In Seamonkey V7 there's a small bug in file xpcom/io/nsIStringStream.cpp in method class CharImpl::write if ((PRInt32)aCount > maxCount) { do .... memcpy(newString, mString, mLength) <== mLength is not initialized, use mOffset instead

Are you sure this is uninitialized. I looked at the code. mLength is being initialized in the constructor of ConstCharImpl. Is there a specific case where this is uninitialized.

oops. -pn

sorry dp. I'm the culprit who marked it assigned. -pn

Have you gotten my mail where I wrote that it's initialized to zero but seems not to be updated during writes to that stream?? In FilesTest it strikes every time (on my ARM system). If there're no other architectures where the bug hits, this maybe an unnoticed compiler bug. I've seen it with egcs-1.1.2 and gcc-2.95 prerelease egcs-990623.