On Tue, Dec 19, 2006 at 06:18:32PM +0100, Nicolas Bonifas wrote:
> >Sorry for the delay ... can you still reproduce this crash?
> 
> Yes, I can. But I have new informations: the pop3 server I used was 
> buggy: it sent twice some lines in the answer to the UIDL command. In 
> the function GetList (nsPop3Protocol.cpp) m_listpos is incremented at 
> each line of the UIDL answer.
> As this bug is due to a grave bug in the server, I don't know if you 
> will want to correct it. If you want to do so, it is an easy thing:

We want to investigate for sure.

> 
> As m_pop3ConData is initialized to 0 by PR_NEWZAP, changing

I don't understand how your fix prevents the NULL dereference if
m_pop3ConData == NULL?

You still do
  if(!m_pop3ConData->msg_info[m_listpos-1].msgnum)
in your fix.

BTW, can you still reproduce the jsgc memory stack?

 - Alexander

-- 
 GPG messages preferred.   |  .''`.  ** Debian GNU/Linux **
 Alexander Sack            | : :' :      The  universal
 [EMAIL PROTECTED]           | `. `'      Operating System
 http://www.asoftsite.org  |   `-    http://www.debian.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to