Bug 829421 - Free ArgumentsData if JSObject allocation fails. r=nbp

This commit is contained in:
Tim Lunn 2013-01-17 09:26:09 -08:00 committed by Nicolas B. Pierron
parent f597024e7a
commit 1882366688

View File

@ -161,8 +161,10 @@ ArgumentsObject::create(JSContext *cx, HandleScript script, HandleFunction calle
ClearAllBitArrayElements(data->deletedBits, numDeletedWords);
RawObject obj = JSObject::create(cx, FINALIZE_KIND, shape, type, NULL);
if (!obj)
if (!obj) {
cx->free_(data);
return NULL;
}
obj->initFixedSlot(INITIAL_LENGTH_SLOT, Int32Value(numActuals << PACKED_BITS_COUNT));
obj->initFixedSlot(DATA_SLOT, PrivateValue(data));