From 3490856f34e46cf02419746e580e96801af9da1a Mon Sep 17 00:00:00 2001
From: Oleg Romashin <romaxa@gmail.com>
Date: Wed, 17 Sep 2008 17:38:33 +0300
Subject: [PATCH] Bug 455665 -  nsSplitterFrameInner crashes in some special
 case. r+sr=bzbarsky.

---
 layout/xul/base/src/nsSplitterFrame.cpp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/layout/xul/base/src/nsSplitterFrame.cpp b/layout/xul/base/src/nsSplitterFrame.cpp
index 1b786145719..ba84b53b6fc 100644
--- a/layout/xul/base/src/nsSplitterFrame.cpp
+++ b/layout/xul/base/src/nsSplitterFrame.cpp
@@ -526,6 +526,8 @@ nsSplitterFrameInner::MouseUp(nsPresContext* aPresContext, nsGUIEvent* aEvent)
   delete[] mChildInfosAfter;
   mChildInfosBefore = nsnull;
   mChildInfosAfter = nsnull;
+  mChildInfosBeforeCount = 0;
+  mChildInfosAfterCount = 0;
 }
 
 void