From cea77b76b3fef912bd79e777f97d353aa50474b6 Mon Sep 17 00:00:00 2001 From: "Matt A. Tobin" Date: Sun, 10 Nov 2019 21:59:52 -0500 Subject: Bug 1333038 - Use 'modern' pointers to fix crash due to nsMsgLineStreamBuffer object being deleted while still in use. Suspected "use after free" in nsMsgLineStreamBuffer::ReadNextLine() leading to crash since object may be destroyed while still in use on another thread. Tag #1273 --- mailnews/imap/src/nsImapProtocol.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'mailnews/imap/src/nsImapProtocol.h') diff --git a/mailnews/imap/src/nsImapProtocol.h b/mailnews/imap/src/nsImapProtocol.h index 5c4f43abd..32cf90e4c 100644 --- a/mailnews/imap/src/nsImapProtocol.h +++ b/mailnews/imap/src/nsImapProtocol.h @@ -323,7 +323,7 @@ private: nsCString m_serverKey; nsCString m_realHostName; char *m_dataOutputBuf; - nsMsgLineStreamBuffer * m_inputStreamBuffer; + RefPtr m_inputStreamBuffer; uint32_t m_allocatedSize; // allocated size uint32_t m_totalDataSize; // total data size uint32_t m_curReadIndex; // current read index -- cgit v1.2.3