Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-06 09:05:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 605707 - r=igor

Browse Source
This commit is contained in:
Michael Wu 2011-04-25 13:20:14 -07:00
parent fa0d0ed230
commit 63e44689d1
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
js/src/jsregexpinlines.h
View File

@ -443,6 +443,12 @@ RegExp::createObjectNoStatics(JSContext *cx, const jschar *chars, size_t length,
JSString *str = js_NewStringCopyN(cx, chars, length); JSString *str = js_NewStringCopyN(cx, chars, length);
if (!str) if (!str)
return NULL; return NULL;
/*
* NewBuiltinClassInstance can GC before we store re in the private field
* of the object. At that point the only reference to the source string
* could be from the malloc-allocated GC-invisible re. So we must anchor.
*/
JS::Anchor<JSString *> anchor(str);
AlreadyIncRefed<RegExp> re = RegExp::create(cx, str, flags); AlreadyIncRefed<RegExp> re = RegExp::create(cx, str, flags);
if (!re) if (!re)
return NULL; return NULL;