Disclosed Chromium Security Bugs

DCHECK failure in node->id() < count_ in simplified-lowering.cc

#40089589•Reporter: cl...@chromium.org
$0
2/21/2018

DCHECK failure in IsTyped(node) in node-properties.h

#40089582•Reporter: cl...@chromium.org
$0
2/20/2018

DCHECK failure in this->IsInhabited() in types.cc

#40089547•Reporter: cl...@chromium.org
$0
2/16/2018

CHECK failure: #863:JSCallRuntime should be followed by IfSuccess/IfException, but is only foll

#40089550•Reporter: cl...@chromium.org
$0
2/16/2018

CHECK failure: Representation inference: unsupported opcode 61 (Dead), node #NUMBER in simplifi

#40089551•Reporter: cl...@chromium.org
$0
2/16/2018

DCHECK failure in !isolate_->has_pending_exception() in module-compiler.cc

#40089536•Reporter: cl...@chromium.org
$0
2/15/2018

DCHECK failure in false == cell_reports_intact in isolate.cc

#40089493•Reporter: cl...@chromium.org
$0
2/9/2018

Heap-use-after-free in blink::AXLayoutObject::GetDocument

#40089109•Reporter: cl...@chromium.org
$0
2/8/2018

Security DCHECK failure: !object || (object->IsBox()) in LayoutBox.h

#40088986•Reporter: cl...@chromium.org
$0
1/27/2018

DCHECK failure in right_type()->Is(Type::PlainPrimitive()) in js-typed-lowering.cc

#40089237•Reporter: cl...@chromium.org
$0
1/24/2018
Showing 9001-9010 of 13102 bugs
1...900901902...1311