From fd209390e52f175b8e52321a3f5af38922999850 Mon Sep 17 00:00:00 2001
From: "timeless@mozdev.org" <timeless@mozdev.org>
Date: Fri, 3 Jun 2011 08:57:00 -0700
Subject: [PATCH] Bug 620182 [@ QuoteString | DecompileSwitch] when
 JSVAL_IS_DOUBLE(key) and SprintDoubleValue fails due to oom r=jorendorff

---
 js/src/jsopcode.cpp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/js/src/jsopcode.cpp b/js/src/jsopcode.cpp
index 767b8c7414c7..fb7e88f5d896 100644
--- a/js/src/jsopcode.cpp
+++ b/js/src/jsopcode.cpp
@@ -1298,6 +1298,8 @@ DecompileSwitch(SprintStack *ss, TableEntry *table, uintN tableLength,
                     JSOp junk;
 
                     todo = SprintDoubleValue(&ss->sprinter, key, &junk);
+                    if (todo < 0)
+                        return JS_FALSE;
                     str = NULL;
                 } else {
                     str = js_ValueToString(cx, Valueify(key));