wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 914098 - Add needed unknownObject() call, r=jandem.

Browse Source
This commit is contained in:
Brian Hackett 2013-09-11 07:14:44 -07:00
parent 8771a80a73
commit 22041f3e58
2 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
js/src/jit-test/tests/ion/bug914098.js Normal file
View File

@ -0,0 +1,16 @@
// |jit-test| error: TypeError
function ygTreeView(id) {};
function ygNode() {}
ygNode.prototype.init = function () {
this.children = [];
}
ygTextNode.prototype = new ygNode;
function ygTextNode() {
this.init(it.next.bind(it), StopIteration)
}
userTree = new ygTreeView("userTree")
addMenuNode(userTree)
function addMenuNode(tree) {
new ygTextNode({}, tree.root, false)
}

2
js/src/jsinfer.cpp
View File

@ -2882,7 +2882,7 @@ types::AddClearDefiniteFunctionUsesInScript(JSContext *cx, TypeObject *type,
for (unsigned i = 0; i < count; i++) { for (unsigned i = 0; i < count; i++) {
TypeSet *types = &typeArray[i]; TypeSet *types = &typeArray[i];
if (types->getObjectCount() == 1) { if (!types->unknownObject() && types->getObjectCount() == 1) {
if (calleeKey != types->getObject(0)) { if (calleeKey != types->getObject(0)) {
// Also check if the object is the Function.call or // Also check if the object is the Function.call or
// Function.apply native. IonBuilder uses the presence of these // Function.apply native. IonBuilder uses the presence of these