Close a loophole Jesse pointed out.

This commit is contained in:
brendan%mozilla.org 2005-10-25 08:51:38 +00:00
parent f22a07a028
commit f96f8cbb8f

View File

@ -394,8 +394,11 @@ args_setProperty(JSContext *cx, JSObject *obj, jsval id, jsval *vp)
break;
default:
if ((uintN)slot < fp->argc && !ArgWasDeleted(cx, fp, slot))
if (fp->fun->interpreted &&
(uintN)slot < fp->argc &&
!ArgWasDeleted(cx, fp, slot)) {
fp->argv[slot] = *vp;
}
break;
}
return JS_TRUE;