From 252eab1177c75a083110ea44ae0afa46c8749916 Mon Sep 17 00:00:00 2001
From: Benjamin Smedberg <benjamin@smedbergs.us>
Date: Wed, 17 Dec 2008 13:15:08 -0500
Subject: [PATCH] Bug 469995 - js_DecompileValueGenerator uses cx->fp and
 should be made safe, r=crowder+jorendorff

---
 js/src/jsopcode.cpp | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/js/src/jsopcode.cpp b/js/src/jsopcode.cpp
index 3a89b75bedd..899b662851d 100644
--- a/js/src/jsopcode.cpp
+++ b/js/src/jsopcode.cpp
@@ -4945,8 +4945,7 @@ js_DecompileValueGenerator(JSContext *cx, intN spindex, jsval v,
               spindex == JSDVG_IGNORE_STACK ||
               spindex == JSDVG_SEARCH_STACK);
 
-    for (fp = cx->fp; fp && !fp->script; fp = fp->down)
-        continue;
+    fp = js_GetScriptedCaller(cx, NULL);
     if (!fp || !fp->regs || !fp->regs->sp)
         goto do_fallback;