mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-30 05:35:31 +00:00
Bug 469313 - TM: crash (GMail): JS_Assert (s=0x368d8f "!JS_ON_TRACE(cx)", file=0x3724c8 "/Users/roc/mozilla-checkin/js/src/jsobj.cpp", ln=3765) (r=gal).
This commit is contained in:
parent
cabf4491c3
commit
664a2b2b39
@ -231,7 +231,8 @@ js_FillPropertyCache(JSContext *cx, JSObject *obj, jsuword kshape,
|
|||||||
#endif
|
#endif
|
||||||
SCOPE_MAKE_UNIQUE_SHAPE(cx, scope);
|
SCOPE_MAKE_UNIQUE_SHAPE(cx, scope);
|
||||||
SCOPE_SET_BRANDED(scope);
|
SCOPE_SET_BRANDED(scope);
|
||||||
kshape = scope->shape;
|
if (OBJ_SCOPE(obj) == scope)
|
||||||
|
kshape = scope->shape;
|
||||||
}
|
}
|
||||||
vword = JSVAL_OBJECT_TO_PCVAL(v);
|
vword = JSVAL_OBJECT_TO_PCVAL(v);
|
||||||
break;
|
break;
|
||||||
|
Loading…
Reference in New Issue
Block a user