159619 - crashes in nsMultiMixedConv::OnDataAvailable

Status: VERIFIED DUPLICATE of bug 94734

(Core :: Networking, defect)

Description

[Christopher Blizzard (:blizzard)]

I've got a crash on ia64 that looks like a more generalized bug.  Looks like
that in some cases there's an array dereference that can walk off the beginning
of the array:

if (!mPartChannel || !(cursor[bufLen-1] == nsCRT::LF) )

sometimes bufLen is zero.  At least, this has been happening at bugzilla.redhat.com.

Patch in a moment.

Comment 1

[Christopher Blizzard (:blizzard)]

Attachment: careful, don't walk off that array

Comment 2

[Andrew Schultz]

dupe of "crash on a bugzilla search"

*** This bug has been marked as a duplicate of 94734 ***

Comment 3

[benc]

V/dupe.