Fix crash introduced by bug 180309: recheck array length each time through the loop, since it can change. b=282453 Patch by Lorenzo Colitti <lorenzo@colitti.com>. r+sr=bzbarsky,dbaron a=mkaply

gfx/src/gtk/nsFontMetricsXft.cpp

@@ -944,8 +944,7 @@ nsFontMetricsXft::FindFont(PRUint32 aChar)
     }
 
     // Now check the remaining fonts
-
-    for (PRInt32 end = mLoadedFonts.Count(); i < end; ++i) {
+    for (; i < mLoadedFonts.Count(); ++i) {
         nsFontXft *font = (nsFontXft *)mLoadedFonts.ElementAt(i);
         if (font->HasChar(aChar)) {
             if (font->GetXftFont())