mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-25 03:05:34 +00:00
Home sp before calling js_ValueToStringAtom and js_ValueToFunction (bug 57826, r=mccabe, sr=jband).
This commit is contained in:
parent
1b0b4923c7
commit
cfb8447863
@ -1460,6 +1460,7 @@ js_Interpret(JSContext *cx, jsval *result)
|
||||
if (JSVAL_IS_INT(id)) { \
|
||||
atom = NULL; \
|
||||
} else { \
|
||||
SAVE_SP(fp); \
|
||||
atom = js_ValueToStringAtom(cx, (jsval)id); \
|
||||
if (!atom) { \
|
||||
ok = JS_FALSE; \
|
||||
@ -2213,6 +2214,7 @@ js_Interpret(JSContext *cx, jsval *result)
|
||||
OBJ_GET_CLASS(cx, obj2) == &js_FunctionClass ||
|
||||
!obj2->map->ops->construct)
|
||||
{
|
||||
SAVE_SP(fp);
|
||||
fun = js_ValueToFunction(cx, vp, JS_TRUE);
|
||||
if (!fun) {
|
||||
ok = JS_FALSE;
|
||||
|
Loading…
Reference in New Issue
Block a user