Bug 1167590 - Mark imgRequestProxy::mListener as MOZ_UNSAFE_REF. r=seth

--HG--
extra : rebase_source : 9b7e027dfd0dcdc3d89181da72e14e8d9c6eb6b6

image/imgRequestProxy.h

@@ -204,7 +204,10 @@ private:
   // mListener is only promised to be a weak ref (see imgILoader.idl),
   // but we actually keep a strong ref to it until we've seen our
   // first OnStopRequest.
-  imgINotificationObserver* mListener;
+  imgINotificationObserver* MOZ_UNSAFE_REF("Observers must call Cancel() or "
+                                           "CancelAndForgetObserver() before "
+                                           "they are destroyed") mListener;
+
   nsCOMPtr<nsILoadGroup> mLoadGroup;
 
   nsLoadFlags mLoadFlags;