mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-25 11:15:34 +00:00
Home sp before calling js_ValueToStringAtom and js_ValueToFunction (bug 57826, r=mccabe, sr=jband).
This commit is contained in:
parent
1b0b4923c7
commit
cfb8447863
@ -1460,6 +1460,7 @@ js_Interpret(JSContext *cx, jsval *result)
|
|||||||
if (JSVAL_IS_INT(id)) { \
|
if (JSVAL_IS_INT(id)) { \
|
||||||
atom = NULL; \
|
atom = NULL; \
|
||||||
} else { \
|
} else { \
|
||||||
|
SAVE_SP(fp); \
|
||||||
atom = js_ValueToStringAtom(cx, (jsval)id); \
|
atom = js_ValueToStringAtom(cx, (jsval)id); \
|
||||||
if (!atom) { \
|
if (!atom) { \
|
||||||
ok = JS_FALSE; \
|
ok = JS_FALSE; \
|
||||||
@ -2213,6 +2214,7 @@ js_Interpret(JSContext *cx, jsval *result)
|
|||||||
OBJ_GET_CLASS(cx, obj2) == &js_FunctionClass ||
|
OBJ_GET_CLASS(cx, obj2) == &js_FunctionClass ||
|
||||||
!obj2->map->ops->construct)
|
!obj2->map->ops->construct)
|
||||||
{
|
{
|
||||||
|
SAVE_SP(fp);
|
||||||
fun = js_ValueToFunction(cx, vp, JS_TRUE);
|
fun = js_ValueToFunction(cx, vp, JS_TRUE);
|
||||||
if (!fun) {
|
if (!fun) {
|
||||||
ok = JS_FALSE;
|
ok = JS_FALSE;
|
||||||
|
Loading…
Reference in New Issue
Block a user