mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-12-03 02:25:34 +00:00
Close a loophole Jesse pointed out.
This commit is contained in:
parent
f22a07a028
commit
f96f8cbb8f
@ -394,8 +394,11 @@ args_setProperty(JSContext *cx, JSObject *obj, jsval id, jsval *vp)
|
||||
break;
|
||||
|
||||
default:
|
||||
if ((uintN)slot < fp->argc && !ArgWasDeleted(cx, fp, slot))
|
||||
if (fp->fun->interpreted &&
|
||||
(uintN)slot < fp->argc &&
|
||||
!ArgWasDeleted(cx, fp, slot)) {
|
||||
fp->argv[slot] = *vp;
|
||||
}
|
||||
break;
|
||||
}
|
||||
return JS_TRUE;
|
||||
|
Loading…
Reference in New Issue
Block a user