Home sp before calling js_ValueToStringAtom and js_ValueToFunction (bug 57826, r=mccabe, sr=jband).

This commit is contained in:
brendan%mozilla.org 2000-10-25 04:04:29 +00:00
parent 1b0b4923c7
commit cfb8447863

View File

@ -1460,6 +1460,7 @@ js_Interpret(JSContext *cx, jsval *result)
if (JSVAL_IS_INT(id)) { \
atom = NULL; \
} else { \
SAVE_SP(fp); \
atom = js_ValueToStringAtom(cx, (jsval)id); \
if (!atom) { \
ok = JS_FALSE; \
@ -2213,6 +2214,7 @@ js_Interpret(JSContext *cx, jsval *result)
OBJ_GET_CLASS(cx, obj2) == &js_FunctionClass ||
!obj2->map->ops->construct)
{
SAVE_SP(fp);
fun = js_ValueToFunction(cx, vp, JS_TRUE);
if (!fun) {
ok = JS_FALSE;