Bug 398547, Crash in nsPlainTextSerializer.cpp, p=kengert@redhat.com, r=mscott, sr=bz, a=blocking1.9

content/base/src/nsPlainTextSerializer.cpp

@@ -1594,7 +1594,7 @@ nsPlainTextSerializer::Write(const nsAString& aStr)
   // to be cut off along with usual spaces if required. (bug #125928)
   if (mFlags & nsIDocumentEncoder::OutputFormatFlowed) {
     PRUnichar nbsp = 160;
-    for (PRUint32 i = totLen-1; i >= 0; i--) {
+    for (PRInt32 i = totLen-1; i >= 0; i--) {
       PRUnichar c = str[i];
       if ('\n' == c || '\r' == c || ' ' == c || '\t' == c)
         continue;