Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-08 04:27:37 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

[INFER] Update initialized length in array_pop_dense, bug 651451. r=bhackett

Browse Source
This commit is contained in:
Jan de Mooij 2011-04-20 18:10:59 +02:00
parent 91f31cd887
commit 0439e24a54
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
js/src/jit-test/tests/basic/bug651451.js Normal file
View File

@ -0,0 +1,4 @@
var arr = [2];
arr.pop();
arr[0] = 2;
assertEq(arr.length, 1);

2
js/src/jsarray.cpp
View File

@ -2353,6 +2353,8 @@ array_pop_dense(JSContext *cx, JSObject* obj, Value *vp)
if (!hole && DeleteArrayElement(cx, obj, index, true) < 0)
return JS_FALSE;
if (cx->typeInferenceEnabled())
obj->setDenseArrayInitializedLength(index);
obj->setDenseArrayLength(index);
return JS_TRUE;
}