334442
|
|
Incorrect use of realloc oom Crash in secmod_ReadPermDB
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2006-06-10
|
320453
|
|
Set custom titles when creating bookmarks
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
322986
|
|
Migration Integration Audit
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
325169
|
|
Feed folder icons
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
327036
|
|
OS Bookmarks menu nonfunctional
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
327209
|
|
Assertion when removing an item from places toolbar
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
327543
|
|
Live bookmark icon not displayed in places toolbar (livemarkItem.png corrupt)
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
329180
|
|
Places Popup
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
329892
|
|
Places Toolbar doesn't redraw when adding or removing items
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
239218
|
|
Menus are nonfunctional when 'tools' have focus (Downloads / Extensions / Theme Managers, JavaScript Console and Page Info window)
|
Firefox
|
Menus
|
asaf
|
RESO
|
FIXE
|
2010-05-14
|
262387
|
|
"Find as you type" steals focus from plugins' input fields
|
Toolkit
|
Find Toolbar
|
asaf
|
RESO
|
FIXE
|
2020-11-01
|
287105
|
|
Reload button is disabled after adding it back to toolbar
|
Firefox
|
Toolbars and Customi
|
asaf
|
RESO
|
FIXE
|
2008-02-23
|
287924
|
|
Bookmarks > Manage Bookmarks > Move does not work
|
Firefox
|
Bookmarks & History
|
asaf
|
RESO
|
FIXE
|
2012-02-03
|
291017
|
|
Download Manager window is corrupt
|
Toolkit
|
Downloads API
|
asaf
|
RESO
|
FIXE
|
2008-07-31
|
300203
|
|
Sometimes, SPM fails to import cookies
|
Firefox
|
Migration
|
asaf
|
RESO
|
FIXE
|
2005-07-10
|
303152
|
|
Options ->Update , "when updates are found" is always enabled
|
Firefox
|
Settings UI
|
asaf
|
RESO
|
FIXE
|
2006-03-12
|
304879
|
|
regression: commonDialog's default button code doesn't work anymore
|
Core
|
XUL
|
asaf
|
RESO
|
FIXE
|
2006-03-12
|
306185
|
|
Mac updater description string is cropped
|
Toolkit
|
Application Update
|
asaf
|
RESO
|
FIXE
|
2008-07-31
|
306208
|
|
regression: tabbar is visible in popups
|
Firefox
|
Tabbed Browser
|
asaf
|
RESO
|
FIXE
|
2006-03-12
|
309015
|
|
Options - Privacy - History , 0 days is not displayed ("ask me what to do" radio buttons not checked when opening pref window)
|
Firefox
|
Settings UI
|
asaf
|
RESO
|
FIXE
|
2006-03-12
|
309227
|
|
nsEventStateManager needs to support mousewheel.withmetakey
|
Core
|
DOM: UI Events & Foc
|
asaf
|
RESO
|
FIXE
|
2019-03-13
|
310007
|
|
No RSS UI after adding back the location bar (until a new window is created)
|
Firefox
|
Address Bar
|
asaf
|
RESO
|
FIXE
|
2005-09-26
|
310373
|
|
Dragging & Dropping a link on the "New Window"/"New Tab" buttons can load priviliged xul
|
Firefox
|
Security
|
asaf
|
RESO
|
FIXE
|
2007-04-01
|
312587
|
|
Menus stop working when Software Update window is frontmost
|
Toolkit
|
Application Update
|
asaf
|
RESO
|
FIXE
|
2008-07-31
|
312846
|
|
Pressing Enter when a UI-link is focused inside a wizard advances the wizard
|
Toolkit
|
UI Widgets
|
asaf
|
RESO
|
FIXE
|
2019-05-03
|
335077
|
|
Middle click on back button does not work.
|
Firefox
|
Toolbars and Customi
|
asaf
|
RESO
|
FIXE
|
2006-04-24
|
336882
|
|
[mac] Menubar no longer works in the addons manager
|
Toolkit
|
Add-ons Manager
|
asaf
|
RESO
|
FIXE
|
2008-07-31
|
343097
|
|
Cleaner arrowscrollbox-clicktoscroll binding
|
Toolkit
|
UI Widgets
|
asaf
|
RESO
|
FIXE
|
2009-07-12
|
343585
|
|
tab scrolling: scenario where open link in background doesn't enable the scroll button
|
Firefox
|
Tabbed Browser
|
asaf
|
RESO
|
FIXE
|
2006-11-12
|
345259
|
|
[RTL UI] opening a tab in background moves tabs if the tabstrip overflows
|
Firefox
|
Tabbed Browser
|
asaf
|
RESO
|
FIXE
|
2008-04-07
|
347797
|
|
[Mac] Tabs aligned to the left when they should be centered
|
Firefox
|
General
|
asaf
|
RESO
|
FIXE
|
2006-08-14
|
348607
|
|
locale.dir=rtl does not affect all UI elements in branch builds
|
Firefox
|
Toolbars and Customi
|
asaf
|
RESO
|
FIXE
|
2008-04-07
|
348759
|
|
[Mac] Shadow missing around favicon in location bar
|
Firefox
|
General
|
asaf
|
RESO
|
FIXE
|
2006-09-13
|
348959
|
|
[Winstripe] tabbrowser-tabs lost their focus feedback
|
Firefox
|
Toolbars and Customi
|
asaf
|
RESO
|
FIXE
|
2006-08-18
|
349079
|
|
Fix back & forward buttons issues in Pinstripe
|
Firefox
|
General
|
asaf
|
RESO
|
FIXE
|
2006-08-18
|
349148
|
|
Clicking Back / Forward button label opens dropdown instead of going back in "Icons and Text" mode
|
Firefox
|
Toolbars and Customi
|
asaf
|
RESO
|
FIXE
|
2006-08-25
|
350590
|
|
Left Click on Back and Forward brings up dropdown
|
Firefox
|
Toolbars and Customi
|
asaf
|
RESO
|
FIXE
|
2006-09-03
|
350844
|
|
Feeds preferences pane hangs and then crashes when selecting a web handler if the initially selected option was "Show me a preview" (in instant-apply mode)
|
Firefox
|
Settings UI
|
asaf
|
RESO
|
FIXE
|
2006-09-02
|
351280
|
|
nsAccessible::GetTextFromRelationID is broken on 1.8 branch
|
Core
|
Disability Access AP
|
asaf
|
RESO
|
FIXE
|
2006-09-11
|
351363
|
|
overlays to customizeToolbar.xul should also apply to the sheet implementaion
|
Firefox
|
Toolbars and Customi
|
asaf
|
RESO
|
FIXE
|
2006-12-10
|
353033
|
|
regression: Edit->Delete and Edit->Switch Text Direction are always enabled
|
Firefox
|
General
|
asaf
|
RESO
|
FIXE
|
2006-09-18
|
249067
|
|
FireFox thinks it's Netscape 7.x when I run installer, leads to crash
|
Firefox
|
Installer
|
benjamin
|
RESO
|
FIXE
|
2006-03-12
|
271802
|
|
nsPrintDialogUtil.cpp uses a localizable string for a preference
|
Core
|
Printing: Output
|
benjamin
|
RESO
|
FIXE
|
2005-08-15
|
300731
|
|
change app/extension version scheme going forward
|
Toolkit
|
Application Update
|
benjamin
|
RESO
|
FIXE
|
2008-07-31
|
302265
|
|
Whilst installing extension, clicking "Install" button during 2s count-down freezes the countdown at 2s
|
Toolkit
|
Add-ons Manager
|
benjamin
|
RESO
|
FIXE
|
2008-07-31
|
302276
|
|
Flip xpcnativewrappers default to yes.
|
Core
|
DOM: Core & HTML
|
benjamin
|
RESO
|
FIXE
|
2019-03-13
|
304987
|
|
L10N installer creates shortcuts with $ProductName$ name
|
Firefox
|
Installer
|
benjamin
|
RESO
|
FIXE
|
2008-05-14
|
306304
|
|
If bookmarks.bak is missing , all bookmarks are overwritten by the default bookmarks
|
Firefox
|
Bookmarks & History
|
benjamin
|
RESO
|
FIXE
|
2006-03-12
|
311346
|
|
Add directory service key for "C:\Program Files"
|
Core
|
XPCOM
|
benjamin
|
RESO
|
FIXE
|
2005-10-10
|
311352
|
|
Mac GRE-finder looks for /Library/Frameworks/XUL instead of /Library/Frameworks/XUL.framework
|
Core
|
XPCOM
|
benjamin
|
RESO
|
FIXE
|
2005-10-10
|
311423
|
|
uninstall doesn't remove all files (software update files are left behind)
|
Toolkit
|
Application Update
|
benjamin
|
RESO
|
FIXE
|
2008-07-31
|
312510
|
|
Win32 installer download size > 5MB
|
Firefox
|
General
|
benjamin
|
RESO
|
FIXE
|
2011-08-05
|
312569
|
|
nsIVersionComparator is still broken in some circumstances
|
Core
|
XPCOM
|
benjamin
|
RESO
|
FIXE
|
2006-03-12
|
315438
|
|
Want nsTAString const char_type* BeginReading() const; signature
|
Core
|
XPCOM
|
benjamin
|
RESO
|
FIXE
|
2020-12-09
|
323328
|
|
TARGET_XPCOM_ABI changes needed for Mac universal binaries
|
Core
|
XPCOM
|
benjamin
|
RESO
|
FIXE
|
2006-02-27
|
331117
|
|
Layout module should not shut down until all documents have been released
|
Core
|
Layout
|
benjamin
|
RESO
|
FIXE
|
2006-07-18
|
335605
|
|
Hook up "Download Dictionaries" context menu
|
Firefox
|
General
|
benjamin
|
RESO
|
FIXE
|
2006-08-04
|
337744
|
|
resource:// can load any file on the disk
|
Core
|
Networking: File
|
benjamin
|
RESO
|
FIXE
|
2006-11-10
|
339714
|
|
Locale repackaging to support the NSIS installer
|
Firefox
|
Installer
|
benjamin
|
RESO
|
FIXE
|
2006-07-03
|
352592
|
|
moz:distributionID should not be hardcoded into nsSearchService.js
|
Firefox
|
Search
|
benjamin
|
RESO
|
FIXE
|
2006-09-14
|
367428
|
|
resource:// directory traversal
|
Core
|
Networking
|
benjamin
|
RESO
|
FIXE
|
2009-03-10
|
371309
|
|
Migration Wizard explicitly sets a homepage which is wrong when using a distribution
|
Firefox
|
Migration
|
benjamin
|
RESO
|
FIXE
|
2007-04-29
|
281988
|
|
Stop sharing DOM object wrappers between content and chrome
|
Core
|
DOM: Core & HTML
|
brendan
|
RESO
|
FIXE
|
2019-03-13
|
301498
|
|
Enumeration on XPCNativeWrappers doesn't quite work
|
Core
|
DOM: Core & HTML
|
brendan
|
RESO
|
FIXE
|
2019-03-13
|
307317
|
|
JS engine assert when running with WAY_TOO_MUCH_GC
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-03-12
|
308085
|
|
JavaScript switch statement going to wrong case
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-03-12
|
309712
|
|
HTML-style comments in the middle of .js file cause part of script to be ignored (treated as XML data)
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-03-12
|
309852
|
|
E4X - JS_ASSERT @ js_Interpret, line 5070
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2005-10-08
|
310425
|
|
Array.indexOf/lastIndexOf is broken for corner cases
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2011-08-05
|
310993
|
|
HTML comment on JS if() causes erroneous results
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-07-03
|
311071
|
|
treat <! as the start of a comment to end of line, unless e4x=1 (was: page keeps reloading)
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2009-03-08
|
312064
|
|
E4X - XML Initializers with CDATA sections
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2005-10-26
|
313080
|
|
<xml/>.__proto__() causes crash [@ obj_getSlot]
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2005-10-21
|
313684
|
|
getting clone-parent of JS function using Array generic methods
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-11-10
|
317865
|
|
JavaScript GC memory limit - let it be optional
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2016-05-11
|
324592
|
|
Add JS_LeaveLocalRootScopeWithResult API
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-10-30
|
333398
|
|
Heisencode in js_GetAnyName
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-04-11
|
336373
|
|
JS1.7 tracking bug
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2007-05-16
|
336379
|
|
Support destructuring assignment in JS1.7
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2007-05-01
|
345350
|
|
crash in js_FreeRuntimeScriptState - jsscript.c
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-07-25
|
345365
|
|
JS_ClearContextThread leaves dangling pointers in JSContext
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-08-27
|
346029
|
|
try-finally where try throws runs finally with exception pending
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-08-10
|
351122
|
|
Repeated crashes [@ block_getProperty]
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2022-07-25
|
351717
|
|
Missing object/scope UNLOCK macro call todo with JSCLASS_GLOBAL_FLAGS
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-09-09
|
355486
|
|
Crash [@ args_resolve] assigning "y = arguments" in a generator, GCing, etc.
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2011-06-13
|
357388
|
|
js_SweepScopeProperties can leave a JSScopeProperty with dangling parent pointer
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-11-10
|
360612
|
|
GC can leave GSN cache pointing to destroyed script
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-11-27
|
361273
|
|
Assert fail: cg->stackDepth >= 0, at jsemit.c:164
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-11-22
|
363917
|
|
js_GC fails to clear cx->lastInternalResult root
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2006-12-18
|
364657
|
|
js_Get/SetProperty()'s sprop local not GC safe.
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2007-02-23
|
366606
|
|
JS Assertion with Firebug 0.4.1 on branch build
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2007-01-17
|
366869
|
|
js_ThreadDestructorCB calls JS_REMOVE_AND_INIT_LINK incorrectly, resulting in an infinite loop
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2007-01-17
|
416628
|
|
O(n^2) blowup due to overlong cx->tempPool arena list
|
Core
|
JavaScript Engine
|
brendan
|
RESO
|
FIXE
|
2008-05-07
|
237344
|
|
Contractions not recognized by spelling checker when real apostrophe character used
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2006-07-17
|
318057
|
|
bookmarks.html exporter
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
325153
|
|
Update duplicate collapsing when history items are deleted
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
325161
|
|
support URI property on all result nodes
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
325250
|
|
Some places notifications hang browser
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
325665
|
|
Coalesce redirects in history
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
326334
|
|
Implement mozStorage as a multithreaded server
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
326432
|
|
Bookmarks batches should also be DB transactions
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
327053
|
|
Make caching persistent between transactions
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
327841
|
|
Re-implement a failed favicon cache in the favicon service
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
327907
|
|
Ending process firefox.exe can lead to database corruption
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
328101
|
|
Database corruption bug for places
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
328470
|
|
Large number of days for history to be remembered causes history to be cleared
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
328532
|
|
Normalize annotation names in database
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
329524
|
|
nsNavBookmarks::ReplaceItem() leaves the bookmark hash in an inconsistent state
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
329546
|
|
Separate out the view model from a nsNavHistoryResult
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
329563
|
|
Document annotations getting deleted with history behavior
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
329668
|
|
Land spellchecking on 1_8_BRANCH
|
Firefox
|
General
|
brettw
|
RESO
|
FIXE
|
2006-05-03
|
329691
|
|
Failure creating bookmarks service
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
329698
|
|
Write nsIAnnotationService::getAnnotations
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
329819
|
|
Runtime performance is worse for places
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
330125
|
|
Address bar autocomplete no longer sorts by number of visits
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
330126
|
|
Pages aren't marked as typed (autocomplete omits URLs)
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
330220
|
|
freeze or crash, when click a link in history of Places [@ nsNavHistoryContainerResultNode::SortComparison_DateGreater]
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
330332
|
|
Recognizable history in bookmarks_history.sqlite after being deleted
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
331368
|
|
Spellchecker errors on in content iterator
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2006-05-16
|
332934
|
|
extremely slow startup as bookmarks_history.sqlite file grows
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
333109
|
|
Crash [@ nsNavHistoryResult::OnItemRemoved]
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
333794
|
|
Crash in ExpireItems
|
Firefox
|
Bookmarks & History
|
brettw
|
RESO
|
FIXE
|
2009-11-26
|
334513
|
|
probably 'off by a few' in sqlite3 utf.c
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
334675
|
|
Notify user on async IO errors
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
335306
|
|
Turn inline spellchecking on by default
|
Firefox
|
General
|
brettw
|
RESO
|
FIXE
|
2006-06-11
|
335558
|
|
Make storage form history use Mork if available
|
Toolkit
|
Form Manager
|
brettw
|
RESO
|
FIXE
|
2008-07-31
|
335600
|
|
Give spellchecking dictionaries reasonable names in the UI
|
Firefox
|
General
|
brettw
|
RESO
|
FIXE
|
2006-05-16
|
336133
|
|
Missing out-of-memory check at db/sqlite3/src/tclsqlite.c:1442
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
336134
|
|
Missing out-of-memory check at db/sqlite3/src/shell.c:1485
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
336230
|
|
doubtful ASYNC_SYNC case
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
336679
|
|
the text/lines disappears, related to inline spellchecking.
|
Core
|
Layout
|
brettw
|
RESO
|
FIXE
|
2018-08-29
|
336946
|
|
Coverity 260-278 problems in sqlite
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
337368
|
|
Spelling suggestions don't appear when context menu is accessed from keyboard
|
Firefox
|
General
|
brettw
|
RESO
|
FIXE
|
2008-05-11
|
337871
|
|
Screen jumps (scrolls) around while entering text into page with multiple textboxes
|
Firefox
|
General
|
brettw
|
RESO
|
FIXE
|
2006-06-26
|
338155
|
|
Upgrade to sqlite 3.3.5
|
Core
|
SQLite and Embedded
|
brettw
|
RESO
|
FIXE
|
2024-08-20
|
339066
|
|
Spell checker marks word as partially wrong
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2013-01-15
|
339478
|
|
Spell checker marks half-typed word as wrong if you correct another misspelled word
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2006-07-05
|
340882
|
|
Invalid pointer in RemoveWindowListeners
|
Toolkit
|
Form Manager
|
brettw
|
RESO
|
FIXE
|
2018-07-06
|
345054
|
|
Don't flush pending notifications on the spellchecker
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2006-07-21
|
345059
|
|
Adding a word to the dictionary is slow
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2007-04-04
|
345112
|
|
Make the inline spellchecker work incrementally
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2006-08-07
|
345587
|
|
Hang with spell-checked word in this testcase
|
Core
|
DOM: Editor
|
brettw
|
RESO
|
FIXE
|
2006-08-21
|
346185
|
|
fixing one of two misspelled words in a line makes spellcheck underline disappear on both
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2014-11-18
|
347804
|
|
Crash [@ FindNextNode] with evil testcase in spell checker code
|
Core
|
Spelling checker
|
brettw
|
RESO
|
FIXE
|
2011-06-13
|
324988
|
|
Crash if stop loading while favicons are coming in
|
Core
|
XUL
|
bryner
|
RESO
|
FIXE
|
2008-07-31
|
331290
|
|
xul <key> handling doesn't fire a command event
|
Core
|
XUL
|
bryner
|
RESO
|
FIXE
|
2008-07-31
|
336696
|
|
add a way to get the source of a command event
|
Core
|
XUL
|
bryner
|
RESO
|
FIXE
|
2008-07-31
|
274712
|
|
New Options Dialog
|
Firefox
|
Settings UI
|
bugs
|
RESO
|
FIXE
|
2009-07-11
|
282108
|
|
nsURIHashKey.h does not conditionally include
|
Core
|
Networking
|
bugs
|
RESO
|
FIXE
|
2006-03-12
|
317633
|
|
Undo/Redo for Places
|
Firefox
|
Bookmarks & History
|
bugs
|
RESO
|
FIXE
|
2010-02-24
|
330148
|
|
Places window misses shortcut key "close" functionality
|
Firefox
|
Bookmarks & History
|
bugs
|
RESO
|
FIXE
|
2009-11-26
|
340179
|
|
Implement Web Applications 1.0 "registerContentHandler"
|
Core
|
DOM: Core & HTML
|
bugs
|
RESO
|
FIXE
|
2019-03-13
|
186695
|
|
[FIX]FTP/HTTP password printed as part of URL
|
Core
|
Printing: Output
|
bzbarsky
|
RESO
|
FIXE
|
2006-03-12
|
230275
|
|
[FIXr]XML RDF parser stops parsing at valid unicode char
|
Core
|
XML
|
bzbarsky
|
RESO
|
FIXE
|
2006-01-30
|
251274
|
|
[FIX]Error: [Exception... "Node was not found" code: "8" nsresult: "0x80530008 (NS_ERROR_DOM_NOT_FOUND_ERR)" location: "chrome://inspector/content/inspector.xml Line: 684"]
|
Other Applications
|
DOM Inspector
|
bzbarsky
|
RESO
|
FIXE
|
2007-07-06
|
253951
|
|
[FIXr]Dialogs from a loading page appear above previous page's content
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2013-06-09
|
265367
|
|
[FIX]Frame construction tries to construct kids of leaf frames
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2018-08-29
|
266371
|
|
[FIX]Possible to close user-opened windows by setting window.name
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
267833
|
|
[FIX]Fire XBL constructors from EndUpdate(), not before
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2008-03-08
|
278472
|
|
[FIX]Documents created by moving nodes to a blank document are corrupt
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
282105
|
|
[FIX]BoxObject's InvalidatePresentationStuff needs ability to tell document to remove it from its boxobject table
|
Core
|
XUL
|
bzbarsky
|
RESO
|
FIXE
|
2008-09-26
|
288790
|
|
[FIX]Crash [@ GetNearestContainingBlock] with this xbl testcase
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2009-04-24
|
292472
|
|
[FIX]poor performance while mouse is hovered over links in table
|
Core
|
DOM: Events
|
bzbarsky
|
RESO
|
FIXE
|
2006-03-12
|
292589
|
|
[FIX]XBL load missing content policy check (Thunderbird not blocking remote content)
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2007-04-01
|
297079
|
|
[FIX]Firefox Deer Park Alpha 1 crashes on specific click sequence with ScrapBook extension [@ 0x00000000][@ nsBoxObject::GetOffsetRect]
|
Core
|
XUL
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-09
|
299205
|
|
[FIX]JS_ASSERT(flags != GCF_FINAL) hit in UnmarkedGCThingFlags() on startup with TOO_MUCH_GC defined
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
299518
|
|
[FIXr]XPCOM interface spoofing by using XBL <implementation>
|
Core
|
Security
|
bzbarsky
|
RESO
|
FIXE
|
2007-04-01
|
299520
|
|
Bypassing XPCNativeWrapper by using Object.prototype
|
Core
|
Security
|
bzbarsky
|
RESO
|
FIXE
|
2007-04-01
|
301635
|
|
[FIXr]Input that's not of type=image should have no nsIImageLoadingContent.currentURI
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
303163
|
|
[FIX]Huge memory leak at http://www.cbsnews.com/
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
304467
|
|
[FIX]Cannot tab to links that are part of image maps.
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2005-08-24
|
304886
|
|
[FIXr]content can still shadow real DOM properties from chrome with <img name="links"> etc.
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
305026
|
|
[FIXr]Document how calls on nsIStyleSheetService interact with userContent.css
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2018-08-29
|
305181
|
|
[FIX]Crash when navigating between Gmail and another URL [@ nsXPConnect::ReleaseJSContext]
|
Core
|
DOM: Navigation
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-13
|
305246
|
|
[FIX]Make SVG element's suspend/unsuspendRedraw not affect painting
|
Core
|
SVG
|
bzbarsky
|
RESO
|
FIXE
|
2005-10-30
|
305624
|
|
[FIX][@ nsContentUtils::Shutdown]
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2018-08-29
|
306262
|
|
[FIX]Unable to select in chrome-docshell documents
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2005-11-25
|
306534
|
|
[FIX]###!!! ASSERTION: Float frame has wrong parent: 'floatFrame->GetParent() == mBlock', file nsBlockReflowState.cpp, line 835
|
Core
|
Layout: Block and In
|
bzbarsky
|
RESO
|
FIXE
|
2008-03-12
|
306580
|
|
Crash when refreshing view source [@ nsDocShell::GetRootSHEntry ]
|
Core
|
DOM: Navigation
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-09
|
307279
|
|
[FIX]Classinfo doesn't protect newly-wrapped stuff from GC
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
307313
|
|
[FIX]Starting up with WAY_TOO_MUCH_GC dies in XPConnect
|
Core
|
XPConnect
|
bzbarsky
|
RESO
|
FIXE
|
2005-09-16
|
307867
|
|
[FIX]Setting capability.policy.default.*.focus to noAccess no longer works
|
Core
|
Security: CAPS
|
bzbarsky
|
RESO
|
FIXE
|
2007-04-01
|
308438
|
|
[FIX]Unavailability to intercept nsIDocShell::Destroy()
|
Core
|
DOM: Navigation
|
bzbarsky
|
RESO
|
FIXE
|
2005-09-16
|
309574
|
|
[FIX]Invalid read in nsJSEventListener::HandleEvent
|
Core
|
DOM: Events
|
bzbarsky
|
RESO
|
FIXE
|
2006-04-21
|
310069
|
|
[FIX]Named arrays should skip name lookup for XPCNativeWrapper
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
310100
|
|
rules="all" does not work when table has no border
|
Core
|
Layout: Tables
|
bzbarsky
|
RESO
|
FIXE
|
2005-09-27
|
312097
|
|
[FIX]Pages with frames and JS alert fail to render FF 1.5b2
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
312695
|
|
[FIX]DIV content is rendered twice
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2008-07-31
|
312769
|
|
Webshell leak when closing any page with meta refresh
|
Core
|
DOM: Navigation
|
bzbarsky
|
RESO
|
FIXE
|
2006-03-12
|
318678
|
|
[FIX]events registered via divElem.onmouseover and divElem.onclick do not trigger
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
321494
|
|
ASSERTION: Unexpected JSContext popped!, ASSERTION: ThreadJSContextStack underflow due to missing early return
|
Core
|
Layout: Form Control
|
bzbarsky
|
RESO
|
FIXE
|
2006-01-09
|
322461
|
|
[FIX]FF 1.5 doesn't apply CSS stylesheets in document after XSLT transformation
|
Core
|
XSLT
|
bzbarsky
|
RESO
|
FIXE
|
2007-01-17
|
322636
|
|
[FIX]ctrl-y/redo shortcut crashes firefox in find bar/fayt [@ nsContentUtils::ContentIsDescendantOf]
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
322678
|
|
[FIX]Crash [@ nsIFrame::GetParent] with evil testcase position:relative/absolute/display:table-column, etc
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2019-04-09
|
322683
|
|
[FIX] Yahoo Beta Mail related crash [@ nsScriptSecurityManager::CheckSameOriginPrincipalInternal()]
|
Core
|
XSLT
|
bzbarsky
|
RESO
|
FIXE
|
2006-11-10
|
323028
|
|
[FIX]Using background-image CSS style for treechildren::-moz-tree-row causes excessive CPU load
|
Core
|
XUL
|
bzbarsky
|
RESO
|
FIXE
|
2008-07-31
|
325297
|
|
[FIX]Various window properties are allAccess and should not be
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
325947
|
|
[FIX]Site can cause user's file to be uploaded by changing input type
|
Core
|
Layout: Form Control
|
bzbarsky
|
RESO
|
FIXE
|
2006-06-03
|
325991
|
|
[FIX]js exploit via "print preview"
|
Core
|
Printing: Output
|
bzbarsky
|
RESO
|
FIXE
|
2009-07-15
|
326248
|
|
[FIX]uncaught exception: Permission denied to create wrapper for object of class UnnamedClass
|
Core
|
XUL
|
bzbarsky
|
RESO
|
FIXE
|
2008-07-31
|
328007
|
|
[FIX]root new function objects before JS_DefineUCProperty
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2006-05-30
|
328839
|
|
[FIX]print preview causes memory corruption at least via <xul:editor src='javascript
|
Core
|
XUL
|
bzbarsky
|
RESO
|
FIXE
|
2008-10-17
|
328851
|
|
[FIX]print preview killing browser's chrome
|
Core
|
Security
|
bzbarsky
|
RESO
|
FIXE
|
2007-01-08
|
329410
|
|
<select style="-moz-binding: url(#t)"> hangs the browser (iExploder test 10030070)
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2006-04-04
|
329677
|
|
[FIX]Persist seems to let any page set any persist value
|
Core
|
XUL
|
bzbarsky
|
RESO
|
FIXE
|
2010-02-11
|
330903
|
|
[FIX]Crash with evil testcase, using html, xforms elements in xul document
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2006-04-19
|
330925
|
|
[FIX]Crash [@ nsContentIterator::NextNode] involving reparenting XBL anonymous children
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2008-01-15
|
331620
|
|
[FIX]document.write on already open document clears it in some cases
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2006-06-29
|
331880
|
|
[FIX]nsStackLayout::Layout(..) 's redraw logic is not entirely correct.
|
Core
|
XUL
|
bzbarsky
|
RESO
|
FIXE
|
2008-07-31
|
334210
|
|
[FIX]nsScriptSecurityManager::SecurityCompareURIs uses sourcePort unitialized if getting targetPort fails
|
Core
|
Security: CAPS
|
bzbarsky
|
RESO
|
FIXE
|
2007-01-08
|
334602
|
|
[FIX]ASSERTION: Reparenting something that has no usable parent? Shouldn't happen!: 'Not Reached'
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2008-01-04
|
334944
|
|
[FIX]Firefox printing content of <noscript> tag
|
Core
|
Printing: Output
|
bzbarsky
|
RESO
|
FIXE
|
2006-08-03
|
334983
|
|
[FIX]ASSERTION: nsUUIDGenerator not thread-safe: '_mOwningThread.GetThread()
|
Core
|
XPCOM
|
bzbarsky
|
RESO
|
FIXE
|
2006-11-10
|
335193
|
|
[FIX]URI fixup should not assume all NS_NewURI failures mean malformed URIs
|
Core
|
DOM: Navigation
|
bzbarsky
|
RESO
|
FIXE
|
2006-04-24
|
335549
|
|
[FIX]UUID generator is nonrandom on x86-64
|
Core
|
XPCOM
|
bzbarsky
|
RESO
|
FIXE
|
2006-11-10
|
335849
|
|
[FIX]Yahoo Mail Beta crashes 1.8.1 branch/linux with a null principal [@ nsScriptSecurityManager::CheckSameOriginPrincipalInternal]
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
337095
|
|
[FIX]Sort out XPCNativeWrapper behavior for calls from C++ to JS
|
Core
|
XPConnect
|
bzbarsky
|
RESO
|
FIXE
|
2010-10-31
|
339494
|
|
[FIX]Out of bounds and crash removing an attribute during a mutation event for its removal [@ nsAttrAndChildArray::RemoveAttrAt] [@ nsAttrName::ReleaseInternalName]
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
340796
|
|
[FIX]Crash [@ nsXULDocument::ResumeWalk] during restart (due to last build being different)
|
Core
|
XUL
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-09
|
343293
|
|
[FIX]Crash [@ nsLayoutUtils::GetFloatFromPlaceholder] using ::first-line, floats, caption and generated content
|
Core
|
Layout: Floats
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-13
|
345991
|
|
[FIX]JS components do not get protected by XPCNativeWrapper
|
Core
|
XPConnect
|
bzbarsky
|
RESO
|
FIXE
|
2010-10-31
|
346984
|
|
xbl and event handlers cause trouble in mailnews and editor
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2007-08-05
|
347303
|
|
[FIX]Parse errors when parsing mathml.css
|
Core
|
MathML
|
bzbarsky
|
RESO
|
FIXE
|
2006-08-15
|
347899
|
|
[FIX]crash when restarting for update [@ nsCSSStyleSheet::SetComplete]
|
Core
|
CSS Parsing and Comp
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-09
|
348272
|
|
[FIX]Diverting windows into tabs can cause DOM bustage
|
Core
|
DOM: Navigation
|
bzbarsky
|
RESO
|
FIXE
|
2006-08-14
|
348990
|
|
[FIX]Crash [@ nsDOMClassInfo::PreCreate] when loading gmail, suddenly going offline while loading and pressing reload a few times
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
353894
|
|
[FIX]Crash [@ nsBlockBandData::Init] with position:fixed on mathml when position:static !important rule is removed in mathml.css
|
Core
|
MathML
|
bzbarsky
|
RESO
|
FIXE
|
2006-12-04
|
353897
|
|
[FIX]Crash [@ nsMathMLContainerFrame::FixInterFrameSpacing] using position:fixed when position: static rule in mathml.css is removed
|
Core
|
MathML
|
bzbarsky
|
RESO
|
FIXE
|
2006-10-31
|
362901
|
|
[FIX]nsCSSFrameConstructor::HaveFirstLetterStyle broken in the presence of asynchronous restyles or batching
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2018-08-29
|
367650
|
|
[FIX]"ASSERTION: should only be called for text frames" with counters, :first-letter
|
Core
|
CSS Parsing and Comp
|
bzbarsky
|
RESO
|
FIXE
|
2015-08-26
|
373756
|
|
[FIX]crash at [@ nsCSSFrameConstructor::ConstructFrame] with "Web Developer Toolbar" and custom XPI
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-13
|
377216
|
|
[FIX]Possible to reflow while quote/counter lists are dirty
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2007-05-30
|
377603
|
|
[FIX]Inner tables should not get parent style based on outer table pseudo
|
Core
|
Layout
|
bzbarsky
|
RESO
|
FIXE
|
2007-04-23
|
377824
|
|
[FIX]mtable causes "ASSERTION: Should have dealt with kids that have NS_FRAME_IS_SPECIAL elsewhere"
|
Core
|
MathML
|
bzbarsky
|
RESO
|
FIXE
|
2007-12-17
|
385866
|
|
[FIXr]Crash [@ nsContentUtils::ContentIsDescendantOf] with counters, <col span="2">
|
Core
|
Layout: Tables
|
bzbarsky
|
RESO
|
FIXE
|
2011-06-09
|
388281
|
|
[FIX]nsStandardURL::SetPort needs to update authority length
|
Core
|
Networking
|
bzbarsky
|
RESO
|
FIXE
|
2007-08-30
|
389274
|
|
[FIX]Midas demo. (designMode) fails to work properly after restoring with session restore
|
Firefox
|
Session Restore
|
bzbarsky
|
RESO
|
FIXE
|
2008-03-15
|
394418
|
|
[FIX]Notify on text changes before firing mutation events
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
394534
|
|
[FIX]First attribute doesn't win in misplaced content
|
Core
|
DOM: HTML Parser
|
bzbarsky
|
RESO
|
FIXE
|
2007-10-04
|
418996
|
|
[FIX]Unsigned documents can inject script into signed JARs
|
Core
|
Security: CAPS
|
bzbarsky
|
RESO
|
FIXE
|
2012-08-16
|
424733
|
|
[FIX]CSS -moz-binding property bypasses security checks on codebase principals
|
Core
|
Security: CAPS
|
bzbarsky
|
RESO
|
FIXE
|
2009-01-08
|
455311
|
|
[FIX]mid-autumn festival vulnerability
|
Core
|
Networking: File
|
bzbarsky
|
RESO
|
FIXE
|
2013-08-27
|
472648
|
|
[FIX]XBL not working in signed jar
|
Core
|
XBL
|
bzbarsky
|
RESO
|
FIXE
|
2009-03-01
|
250375
|
|
Cookies set using nsHttpChannel::setRequestHeader get cleared by the cookie service
|
Core
|
Networking: HTTP
|
cbiesinger
|
RESO
|
FIXE
|
2005-08-14
|
288042
|
|
cairo/svg does not build on qt, xlib
|
Core
|
SVG
|
cbiesinger
|
RESO
|
FIXE
|
2014-04-26
|
291846
|
|
Save Link/Image As are dysfunctional: File not saved after selecting
|
Firefox
|
General
|
cbiesinger
|
RESO
|
FIXE
|
2005-04-27
|
295457
|
|
NISCC vulnerability #891011 (Parsing of Various Image Formats by Web Browsers)
|
Core
|
Graphics: ImageLib
|
cbiesinger
|
RESO
|
FIXE
|
2005-12-02
|
300936
|
|
ABR in XBM image leading to arbitrary code execution
|
Core
|
Graphics: ImageLib
|
cbiesinger
|
RESO
|
FIXE
|
2006-03-12
|
304833
|
|
help: doesn't work on linux (MacOS security issue)
|
Core
|
Networking
|
cbiesinger
|
RESO
|
FIXE
|
2005-09-02
|
321379
|
|
Crash using a closed stream [@ nsConverterOutputStream::Close][@ nsConverterOutputStream::Write]
|
Core
|
Internationalization
|
cbiesinger
|
RESO
|
FIXE
|
2006-09-04
|
328218
|
|
don't allow creating multiple io services
|
Core
|
Networking
|
cbiesinger
|
RESO
|
FIXE
|
2006-03-01
|
334516
|
|
HTTP assert while starting up: "If we have a txn pump, request must be it"
|
Core
|
Networking: HTTP
|
cbiesinger
|
RESO
|
FIXE
|
2006-04-21
|
74085
|
|
[Win] Disk cache should use local directory (CSIDL_LOCAL_APPDATA)
|
Core
|
Networking: Cache
|
darin.moz
|
RESO
|
FIXE
|
2006-11-09
|
189570
|
|
Aborting a page load causes untransferred content that already exists to be doomed from the disk cache
|
Core
|
Networking: HTTP
|
darin.moz
|
RESO
|
FIXE
|
2006-05-04
|
240201
|
|
remove [noscript] from nsICookieManager2::add
|
Core
|
Networking: Cookies
|
darin.moz
|
RESO
|
FIXE
|
2006-03-22
|
265028
|
|
Clearing cache sometimes fails
|
Core
|
Networking: Cache
|
darin.moz
|
RESO
|
FIXE
|
2008-08-15
|
278885
|
|
cache access denied from (ntlm) proxy on websites that require basic authentication
|
Core
|
Networking: HTTP
|
darin.moz
|
RESO
|
FIXE
|
2018-08-31
|
288786
|
|
Add BeginWriting equivalent to frozen string API
|
Core
|
XPCOM
|
darin.moz
|
RESO
|
FIXE
|
2020-12-09
|
290390
|
|
Deer Park - Software Update
|
Toolkit
|
Application Update
|
darin.moz
|
RESO
|
FIXE
|
2010-04-22
|
292408
|
|
Software update driver for nsAppRunner.cpp
|
Toolkit
|
Application Update
|
darin.moz
|
RESO
|
FIXE
|
2008-07-31
|
295538
|
|
Bump app.extensions.version to 1.0+ for pre-1.1 releases
|
Toolkit
|
Add-ons Manager
|
darin.moz
|
RESO
|
FIXE
|
2011-08-05
|
305987
|
|
NS_WARN_IF_FALSE asserts
|
Core
|
XPCOM
|
darin.moz
|
RESO
|
FIXE
|
2006-03-01
|
328817
|
|
Content injection spoofing with Content-Length header overflow
|
Core
|
Networking: HTTP
|
darin.moz
|
RESO
|
FIXE
|
2011-07-14
|
329746
|
|
Content injection spoofing with a space before colon in HTTP header
|
Core
|
Networking: HTTP
|
darin.moz
|
RESO
|
FIXE
|
2006-06-13
|
330214
|
|
Content injection spoofing with a combination of headers defined by HTTP/1.0 and 1.1 (e.g. Content-Length and Transfer-Encoding: chunked)
|
Core
|
Networking: HTTP
|
darin.moz
|
RESO
|
FIXE
|
2008-05-22
|
340198
|
|
security issue through the auto update system and certificate management
|
Toolkit
|
Application Update
|
darin.moz
|
RESO
|
FIXE
|
2008-07-31
|
369814
|
|
jar: protocol is an XSS hazard due to ignoring mime type and being considered same-origin with hosting site
|
Core
|
Networking: JAR
|
dave.camp
|
RESO
|
FIXE
|
2011-05-03
|
403331
|
|
Sort out jar: behavior on HTTP redirects
|
Core
|
Networking: JAR
|
dave.camp
|
RESO
|
FIXE
|
2008-03-20
|
306915
|
|
XUL/SVG crash [@ nsFrame::GetAscent]
|
Core
|
XUL
|
dbaron
|
RESO
|
FIXE
|
2008-07-31
|
307259
|
|
Firefox 1.0.6 buffer overflow with hostname of all soft hyphens [@ nsStringBuffer::Realloc] [@ nsCSubstring::Capacity] [@ nsGenericElement::~nsGenericElement]
|
Core
|
Networking
|
dbaron
|
RESO
|
FIXE
|
2011-06-13
|
307989
|
|
Crash [@ GetWrapperFor] [@ nsIView::GetViewFor] dragging selection within evil changing document
|
Core
|
DOM: Copy & Paste an
|
dbaron
|
RESO
|
FIXE
|
2007-04-16
|
310604
|
|
selectedIndex and highlighted option in <select> are not in sync when dropdown overlaps a frame boundary
|
Core
|
Layout: Form Control
|
dbaron
|
RESO
|
FIXE
|
2006-03-12
|
315951
|
|
unknown content type dialog leaks domwindow
|
Firefox
|
General
|
dbaron
|
RESO
|
FIXE
|
2006-04-21
|
316775
|
|
leak when selecting
|
Core
|
DOM: Serializers
|
dbaron
|
RESO
|
FIXE
|
2006-03-12
|
317502
|
|
Crash [@ nsIFrame::GetPosition() line 664]
|
Core
|
Layout
|
dbaron
|
RESO
|
FIXE
|
2011-06-13
|
319642
|
|
ASSERTION: unexpected null pointer: 'aParticipant', file nsDOMClassInfo.cpp, line 4960
|
Core
|
DOM: Core & HTML
|
dbaron
|
RESO
|
FIXE
|
2019-03-13
|
320192
|
|
better way for users/testers to detect and isolate leaks of large object graphs
|
Core
|
Layout
|
dbaron
|
RESO
|
FIXE
|
2006-03-22
|
327716
|
|
XPC_NW_NewResolve should root its cloned function object
|
Core
|
XPConnect
|
dbaron
|
RESO
|
FIXE
|
2006-04-05
|
334080
|
|
crashes due to null mBodyContent in nsImageDocument::CheckOverflowing [@ nsStyleContext::GetStyleData]
|
Core
|
DOM: Core & HTML
|
dbaron
|
RESO
|
FIXE
|
2019-03-13
|
334104
|
|
WAY_TOO_MUCH_GC crash opening Firefox bookmarks menu, doing GC inside XPC_WN_Shared_ToString
|
Core
|
XPConnect
|
dbaron
|
RESO
|
FIXE
|
2006-11-10
|
334180
|
|
pldhash/jsdhash should assert that ops don't mutate the table
|
Core
|
XPCOM
|
dbaron
|
RESO
|
FIXE
|
2007-03-19
|
334605
|
|
balsa orange due to atom table shutdown code
|
Core
|
XPCOM
|
dbaron
|
RESO
|
FIXE
|
2006-04-27
|
336791
|
|
land leak fixes making wrapped JS closures work with nsIDOMGCParticipant on 1.8 branch
|
Core
|
DOM: Core & HTML
|
dbaron
|
RESO
|
FIXE
|
2019-03-13
|
354865
|
|
bclary "multibar" sidebar navigation fails
|
Core
|
DOM: Events
|
dbaron
|
RESO
|
FIXE
|
2006-10-10
|
254021
|
|
Ability to open accidentally closed tabs
|
Firefox
|
Tabbed Browser
|
dietrich
|
RESO
|
FIXE
|
2013-11-11
|
256243
|
|
Unabled to remove downloads / navigate downloads dialog mouseless
|
Firefox
|
Keyboard Navigation
|
doronr
|
RESO
|
FIXE
|
2019-05-03
|
284219
|
|
check SetLength+BeginWriting users for potential buffer overruns
|
Core
|
XPCOM
|
dveditz
|
RESO
|
FIXE
|
2020-12-09
|
380994
|
|
Fix for bug 367428 lets through escaped slashes on Linux (windows too on trunk)
|
Core
|
Networking
|
dveditz
|
RESO
|
FIXE
|
2009-05-08
|
383478
|
|
File type confusion vulnerability due to null bytes in URL (encoded as %00)
|
Core
|
Security
|
dveditz
|
RESO
|
FIXE
|
2024-01-13
|
413250
|
|
chrome directory traversal (local disk access via "flat" addons)
|
Core
|
General
|
dveditz
|
RESO
|
FIXE
|
2009-06-16
|
413451
|
|
Bug 413250 allows to steal data from sessionstore.js
|
Core
|
Security
|
dveditz
|
RESO
|
FIXE
|
2008-01-30
|
452217
|
|
nsLocalFileWin::OpenFile propagates inconsistent Windows error codes
|
Core
|
XPCOM
|
dveditz
|
RESO
|
FIXE
|
2011-08-27
|
455987
|
|
integer overflow in nsEscape
|
Core
|
XPCOM
|
dveditz
|
RESO
|
FIXE
|
2009-01-28
|
406686
|
|
I can still steal your bank login (spoofing using <xul:popup>, take 2)
|
Core
|
General
|
enndeakin
|
RESO
|
FIXE
|
2008-03-28
|
232272
|
|
Better management of search engines for toolbar over the current add new engines system (ability to remove and order engines)
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2014-04-26
|
235852
|
|
Ability to delete search plugins using UI
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2014-04-26
|
255545
|
|
search plugins cannot be reordered
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-05-20
|
263182
|
|
Page Info (Security tab) doesn't explain mixed secure/insecure
|
Firefox
|
Page Info Window
|
gavin.sharp
|
RESO
|
FIXE
|
2006-03-12
|
285416
|
|
Access to Firefox Options from Start Menu broken
|
Firefox
|
Shell Integration
|
gavin.sharp
|
RESO
|
FIXE
|
2005-05-04
|
288160
|
|
Code checked in for bug 237776 (reload button should be disabled for blank tabs) is wrong when frames are involved
|
Firefox
|
Toolbars and Customi
|
gavin.sharp
|
RESO
|
FIXE
|
2012-04-13
|
289136
|
|
Prefs dialog landing breaks preference locking
|
Firefox
|
Settings UI
|
gavin.sharp
|
RESO
|
FIXE
|
2007-05-29
|
304727
|
|
Attempting to install an extension no longer triggers yellow info bar (notification) if a site isn't whitelisted or if software installation is disabled
|
Firefox
|
General
|
gavin.sharp
|
RESO
|
FIXE
|
2006-03-12
|
313501
|
|
invalid use of gBrowser in tabbrowser.xml
|
Toolkit
|
UI Widgets
|
gavin.sharp
|
RESO
|
FIXE
|
2005-10-23
|
317369
|
|
make use of textbox's clickSelectsAll property for the location bar and help
|
Firefox
|
General
|
gavin.sharp
|
RESO
|
FIXE
|
2006-02-06
|
323330
|
|
nsExtensionManager.js should get the XPCOM ABI and OS_TARGET from nsIXULRuntime instead of preprocessing
|
Toolkit
|
Add-ons Manager
|
gavin.sharp
|
RESO
|
FIXE
|
2008-07-31
|
323798
|
|
Keyword URL Needs to be localized
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2008-10-05
|
325236
|
|
memory corruption probably caused by chrome alert()
|
Firefox
|
Page Info Window
|
gavin.sharp
|
RESO
|
FIXE
|
2010-02-24
|
328821
|
|
Firefox update restores unwanted search engines.
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-04-28
|
330842
|
|
"ASSERT: Can't serialize: file doesn't exist!" at startup
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-04-07
|
334399
|
|
icons for sherlock plugins loaded from non-profile locations aren't loaded
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-04-19
|
335334
|
|
Fix string URI consumers to use CheckLoadURIStr
|
Firefox
|
General
|
gavin.sharp
|
RESO
|
FIXE
|
2006-10-11
|
335460
|
|
re-implement special search plugin parameters
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2020-05-07
|
335472
|
|
Right-click context menu shows irrelevant items when you select page text
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-04-26
|
335691
|
|
Need better support for OpenSearch parameters
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-07-01
|
335878
|
|
non-ascii search engine names are not correctly displayed
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-05-20
|
337625
|
|
If an OpenSearch search plugin includes an Url tag with type other than text/html then it doesn't install
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-06-22
|
338252
|
|
sourceTextEncoding attribute isn't parsed correctly in all cases (certain Sherlock plugins don't display correctly)
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-05-29
|
338680
|
|
check isFile before fileSize (loading engines may fail at startup)
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-05-23
|
338989
|
|
Make nsSidebar strings localizable
|
Firefox
|
General
|
gavin.sharp
|
RESO
|
FIXE
|
2006-07-11
|
339343
|
|
Base64 png image in opensearch plugin doesn't show up in search box dropdown
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-07-05
|
341909
|
|
Search service mishandles invalid search action URIs
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-06-19
|
342540
|
|
Technorati search using Toolbar Search box fails
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-06-28
|
344029
|
|
going back to home page in antiphishing breaks if multiple tab homepage is set
|
Toolkit
|
Safe Browsing
|
gavin.sharp
|
RESO
|
FIXE
|
2014-05-27
|
344189
|
|
if browser.search.openintab pref is set to true Firefox opens two identical tabs for each search
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-08-17
|
345075
|
|
Focus inconsistency when closing tab opened by 'Search <selected engine> for <selected text>'
|
Firefox
|
Tabbed Browser
|
gavin.sharp
|
RESO
|
FIXE
|
2006-07-25
|
345869
|
|
Pull Down Menu within Search Field not Keyboard Accessible
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2019-05-03
|
348698
|
|
Menu bar no longer expands to accomodate icons when toolbars are customized
|
Firefox
|
Toolbars and Customi
|
gavin.sharp
|
RESO
|
FIXE
|
2006-09-01
|
349420
|
|
Live Bookmark Icon slightly off center in the bookmarks menu
|
Firefox
|
Bookmarks & History
|
gavin.sharp
|
RESO
|
FIXE
|
2006-08-25
|
349598
|
|
nsURLFormatter unnecessarily dump()ing
|
Firefox
|
General
|
gavin.sharp
|
RESO
|
FIXE
|
2006-08-23
|
350453
|
|
Official branding builds are not using correct homepage/update URLs
|
Firefox
|
General
|
gavin.sharp
|
RESO
|
FIXE
|
2006-08-28
|
350742
|
|
Missing left (and right) margin for address and search bars
|
Firefox
|
Toolbars and Customi
|
gavin.sharp
|
RESO
|
FIXE
|
2006-09-12
|
351490
|
|
"clear now" button doesn't behave according to checkbox "ask me before clearing private data" in tools - options - privacy
|
Firefox
|
Settings UI
|
gavin.sharp
|
RESO
|
FIXE
|
2006-09-12
|
352106
|
|
Moving search engines up and down does not work right
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-09-13
|
352244
|
|
don't override border on toolbarbuttons (restore bevel when using Classic)
|
Firefox
|
General
|
gavin.sharp
|
RESO
|
FIXE
|
2006-09-11
|
352768
|
|
searchForm isn't parsed for Sherlock engines
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2006-09-14
|
355195
|
|
"temporary testing assertions" that were supposed to be disabled before the release haven't been disabled
|
Firefox
|
General
|
gavin.sharp
|
RESO
|
FIXE
|
2007-07-23
|
355625
|
|
Arbitrary code execution by JSON text for search suggestions
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2009-10-12
|
380429
|
|
Default search engine not preserved when updating from 2003->2004RC2
|
Firefox
|
Search
|
gavin.sharp
|
RESO
|
FIXE
|
2007-05-29
|
408076
|
|
out of bounds read in BMP decoder can lead to information disclosure
|
Core
|
Graphics: ImageLib
|
gavin.sharp
|
RESO
|
FIXE
|
2008-03-12
|
421715
|
|
canvas.2dcontext.putImageData(array[undefined]) causes a crash [@ JS_GetProperty]
|
Core
|
Graphics: Canvas2D
|
gavin.sharp
|
RESO
|
FIXE
|
2011-06-09
|
441120
|
|
command-line URLs launch multi-tabs if Firefox not running, exploitable with Safari Carpet bombing
|
Toolkit
|
Startup and Profile
|
gavin.sharp
|
RESO
|
FIXE
|
2017-03-22
|
304277
|
|
Add further TLDs to IDN whitelist
|
Core
|
Networking
|
gerv
|
RESO
|
FIXE
|
2005-08-16
|
308334
|
|
Enable IDN for more TLDs
|
Core
|
Networking
|
gerv
|
RESO
|
FIXE
|
2006-01-24
|
362909
|
|
pushobj is not GC-atomic when debugger is installed.
|
Core
|
JavaScript Engine
|
igor
|
RESO
|
FIXE
|
2007-02-23
|
443299
|
|
Investigate possible buffer overflow in nsDirIndexParser
|
Core
|
XPCOM
|
jdschuh
|
RESO
|
FIXE
|
2011-05-20
|
333864
|
|
Non-localizable label in Places popup: "Search:"
|
Firefox
|
Bookmarks & History
|
jminta
|
RESO
|
FIXE
|
2009-11-26
|
334977
|
|
[FIX]File Upload Box Still can have arbitrary file specified by changing type attribute several times with javascript
|
Core
|
Layout: Form Control
|
jonas
|
RESO
|
FIXE
|
2008-08-13
|
418356
|
|
[FIX]It's unsafe to use mozIJSSubScriptLoader.loadSubScript() with non-chrome urls or chrome urls whose scheme/host part contain uppercase characters
|
Core
|
Security
|
jstenback+bmo
|
RESO
|
FIXE
|
2009-02-16
|
152426
|
|
delegation of HTTP download for OCSP
|
NSS
|
Libraries
|
kaie
|
RESO
|
FIXE
|
2008-05-14
|
235773
|
|
TLS ECC cipher suites: PSM backend, SeaMonkey UI
|
Core
|
Security: PSM
|
kaie
|
RESO
|
FIXE
|
2007-08-21
|
306795
|
|
nsIX509CertDB::IsCertTrusted() can return bogus values
|
Core
|
Security: PSM
|
kaie
|
RESO
|
FIXE
|
2005-09-04
|
310446
|
|
Add a user feedback message when certs for import are being ignored
|
Core
|
Security: PSM
|
kaie
|
RESO
|
FIXE
|
2016-02-24
|
316837
|
|
crash in [@ strchr - nsNSSCertificateDB::getCertNames] on cert without nickname
|
Core
|
Security: PSM
|
kaie
|
RESO
|
FIXE
|
2006-08-25
|
340724
|
|
Upgrade NSS on Mozilla 1.8 branch for 1.8.1 final
|
Core
|
Security: PSM
|
kaie
|
RESO
|
FIXE
|
2023-12-11
|
350640
|
|
rsa signature verification ignores garbage bytes (CVE-2006-4340)
|
NSS
|
Libraries
|
kaie
|
RESO
|
FIXE
|
2010-06-17
|
360526
|
|
Cert not imported - Feedback prompt sometimes does not work
|
Core
|
Security: PSM
|
kaie
|
RESO
|
FIXE
|
2007-03-07
|
306576
|
|
Search plugins URLs should be standardized on *secure* mozilla.org servers
|
Firefox
|
Search
|
l10n
|
RESO
|
FIXE
|
2006-03-12
|
372409
|
|
Migration Wizard requires string change for home page selection
|
Firefox
|
Migration
|
l10n
|
RESO
|
FIXE
|
2008-04-16
|
291516
|
|
Command-Arrow navigation shortcuts should be reenabled
|
Firefox
|
Keyboard Navigation
|
mark
|
RESO
|
FIXE
|
2005-06-19
|
321366
|
|
Crash [@PR_Close].[@nsDiskCacheStreamIO::Flush()]
|
Core
|
Networking: Cache
|
mark
|
RESO
|
FIXE
|
2011-06-13
|
114850
|
|
scrollbars permanently hidden; window.scrollbars.visible = false;
|
Core
|
CSS Parsing and Comp
|
martijn.martijn
|
RESO
|
FIXE
|
2006-08-06
|
312778
|
|
Undo after a spell check correction doesn't work, undoes previous action
|
Core
|
Spelling checker
|
martijn.martijn
|
RESO
|
FIXE
|
2007-04-04
|
111432
|
|
[FIRST] Mouse wheel scrolling doesn't work in print preview on page margin or on frame page
|
Core
|
Print Preview
|
masayuki
|
RESO
|
FIXE
|
2006-09-22
|
118563
|
|
The new print properties dialog does not save papersize
|
Core
|
Printing: Output
|
masayuki
|
RESO
|
FIXE
|
2006-03-12
|
187772
|
|
mouse wheel scrolling does not dismiss form auto complete history, results in floating autocomplete dropdown
|
Toolkit
|
Autocomplete
|
masayuki
|
RESO
|
FIXE
|
2007-09-20
|
240095
|
|
Location Bar doesn't stay open (collapses) when clicking on arrow the first time
|
Toolkit
|
Autocomplete
|
masayuki
|
RESO
|
FIXE
|
2009-08-27
|
259454
|
|
IME input (e.g., Chinese, Japanese and Korean) cannot be performed in Find Toolbar when opened with "/" or "'"
|
Toolkit
|
Find Toolbar
|
masayuki
|
RESO
|
FIXE
|
2010-06-18
|
275387
|
|
Print Preview Scale and orientation not adjusted (stuck on page setup settings)
|
Core
|
Print Preview
|
masayuki
|
RESO
|
FIXE
|
2006-03-12
|
307874
|
|
Either wrong url or no url is shown in the status bar for focused links during FAYT
|
Toolkit
|
Find Toolbar
|
masayuki
|
RESO
|
FIXE
|
2008-07-31
|
308173
|
|
Printing reverts to default printer every time a page is printed
|
Core
|
Printing: Output
|
masayuki
|
RESO
|
FIXE
|
2010-02-24
|
308755
|
|
Change in behavior with type-to-find for non-link text and pressing TAB
|
Toolkit
|
Find Toolbar
|
masayuki
|
RESO
|
FIXE
|
2008-07-31
|
309030
|
|
Don't scroll to found link on findbar close
|
Toolkit
|
Find Toolbar
|
masayuki
|
RESO
|
FIXE
|
2008-07-31
|
309075
|
|
Right-clicking a partially off-screen link shouldn't scroll the page
|
Core
|
DOM: UI Events & Foc
|
masayuki
|
RESO
|
FIXE
|
2019-03-13
|
313149
|
|
the code of findBar.js should be protected in a prototype
|
Toolkit
|
Find Toolbar
|
masayuki
|
RESO
|
FIXE
|
2008-07-31
|
313385
|
|
The update history is broken if it has non-ASCII char
|
Toolkit
|
Application Update
|
masayuki
|
RESO
|
FIXE
|
2011-08-05
|
314288
|
|
FastFind is broken after find in this page in frame page
|
Toolkit
|
Find Toolbar
|
masayuki
|
RESO
|
FIXE
|
2011-08-05
|
315457
|
|
IME candidate list is positioned to wrong position if the editor is on frame page
|
Core
|
Internationalization
|
masayuki
|
RESO
|
FIXE
|
2010-06-18
|
316663
|
|
[Win9x] Cannot display Japanese text on update processing dialog
|
Toolkit
|
Application Update
|
masayuki
|
RESO
|
FIXE
|
2008-07-31
|
324159
|
|
The accesskey label is doubled if the label ends (X)
|
Core
|
DOM: UI Events & Foc
|
masayuki
|
RESO
|
FIXE
|
2019-03-13
|
327303
|
|
Accept languages empties when IE profile migration is selected.(when with --enable-official-branding)
|
Firefox
|
Migration
|
masayuki
|
RESO
|
FIXE
|
2006-07-07
|
327306
|
|
The Proxy setting of IE is not migrated.(when with --enable-official-branding)
|
Firefox
|
Migration
|
masayuki
|
RESO
|
FIXE
|
2006-02-26
|
307124
|
|
Pressing Enter in the update wizard moves forward regardless of update state
|
Toolkit
|
Application Update
|
mconnor
|
RESO
|
FIXE
|
2008-07-31
|
355567
|
|
Firefox stores corrupted version of cached JavaScript file (merges two files together)
|
Core
|
Networking: Cache
|
michal.novotny
|
RESO
|
FIXE
|
2009-04-20
|
318168
|
|
Improve tabbed browsing (tab strip overflow, in particular)
|
Firefox
|
Tabbed Browser
|
moco
|
RESO
|
FIXE
|
2017-05-07
|
322988
|
|
Bookmark properties should be available for pages other than the currently-viewed page
|
Firefox
|
Bookmarks & History
|
mozilla
|
RESO
|
FIXE
|
2009-11-26
|
326321
|
|
Convert bookmark add/remove functionality to use controller.js
|
Firefox
|
Bookmarks & History
|
mozilla
|
RESO
|
FIXE
|
2009-11-26
|
330023
|
|
No folder properties
|
Firefox
|
Bookmarks & History
|
mozilla
|
RESO
|
FIXE
|
2009-11-26
|
330238
|
|
Bookmark Properties box too small to fit buttons
|
Firefox
|
Bookmarks & History
|
mozilla
|
RESO
|
FIXE
|
2009-11-26
|
359821
|
|
Firefox just crashes after about 10 minutes of use [@ nsHTMLDocument::GetElementById]
|
Core
|
DOM: Core & HTML
|
mozilla
|
RESO
|
FIXE
|
2019-03-13
|
265740
|
|
browser crashes some times when loading gmail and loading another tab [@ js_Interpret]
|
Core
|
XPConnect
|
mrbkap
|
RESO
|
FIXE
|
2016-05-11
|
310508
|
|
Calling method on another window crashes when the function uses XMLHttpRequest and alert() [@ js_FreeStack]
|
Core
|
DOM: Core & HTML
|
mrbkap
|
RESO
|
FIXE
|
2019-03-13
|
312704
|
|
crash [@ nsNodeInfoManager::GetTextNodeInfo] on ebay page with JavaScript off
|
Core
|
DOM: Core & HTML
|
mrbkap
|
RESO
|
FIXE
|
2019-03-13
|
313236
|
|
Access checks in XBL compilation scope can be circumvented
|
Core
|
Security
|
mrbkap
|
RESO
|
FIXE
|
2011-08-05
|
313566
|
|
privilege escalation using commandDispatcher.focusedElement
|
Core
|
Security
|
mrbkap
|
RESO
|
FIXE
|
2007-04-01
|
315286
|
|
Crash [@ nsGlobalWindow::RunTimeout ]
|
Core
|
DOM: Core & HTML
|
mrbkap
|
RESO
|
FIXE
|
2009-12-08
|
319264
|
|
Double-free reporting errors
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2006-12-18
|
325540
|
|
Javascript library jsMath causes Firefox to crash [@ ClaimScope][@ WillDeadLock]
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2011-06-13
|
327066
|
|
document.createEvent('TextEvent') crashes
|
Core
|
DOM: Events
|
mrbkap
|
RESO
|
FIXE
|
2006-03-02
|
327708
|
|
fun_xdrObject should root fun across call to js_XDRScript
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2006-05-31
|
330773
|
|
DOM property setter override (remote compromise)
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2013-03-26
|
332971
|
|
crash with iframe removing itself [@ nsAttrAndChildArray::Clear] [@ nsAttrAndChildArray::~nsAttrAndChildArray]
|
Core
|
DOM: Core & HTML
|
mrbkap
|
RESO
|
FIXE
|
2019-03-13
|
338288
|
|
Firefox crashes [@ nsQueryInterfaceWithError::operator()] or allows loading custom code into chrome windows on replacing a frameset containing a frame that had delayed server response
|
Core
|
DOM: Core & HTML
|
mrbkap
|
RESO
|
FIXE
|
2019-03-13
|
338523
|
|
XSS with XPCNativeWrapper(window).Function(...)
|
Core
|
Security
|
mrbkap
|
RESO
|
FIXE
|
2009-07-25
|
341359
|
|
Crash [@ SinkContext::FlushTags] with malformed html, with javascript disabled, using noscript, table, frameset, meta
|
Core
|
DOM: HTML Parser
|
mrbkap
|
RESO
|
FIXE
|
2011-06-13
|
342267
|
|
Mozilla Firefox Javascript navigator Object Vulnerability (ZDI-CAN-055, CVE-2006-3677)
|
Core
|
Security
|
mrbkap
|
RESO
|
FIXE
|
2007-08-17
|
344759
|
|
EIP hijack in FF 1.5.0.5 -- crash [@ 0x20202113] called by JS_SetPrivate
|
Core
|
Security
|
mrbkap
|
RESO
|
FIXE
|
2011-06-13
|
344873
|
|
Failure of PostCreate is not handled well
|
Core
|
XPConnect
|
mrbkap
|
RESO
|
FIXE
|
2006-12-20
|
345772
|
|
GC hazard in cloning block chains
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2006-08-10
|
347054
|
|
crashes finalizing plugin scriptability objects inside js_GC [@ _PR_MD_ATOMIC_DECREMENT] [@ _PR_DarwinPPC_AtomicDecrement()] [@ 0x6c707538]
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2011-06-09
|
347330
|
|
localrootscope in jsxml.c
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2006-08-07
|
348375
|
|
Buggy break in EmitNonLocalJumpFixup
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2006-08-12
|
411092
|
|
XPCNativeWrapper pollution using setTimeout()
|
Core
|
XPConnect
|
mrbkap
|
RESO
|
FIXE
|
2008-03-25
|
411093
|
|
XPCNativeWrapper pollution using Function constructor
|
Core
|
XPConnect
|
mrbkap
|
RESO
|
FIXE
|
2008-03-26
|
464174
|
|
The fix in bug 451680 does not fix <field>
|
Core
|
XBL
|
mrbkap
|
RESO
|
FIXE
|
2009-01-07
|
479560
|
|
Arbitrary code execution using sidebar
|
Core
|
Security
|
mrbkap
|
RESO
|
FIXE
|
2015-10-16
|
306020
|
|
Enable official branding and set version to "Firefox 1.5 Beta 1" for upcoming 1.8b4 milestone release
|
Firefox
|
General
|
mscott
|
RESO
|
FIXE
|
2006-03-12
|
334486
|
|
Ability to restore shipped search engines from the safe mode dialog, after they've been removed
|
Firefox
|
Search
|
mwu.code
|
RESO
|
FIXE
|
2009-07-01
|
341829
|
|
bookmarks manager doesn't escape quotation marks in attribute values
|
Firefox
|
Bookmarks & History
|
myk
|
RESO
|
FIXE
|
2007-05-05
|
342182
|
|
text field on "new bookmarks" folder is "too short"
|
Firefox
|
Bookmarks & History
|
myk
|
RESO
|
FIXE
|
2006-06-29
|
343385
|
|
Wrong title for bookmarklet in Properties
|
Firefox
|
Bookmarks & History
|
myk
|
RESO
|
FIXE
|
2006-07-05
|
343537
|
|
Fix for 341829 broke non-places build
|
Firefox
|
Bookmarks & History
|
myk
|
RESO
|
FIXE
|
2006-07-05
|
351079
|
|
RSA signature DigestInfo not checked properly in NSS (CVE-2006-4340)
|
NSS
|
Libraries
|
nelson
|
RESO
|
FIXE
|
2009-07-25
|
351848
|
|
DecryptSigBlock does not check the message digest's length is correct
|
NSS
|
Libraries
|
nelson
|
RESO
|
FIXE
|
2010-06-17
|
356215
|
|
FF1507 RSA signature forgery: unchecked padding length (CVE-2006-5462)
|
NSS
|
Libraries
|
nelson
|
RESO
|
FIXE
|
2010-06-17
|
364319
|
|
SSL2 client vulnerability in non-DEBUG builds
|
NSS
|
Libraries
|
nelson
|
RESO
|
FIXE
|
2007-02-23
|
364323
|
|
SSL2 server vulnerability reported
|
NSS
|
Libraries
|
nelson
|
RESO
|
FIXE
|
2007-03-20
|
308743
|
|
[Mac] Context menu items for bookmarks toolbar items don't work
|
Firefox
|
Bookmarks & History
|
nobody
|
RESO
|
FIXE
|
2005-09-27
|
333591
|
|
Clear Private Data does not clear Saved Form Information
|
Firefox
|
Settings UI
|
pamg.bugs
|
RESO
|
FIXE
|
2006-05-21
|
336452
|
|
Improve search-engine confirmation dialog
|
Firefox
|
Search
|
pamg.bugs
|
RESO
|
FIXE
|
2006-06-22
|
337780
|
|
Support JS for adding search engines that matches IE's API (provide a way to install search engines from web script)
|
Firefox
|
Search
|
pamg.bugs
|
RESO
|
FIXE
|
2006-07-29
|
344231
|
|
Clicking an autocomplete entry in the search bar no longer starts the search with the selected entry (Error: aEvent has no properties)
|
Firefox
|
Search
|
pamg.bugs
|
RESO
|
FIXE
|
2006-07-21
|
301490
|
|
Rich text editor property useCSS changed meaning
|
Core
|
DOM: Editor
|
peterv
|
RESO
|
FIXE
|
2006-03-12
|
306809
|
|
oom mlk in txVariable::Convert
|
Core
|
XSLT
|
peterv
|
RESO
|
FIXE
|
2005-09-06
|
308706
|
|
1.5 Beta crashes Immediately upon double-clicking on the Icon. [@ nsContentUtils::SplitExpatName]
|
Core
|
Layout
|
peterv
|
RESO
|
FIXE
|
2018-08-29
|
320375
|
|
CVE-2006-0298 Buffer overrun in nsExpatDriver::ParseBuffer [@ nsExpatDriver::ParseBuffer]
|
Core
|
XML
|
peterv
|
RESO
|
FIXE
|
2006-03-10
|
328619
|
|
Places toolbar shown in popups, take two
|
Firefox
|
Bookmarks & History
|
philringnalda
|
RESO
|
FIXE
|
2009-11-26
|
347140
|
|
blocklisting broken sometime after implementation
|
Toolkit
|
Add-ons Manager
|
robert.strong.bugs
|
RESO
|
FIXE
|
2008-07-31
|
338070
|
|
Revert the nsISidebar changes made in bug 334471
|
Core
|
DOM: Core & HTML
|
roc
|
RESO
|
FIXE
|
2019-03-13
|
321036
|
|
feed parser edge cases (port of bug 302133)
|
Firefox
|
Bookmarks & History
|
sayrer
|
RESO
|
FIXE
|
2009-11-26
|
299419
|
|
Crash [@ nsEventStateManager::FireContextClick]
|
Core
|
DOM: UI Events & Foc
|
sfraser_bugs
|
RESO
|
FIXE
|
2019-03-13
|
390813
|
|
Overlay scripts compiled using principal of first document sourcing overlay
|
Core
|
XUL
|
smaug
|
RESO
|
FIXE
|
2008-07-31
|
448548
|
|
XSLT creates documents which don't have script handling objects
|
Core
|
DOM: Core & HTML
|
smaug
|
RESO
|
FIXE
|
2019-03-13
|
484320
|
|
XUL <tree> _moveToEdgeShift garbage-collection exploit (zdi-can-465)
|
Core
|
XUL
|
smaug
|
RESO
|
FIXE
|
2010-03-25
|
343104
|
|
In RTL UI, tabbrowser's scroll arrows are scrolling in reverse
|
Firefox
|
Tabbed Browser
|
smontagu
|
RESO
|
FIXE
|
2008-04-07
|
310737
|
|
1.0.x users have no way to re-enable software installation (message bar that appears when xpinstall.enabled is false points to removed UI)
|
Firefox
|
Settings UI
|
steffen.wilberg
|
RESO
|
FIXE
|
2006-09-16
|
332448
|
|
nsSearchService fails to set POST data for searches
|
Firefox
|
Search
|
toadking
|
RESO
|
FIXE
|
2006-04-03
|
305004
|
|
Create a dated bookmark backup file periodically
|
Firefox
|
Bookmarks & History
|
vladimir
|
RESO
|
FIXE
|
2011-11-10
|
334174
|
|
Corrupted database files are not handled correctly
|
Core
|
SQLite and Embedded
|
vladimir
|
RESO
|
FIXE
|
2024-08-20
|
504611
|
|
NSS 3.12.3.1 release
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-02-05
|
339127
|
|
Provide a way for a web page to enable/disable spell checking on a given field
|
Core
|
Spelling checker
|
zerodpx
|
RESO
|
FIXE
|
2006-08-21
|
304484
|
|
Window-Eyes does not read entire popup dialog
|
Firefox
|
Disability Access
|
aaronlev
|
RESO
|
FIXE
|
2005-08-17
|
304488
|
|
frame/Iframe titles are not reported properly by Window-Eyes. This works ok with IE
|
Firefox
|
Disability Access
|
aaronlev
|
RESO
|
FIXE
|
2005-08-17
|
334234
|
|
PK11_NewSlotInfo returns freed objects if lock allocations fail
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2007-03-23
|
334236
|
|
double free in PK11_ListPrivKeysInSlot if keys allocation fails
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2007-03-23
|
334240
|
|
double free in nsslowkey_ConvertToPublicKey if SECITEM_CopyItem or SECITEM_CopyItem fail
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2007-03-23
|
334273
|
|
double free in SECKEY_DecodeDERSubjectPublicKeyInfo
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2007-03-23
|
334274
|
|
double free in CRMF_EncryptedKeyGetEncryptedValue
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2007-03-23
|
334275
|
|
double free in [@ PK11_ListPublicKeysInSlot]
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2011-06-13
|
334276
|
|
double free in [@ SECKEY_CopyPublicKey]
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2011-06-13
|
334277
|
|
double free in [@ sftk_FreeAttribute - sftk_DeleteAttributeType]
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2011-06-13
|
334446
|
|
oom Crash in nssCKFWFindObjects_Create
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2007-03-23
|
334448
|
|
oom Crash in crmf_copy_cert_req_msg
|
NSS
|
Libraries
|
alvolkov.bgs
|
RESO
|
FIXE
|
2007-03-23
|
318052
|
|
Drag and Drop Feedback for Personal Toolbar
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
325605
|
|
History not shown via Ctrl-H or Go->History
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
327034
|
|
"Open in Tabs" gone from bookmark menus
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
327321
|
|
Implement bookmark separators in menus and toolbar
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
327364
|
|
Toolbar customization has changed
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
327497
|
|
Places toolbar appears in windows that should have no toolbars
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
328543
|
|
Update chrome uris for new icon locations
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
330465
|
|
Duplicate access key on main menu
|
Firefox
|
Bookmarks & History
|
annie.sullivan
|
RESO
|
FIXE
|
2009-11-26
|
107433
|
|
Make it possible to turn off click-and-hold contextual menu access
|
Core
|
XUL
|
asaf
|
RESO
|
FIXE
|
2008-07-31
|
243235
|
|
Remove Expand/Collapse UI (was: Bookmark contextmenu should not have "expand" when right clicking on folders)
|
Firefox
|
Bookmarks & History
|
asaf
|
RESO
|
FIXE
|
2006-08-27
|
262905
|
|
Add a way to change the backspace key behavior in the content area
|
Firefox
|
Shell Integration
|
asaf
|
RESO
|
FIXE
|
2011-04-25
|
266945
|
|
Add confirm prompt for "Remove All" operation in Password Manager
|
Toolkit
|
Password Manager
|
asaf
|
RESO
|
FIXE
|
2008-07-31
|
269799
|
|
"Clear All" privacy button / Clear Private Data tool don't cause cookies to be removed (according to visual feedback)
|
Firefox
|
Settings UI
|
asaf
|
RESO
|
FIXE
|
2006-08-27
|
299882
|
|
Downloads > Download Folder directory is not updated
|
Firefox
|
Settings UI
|
asaf
|
RESO
|
FIXE
|
2006-03-12
|
301758
|
|
click-and-hold shouldn't be interpreted as right-click
|
Firefox
|
General
|
asaf
|
RESO
|
FIXE
|
2007-07-02
|
302164
|
|
Yes/No buttons in the "Remember password" dialog should describe their actions, have accesskeys
|
Toolkit
|
Password Manager
|
asaf
|
RESO
|
FIXE
|
2008-07-31
|
303998
|
|
home page location(s) input field scroll doesn't work properly on long url's
|
Firefox
|
Settings UI
|
asaf
|
RESO
|
FIXE
|
2006-03-12
|
304748
|
|
"Bookmark This Tab" command doesn't work if the context element is the tabbar itself
|
Firefox
|
Bookmarks & History
|
asaf
|
RESO
|
FIXE
|
2006-03-12
|
305210
|
|
[Mac] First-time migration wizard has no titlebar
|
Firefox
|
Migration
|
asaf
|
RESO
|
FIXE
|
2005-09-28
|
306255
|
|
[mac] The "Folder" button in the download manager isn't keyboard accessible (add support for toolbarbutton.tabbable in Pinstripe)
|
Firefox
|
Keyboard Navigation
|
asaf
|
RESO
|
FIXE
|
2019-05-03
|
308114
|
|
[Mac] No keyboard shortcut for "Highlight All"
|
Toolkit
|
Find Toolbar
|
asaf
|
RESO
|
FIXE
|
2019-05-03
|
308812
|
|
Go menu commands shouldn't have accesskeys
|
Firefox
|
Menus
|
asaf
|
RESO
|
FIXE
|
2006-05-15
|
308819
|
|
Clicking either on the live bookmark button/menu or on the padlock button focuses the location bar if clickSelectsAll is enabled (default on windows)
|
Firefox
|
Address Bar
|
asaf
|
RESO
|
FIXE
|
2005-09-19
|
308888
|
|
Alt+clicking bookmark in sidebar gives "Error: saveURL is not defined"
|
Firefox
|
Bookmarks & History
|
asaf
|
RESO
|
FIXE
|
2005-09-19
|
309223
|
|
[Mac] "Download Actions" description is too small
|
Firefox
|
Settings UI
|
asaf
|
RESO
|
FIXE
|
2005-09-28
|
309730
|
|
Tweak wheel+modifiers preferences on OS X
|
Firefox
|
Shell Integration
|
asaf
|
RESO
|
FIXE
|
2005-09-28
|
309860
|
|
Dragging a url to the tabstrip ignores the shift key
|
Firefox
|
Tabbed Browser
|
asaf
|
RESO
|
FIXE
|
2006-03-12
|
310156
|
|
File->Import doesn't focus migration wizard if it's already opened
|
Firefox
|
Migration
|
asaf
|
RESO
|
FIXE
|
2005-09-28
|
311288
|
|
Browser restart without due warning if "Software Update" dialog appears while typing
|
Toolkit
|
Application Update
|
asaf
|
RESO
|
FIXE
|
2011-08-05
|
311496
|
|
Safe Mode UI: "Make Changes and Restart" button should be disabled if no action is checked
|
Firefox
|
General
|
asaf
|
RESO
|
FIXE
|
2006-06-10
|
311508
|
|
If the prefwindow is modal, "Use Current Pages" should use the prefwindow opener as the current pages rather than the last focused browser window
|
Firefox
|
Settings UI
|
asaf
|
RESO
|
FIXE
|
2006-03-06
|
315195
|
|
Select wrong default font if I close the preferences window with Command + W shortcut
|
Toolkit
|
UI Widgets
|
asaf
|
RESO
|
FIXE
|
2006-02-03
|
333831
|
|
Reimplement click-and-hold access to the back and forward session history menus
|
Firefox
|
Shell Integration
|
asaf
|
RESO
|
FIXE
|
2006-04-22
|
333863
|
|
[Mac] Places is buggy in non browser windows
|
Firefox
|
Bookmarks & History
|
asaf
|
RESO
|
FIXE
|
2009-11-26
|
333947
|
|
[Mac] Collapse-toolbar button does nothing in Places Organizer
|
Firefox
|
Bookmarks & History
|
asaf
|
RESO
|
FIXE
|
2009-11-26
|
342841
|
|
Scrolling arrow should look disabled when you can't scroll in its direction
|
Toolkit
|
UI Widgets
|
asaf
|
RESO
|
FIXE
|
2007-11-11
|
343061
|
|
if browser.tabs.closeButtons == 3, you can't close tabs on pinstripe
|
Firefox
|
Tabbed Browser
|
asaf
|
RESO
|
FIXE
|
2006-07-13
|
343554
|
|
Tab reordering shortcuts can move tabs offscreen
|
Firefox
|
Tabbed Browser
|
asaf
|
RESO
|
FIXE
|
2006-07-06
|