Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-22 01:35:35 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

b=873757; crash in JSStructuredCloneWriter::writeArrayBuffer; r=bz

Browse Source
This commit is contained in:
Vladimir Vukicevic 2013-05-23 22:09:38 -04:00
parent 262e16d802
commit 7b3cd12107
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
content/base/src/nsXMLHttpRequest.cpp
View File

@ -3466,6 +3466,7 @@ nsXMLHttpRequest::MaybeDispatchProgressEvents(bool aFinalProgress)
mResponseBody.Truncate();
mResponseText.Truncate();
mResultArrayBuffer = nullptr;
mArrayBufferBuilder.reset();
}
}

4
js/src/jsfriendapi.h
View File

@ -1064,7 +1064,9 @@ class ArrayBufferBuilder
}
JSObject* getArrayBuffer(JSContext *cx) {
if (capacity_ > length_) {
// we need to check for length_ == 0, because nothing may have been
// added
if (capacity_ > length_ || length_ == 0) {
if (!setCapacity(length_))
return NULL;
}