine bhackett1024 RESO FIXE 2011-10-07
690650 TI: Crash [@ js_InternalInterpret] or "Assertion failure: codeArray[offset]," Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-19
698902 "Assertion failure: base," Core JavaScript Engine bhackett1024 RESO FIXE 2015-05-18
700501 [ObjShrink] "Assertion failure: [infer failure] Missing type for arg 0: <0xf6b0aaa0>," or "Assertion failure: [infer failure] Missing type for arg 0: [0xf6c001c0]," Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-14
700792 [ObjShrink] "Assertion failure: isScope()," with trap Core JavaScript Engine bhackett1024 RESO FIXE 2011-11-16
703818 [ObjShrink] "Assertion failure: hasSlot() && !hasMissingSlot()," Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-14
705895 [ObjShrink] Crash with testcase at weird location (likely null deref) Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-14
707384 TI: "Assertion failure: getCode(offset).loop," with trap Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-14
709863 Crash [@ JSC::MacroAssemblerCodePtr::executableAddress] Core JavaScript Engine bhackett1024 RESO FIXE 2011-12-16
716013 "Assertion failure: static_cast<Cell *>(thing)->isMarked()," Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-14
716713 "Assertion failure: ss->top >= 2," or "Assertion failure: top != 0," or "Assertion failure: newtop <= oldtop," Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-14
718823 Crash [@ js::StackFrame::functionEpilogue] Core JavaScript Engine bhackett1024 RESO DUPL 2014-05-05
721939 "Assertion failure: vp[1].isObject()," Core JavaScript Engine bhackett1024 RESO FIXE 2012-02-07
722598 Crash [@ js::mjit::JITScript::destroyChunk] or "Assertion failure: i < nchunks," Core JavaScript Engine bhackett1024 RESO FIXE 2012-03-15
812235 "Assertion failure: needsBarrier_," Core JavaScript Engine bhackett1024 RESO FIXE 2013-02-06
829795 "Assertion failure: !fe->isConstant()," Core JavaScript Engine bhackett1024 RESO FIXE 2013-02-07
829813 Crash [@ js::Shape::attributes] or [@ js::baseops::GetAttributes] Core JavaScript Engine bhackett1024 RESO FIXE 2013-03-31
835496 IonMonkey: "Assertion failure: !val.isMagic()," or "Assertion failure: data.s.payload.why == why," Core JavaScript Engine bhackett1024 RESO FIXE 2013-01-29
836623 "Assertion failure: oldcap <= newcap," Core JavaScript Engine bhackett1024 RESO FIXE 2013-02-01
861439 Crash [@ js::UncheckedUnwrap] with bug 804676 fixes Core JavaScript Engine bhackett1024 RESO FIXE 2013-04-23
862228 Crash [@ JSFlatString::isIndex] or [@ js::frontend::Parser] or Assertion failure: JSString::isLinear(), at vm/String.h or Assertion failure: !isIndex(&dummy), at vm/String.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-04-17
862708 Crash [@ js::ion::ParallelArrayVisitor::visitCall] or Assertion failure: calleeTypes, at ion/ParallelArrayAnalysis.cpp with bug 804676 fixes Core JavaScript Engine bhackett1024 RESO FIXE 2013-05-01
864099 Assertion failure: !decls_.lookupFirst(name), at frontend/Parser.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2013-09-05
864101 Assertion failure: (*pvalue)->type() != propertyType, at ion/IonBuilder.cpp with bug 804676 fixes Core JavaScript Engine bhackett1024 RESO FIXE 2013-05-01
868206 Assertion failure: !minimalInterval(interval), at ion/BacktrackingAllocator.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2013-10-02
868890 IonMonkey: Crash at null with [@ js::ion::AutoFlushInhibitor::~AutoFlushInhibitor] on the stack Core JavaScript Engine bhackett1024 RESO FIXE 2014-05-05
875476 Assertion failure: isNumber(), at dist/include/js/Value.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-05-30
883623 Assertion failure: !val.isMagic(), at jsobj.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2013-06-18
883630 Assertion failure: hasScript(), at jsfun.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-06-23
887549 Fall back to full parser when destructuring shorthand is used (differential testing issues with invalid object initializer) Core JavaScript Engine bhackett1024 RESO FIXE 2013-07-08
896154 Assertion failure: rt->workerThreadState->shouldPause, at vm/Runtime-inl.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-07-29
899510 Assertion failure: isObject(), at jsinferinlines.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-08-23
900681 Assertion failure: backgroundFinalizeState[i] == BFS_DONE, at jsgc.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-09-03
909574 Assertion failure: latest == first, at ds/LifoAlloc.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2015-03-05
912152 Assertion failure: !script()->analysis()->hasTryFinally(), at jit/IonBuilder.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2013-09-11
919140 Assertion failure: hasScript(), at jsfun.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-10-02
923860 Assertion failure: id == IdToTypeId(id), at jsinferinlines.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-10-10
923892 Crash [@ getGeneric] Core JavaScript Engine: J bhackett1024 RESO FIXE 2015-02-25
931496 Assertion failure: script->canBaselineCompile(), at jit/BaselineJIT.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-02-07
936361 Assertion failure: (!property.isOwnProperty(constraints())), at jit/IonBuilder.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2013-11-12
936403 Crash [@ operator] or [@ JSObject::nativeSetSlotWithType] or Assertion failure: obj, at dist/include/js/Value.h Core JavaScript Engine: J bhackett1024 RESO FIXE 2015-02-25
936854 Assertion failure: !isOwned() && !unowned_, at vm/Shape.h Core JavaScript Engine bhackett1024 RESO FIXE 2013-11-18
975335 OdinMonkey: Assertion failure: pt && pt->associatedWith(rt), at vm/Runtime.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-02-21
980013 Assertion failure: res.isInt32(), at jit/BaselineIC.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-06-19
980119 Assertion failure: !unknownProperties(), at jsinfer.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-03-07
991336 CID 750186: Uninitialized scalar field in jsinfer.h as found by Coverity Core JavaScript Engine bhackett1024 RESO FIXE 2018-07-06
998059 Differential Testing: IonMonkey gives incorrect result for typedArray.length Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-06-06
1019322 Assertion failure: !IsCompilingAsmJS(), at jit/shared/Assembler-shared.h Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-06-05
1024786 Assertion failure: windowLength <= windowRadius * 2, at frontend/TokenStream.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2014-07-14
1033946 Differential Testing: Different output message involving RegExp, exec, --latin1-strings Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-11-05
1037898 CID 1136430: Out-of-bounds access as found by Coverity Core JavaScript Engine bhackett1024 RESO FIXE 2018-07-06
1050094 Crash at weird memory address involving -D Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-08-22
1053683 Crash [@ js::irregexp::ActionNode::FillInBMInfo] Core JavaScript Engine bhackett1024 RESO FIXE 2014-08-19
1054601 Assertion failure: header->isLoopHeader(), at jit/LoopUnroller.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-09-09
1059459 Crash [@ js::jit::MResumePoint::New] or Assertion failure: p, at jit/LoopUnroller.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-09-09
1076091 Differential Testing: Different output message involving typedarrays and defineProperty Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-10-08
1097585 Crash [@ js::BaseProxyHandler::call] or Hit MOZ_CRASH(callable proxies should implement call trap) at proxy/BaseProxyHandler.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-11-13
1098961 Crash [@ js::TypeDescrIsSimpleType] or Assertion failure: args[0].isObject(), at builtin/TypedObject.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2014-11-18
1100080 Assertion failure: !used(), at jit/Label.h Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-12-05
1100202 Assertion failure: this->is<T>(), at jsobj.h Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-11-18
1102329 Assertion failure: this->is<T>(), at jsobj.h Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-11-24
1111326 Assertion failure: addr.offset == 0, at jit/arm/MacroAssembler-arm.h Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-12-18
1111363 Crash [@ js::gc::GCRuntime::sweepBackgroundThings] or Assertion failure: JSVAL_IS_DOUBLE_IMPL(data), at dist/include/js/Value.h Core JavaScript Engine: J bhackett1024 RESO FIXE 2014-12-18
1115246 Assertion failure: !cx->isExceptionPending(), at jscntxtinlines.h Core JavaScript Engine bhackett1024 RESO FIXE 2015-01-30
1116646 Assertion failure: index < VREG_MASK, at jit/LIR.h Core JavaScript Engine bhackett1024 RESO FIXE 2015-01-07
1122839 Assertion failure: Unexpected object type, at jit/MacroAssembler.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2015-01-22
1123011 Differential Testing: Different output message involving "use strict" Core JavaScript Engine: J bhackett1024 RESO FIXE 2015-01-24
1128094 Crash [@ setBailoutKind] or [@ js::jit::LIRGenerator::visitInstruction] Core JavaScript Engine: J bhackett1024 RESO FIXE 2015-10-16
1130640 Crash [@ js::jit::LiveInterval::addRangeAtHead] or [@ js::jit::LinearScanAllocator::go] or Assertion failure: !producer->isDiscarded(), at jit/IonAnalysis.cpp Core JavaScript Engine: J bhackett1024 RESO FIXE 2015-03-19
1132390 Crash [@ js::ToPrimitive] or [@ js::ToNumberSlow] Core JavaScript Engine: J bhackett1024 RESO FIXE 2015-02-22
1138740 Differential Testing: Different output message involving array buffers Core JavaScript Engine: J bhackett1024 RESO FIXE 2015-04-28
1141379 Assertion failure: isEmpty(), at dist/include/mozilla/LinkedList.h Core JavaScript Engine bhackett1024 RESO FIXE 2015-03-12
1142331 Assertion failure: ssi_.type() == StaticScopeIter<CanGC>::Function, at vm/ScopeObject.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2015-03-17
1143106 Crash [@ js::jit::ExecutableAllocator::poolForSize] or Assertion failure: this->is<T>(), at js/src/jsobj.h Core JavaScript Engine bhackett1024 RESO FIXE 2015-03-18
1145426 Crash [@ js::jit::Simulator::instructionDecode] or Assertion failure: obj->compartment() == obj2->compartment(), at gc/Marking.cpp involving --unboxed-objects Core JavaScript Engine bhackett1024 RESO FIXE 2015-03-23
1147608 Assertion failure: HasSSE2(), at jit/shared/Assembler-x86-shared.h or Assertion failure: callee_saved_value_d == value, at jit/arm/Simulator-arm.cpp involving --unboxed-objects Core JavaScript Engine bhackett1024 RESO FIXE 2015-04-08
1148916 Assertion failure: newKind == GenericObject || newKind == TenuredObject, at vm/UnboxedObject.cpp involving --unboxed-objects Core JavaScript Engine bhackett1024 RESO FIXE 2015-04-07
1148970 Assertion failure: Argument check fail., at jit/MacroAssembler.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2015-04-09
1151269 Crash [@ js::jit::AssemblerX86Shared::jmpSrc] involving --unboxed-objects Core JavaScript Engine bhackett1024 RESO FIXE 2015-04-09
1151401 Assertion failure: ndef->type() == MIRType_Object, at jit/IonAnalysis.cpp Core JavaScript Engine bhackett1024 RESO FIXE 2015-04-10
1155807 Assertion failure: !unknownProperties(), at vm/TypeInference.cpp involving --unboxed-objects Core JavaScript Engine bhackett1024 RESO FIXE 2015-04-29
This result was limited to 500 bugs. See all search results for this query.
REST | CSV | Feed | iCalendar
Change Columns 		Edit Search
as