Bug 505738 - nsScriptableRegion::GetRects doesn't handle failure from JS_NewArrayObject [@ JS_DefineElement - nsScriptableRegion::GetRects] r=gal

This commit is contained in:
timeless@mozdev.org 2011-12-03 22:50:17 +01:00
parent 60226fe6de
commit 01e9200791

View File

@ -162,6 +162,10 @@ NS_IMETHODIMP nsScriptableRegion::GetRects(JSContext* aCx, JS::Value* aRects)
}
JSObject* destArray = JS_NewArrayObject(aCx, numRects * 4, NULL);
if (!destArray) {
return NS_ERROR_OUT_OF_MEMORY;
}
*aRects = OBJECT_TO_JSVAL(destArray);
uint32 n = 0;