Fixing #13783 (garbage-pointer dereference)

modules/plugin/base/src/nsPluginHostImpl.cpp

@@ -109,6 +109,9 @@ nsPluginTag::nsPluginTag()
 
 inline char* new_str(char* str)
 {
+  if(str == nsnull)
+    return nsnull;
+
 	char* result = new char[strlen(str) + 1];
 	if (result != nsnull)
 		return strcpy(result, str);

modules/plugin/base/src/nsPluginsDirWin.cpp

@@ -92,7 +92,7 @@ static char** MakeStringArray(PRUint32 variants, char* data)
   if((variants == 0) || (data == NULL))
     return NULL;
 
-	buffer = (char **)PR_Malloc(variants * sizeof(char *));
+	buffer = (char **)PR_Calloc(variants, sizeof(char *));
 	if(!buffer)
 	    return NULL;
 	buffer[count] = index;

modules/plugin/nglsrc/nsPluginHostImpl.cpp

@@ -109,6 +109,9 @@ nsPluginTag::nsPluginTag()
 
 inline char* new_str(char* str)
 {
+  if(str == nsnull)
+    return nsnull;
+
 	char* result = new char[strlen(str) + 1];
 	if (result != nsnull)
 		return strcpy(result, str);

modules/plugin/nglsrc/nsPluginsDirWin.cpp

@@ -92,7 +92,7 @@ static char** MakeStringArray(PRUint32 variants, char* data)
   if((variants == 0) || (data == NULL))
     return NULL;
 
-	buffer = (char **)PR_Malloc(variants * sizeof(char *));
+	buffer = (char **)PR_Calloc(variants, sizeof(char *));
 	if(!buffer)
 	    return NULL;
 	buffer[count] = index;