From a81be745e735ed47d1bd73d1a59d4030d805bc4e Mon Sep 17 00:00:00 2001
From: Steve Fink <sfink@mozilla.com>
Date: Wed, 30 Aug 2017 16:35:34 -0700
Subject: [PATCH] Bug 1389974 - Avoid taking reference to temporary Value
 because it hides from hazard analysis, r=jonco

--HG--
extra : rebase_source : 364ab0b1b980cf2c0be6adad54f0314310887e61
extra : histedit_source : 136a8920019838d5f659595a2dee82af2ef15fe4
---
 js/src/jsarray.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/src/jsarray.cpp b/js/src/jsarray.cpp
index abb69bd1e33a..2c1d70a7e37e 100644
--- a/js/src/jsarray.cpp
+++ b/js/src/jsarray.cpp
@@ -1242,7 +1242,7 @@ ArrayJoinDenseKernel(JSContext* cx, SeparatorOp sepOp, HandleObject obj, uint64_
             return DenseElementResult::Failure;
 
         // Step 7.b.
-        const Value& elem = GetBoxedOrUnboxedDenseElement<Type>(obj, *numProcessed);
+        Value elem = GetBoxedOrUnboxedDenseElement<Type>(obj, *numProcessed);
 
         // Steps 7.c-d.
         if (elem.isString()) {