244224 - [W] UMR: Uninitialized memory read in nsTextFrame::GetPosition(nsIPresContext *,nsPoint const&,nsIContent * *,int&,int&) {1 occurrence}

Status: NEW

(Core :: Layout: Text and Fonts, defect, P5)

Description

[timeless]

Seems like the same general problem as the other reports (long fixed), i only 
triggered this warning once and not intentionally, so i'm not sure what i did 
(or where I was when I did it). Sorry :)

Build is not more than a week old.

[W] UMR: Uninitialized memory read in nsTextFrame::GetPosition(nsIPresContext 
*,nsPoint const&,nsIContent * *,int&,int&) {1 occurrence}
        Reading 2 bytes from 0x0013e77a (2 bytes at 0x0013e77a uninitialized)
        Address 0x0013e77a points into a thread's stack 
        Address 0x0013e77a is 1304442 bytes below the frame pointer in 
nsTextFrame::GetPosition(nsIPresContext *,nsPoint const&,nsIContent * 
*,int&,int&)
        Thread ID: 0xa10
        Error location
            nsTextFrame::GetPosition(nsIPresContext *,nsPoint const&,nsIContent 
* *,int&,int&)+0x775 [r:\mozilla\layout\html\base\src\nstextframe.cpp:3465 
ip=0x046d162e]
                            }
                          }
                          else
                #endif // IBMBIDI
                          if ((aPoint.x - origin.x) > textWidth+charWidth) {
                            indx++;
                          }
                        }
                
                        aContentOffset = indx + mContentOffset;
                        //reusing wordBufMem
                        PRInt32 i;
                        for (i = 0; i < mContentLength; i ++){
                          if ((ip[i] >= aContentOffset) && //reverse mapping
             =>               (! IS_LOW_SURROGATE(paintBuffer.mBuffer[ip[i]-
mContentOffset]))) {
                              break;
                          }
                        }
                        aContentOffset = i + mContentOffset;
                #ifdef IBMBIDI
                        PRInt32 bidiStopOffset = mContentOffset + 
mContentLength;
                
                        if (aContentOffset >= mContentOffset && aContentOffset 
< bidiStopOffset) {
                          PRInt32 curindx = ip[aContentOffset - 
mContentOffset] - mContentOffset;
                          while (curindx < textLength && IS_BIDI_DIACRITIC(text
[curindx])) {
                            if (++aContentOffset >= bidiStopOffset)
                              break;
                            curindx = ip[aContentOffset - mContentOffset] - 
mContentOffset;
                          }