Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-30 05:35:31 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 469313 - TM: crash (GMail): JS_Assert (s=0x368d8f "!JS_ON_TRACE(cx)", file=0x3724c8 "/Users/roc/mozilla-checkin/js/src/jsobj.cpp", ln=3765) (r=gal).

Browse Source
This commit is contained in:
Brendan Eich 2008-12-13 17:30:04 -08:00
parent cabf4491c3
commit 664a2b2b39
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
js/src/jsinterp.cpp
View File

@ -231,7 +231,8 @@ js_FillPropertyCache(JSContext *cx, JSObject *obj, jsuword kshape,
#endif #endif
SCOPE_MAKE_UNIQUE_SHAPE(cx, scope); SCOPE_MAKE_UNIQUE_SHAPE(cx, scope);
SCOPE_SET_BRANDED(scope); SCOPE_SET_BRANDED(scope);
kshape = scope->shape; if (OBJ_SCOPE(obj) == scope)
kshape = scope->shape;
} }
vword = JSVAL_OBJECT_TO_PCVAL(v); vword = JSVAL_OBJECT_TO_PCVAL(v);
break; break;