From 1f22d8279670a3c7928df1df2ae5df6e73b1f42f Mon Sep 17 00:00:00 2001 From: Lars T Hansen Date: Wed, 7 Oct 2015 18:22:25 +0100 Subject: [PATCH] Bug 1211949 - check for allocation failure. r=nbp --- js/src/vm/ObjectGroup.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/js/src/vm/ObjectGroup.cpp b/js/src/vm/ObjectGroup.cpp index 17e6453a82f2..cdce0a46420c 100644 --- a/js/src/vm/ObjectGroup.cpp +++ b/js/src/vm/ObjectGroup.cpp @@ -1335,7 +1335,7 @@ ObjectGroup::newPlainObject(ExclusiveContext* cx, IdValuePair* properties, size_ RootedPlainObject obj(cx, NewObjectWithGroup(cx, group, allocKind, newKind)); - if (!obj->setLastProperty(cx, shape)) + if (!obj || !obj->setLastProperty(cx, shape)) return nullptr; for (size_t i = 0; i < nproperties; i++)