Bug 1102640 - [e10s] Shouldn't be able to create CPOWs to the inner window (r=mrbkap)

This commit is contained in:
Bill McCloskey 2014-12-18 17:34:24 -08:00
parent 478530b3a3
commit a58a3e4621

View File

@ -932,7 +932,7 @@ WrapperOwner::toObjectVariant(JSContext *cx, JSObject *objArg, ObjectVariant *ob
// Whenever operating on an object that comes from the table, we wrap it
// in findObjectById.
unsigned wrapperFlags = 0;
obj = js::UncheckedUnwrap(obj, false, &wrapperFlags);
obj = js::UncheckedUnwrap(obj, true, &wrapperFlags);
if (obj && IsCPOW(obj) && OwnerOf(obj) == this) {
*objVarp = LocalObject(idOf(obj).serialize());
return true;