From 49fc2edda227ef0d8443bd9d405a9e4431e542fb Mon Sep 17 00:00:00 2001
From: Brian Hackett <bhackett1024@gmail.com>
Date: Fri, 7 Mar 2014 09:36:24 -0700
Subject: [PATCH] Bug 980450 - Always initialize outparams in
 LookupOwnPropertyWithFlagsInline, r=luke.

---
 js/src/jsobj.cpp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/js/src/jsobj.cpp b/js/src/jsobj.cpp
index f0cd988b6858..37f0f1c6d4a5 100644
--- a/js/src/jsobj.cpp
+++ b/js/src/jsobj.cpp
@@ -4007,6 +4007,9 @@ LookupOwnPropertyWithFlagsInline(ExclusiveContext *cx,
             if (index < obj->template as<TypedArrayObject>().length()) {
                 objp.set(obj);
                 MarkDenseOrTypedArrayElementFound<allowGC>(propp);
+            } else {
+                objp.set(nullptr);
+                propp.set(nullptr);
             }
             *donep = true;
             return true;