Bug 898356 Part 10 -- Barrier updates to private data for typed object views r=terrence

This commit is contained in:
Nicholas D. Matsakis 2014-02-19 23:18:23 -05:00
parent 276c1cd4ed
commit bddb4a0f97

View File

@ -1418,7 +1418,7 @@ TypedObject::attach(ArrayBufferObject &buffer, int32_t offset)
JS_ASSERT(offset + size() <= buffer.byteLength()); JS_ASSERT(offset + size() <= buffer.byteLength());
buffer.addView(this); buffer.addView(this);
setPrivate(buffer.dataPointer() + offset); InitArrayBufferViewDataPointer(this, &buffer, offset);
setReservedSlot(JS_TYPEDOBJ_SLOT_BYTEOFFSET, Int32Value(offset)); setReservedSlot(JS_TYPEDOBJ_SLOT_BYTEOFFSET, Int32Value(offset));
setReservedSlot(JS_TYPEDOBJ_SLOT_OWNER, ObjectValue(buffer)); setReservedSlot(JS_TYPEDOBJ_SLOT_OWNER, ObjectValue(buffer));
} }