Bug 577952 - Deep recursion in Release crashes on double-free in [@ nsHtml5UTF16Buffer::~nsHtml5UTF16Buffer()]. r=hsivonen, a=betaN+

2010-10-07 14:00:17 -07:00
parent dd558ada60
commit a27f9c52f3
1 changed files with 1 additions and 1 deletions
--- a/parser/html/nsHtml5Parser.cpp
+++ b/parser/html/nsHtml5Parser.cpp
@@ -99,7 +99,6 @@ nsHtml5Parser::nsHtml5Parser()
 nsHtml5Parser::~nsHtml5Parser()
 {
  mTokenizer->end();
-  mFirstBuffer = nsnull;
 }

 NS_IMETHODIMP_(void)
@@ -512,6 +511,7 @@ nsHtml5Parser::Reset()
  mFirstBuffer->next = nsnull;
  mFirstBuffer->setStart(0);
  mFirstBuffer->setEnd(0);
+  mLastBuffer = mFirstBuffer;
 }

 PRBool