diff --git a/src/buffer.hh b/src/buffer.hh
index f38de731..de5e0cbf 100644
--- a/src/buffer.hh
+++ b/src/buffer.hh
@@ -75,7 +75,7 @@ public:
 private:
     ByteCount offset() const;
 
-    const Buffer* m_buffer;
+    safe_ptr<const Buffer> m_buffer;
     BufferCoord   m_coord;
     friend class Buffer;
 };