Bug 469995 - js_DecompileValueGenerator uses cx->fp and should be made safe, r=crowder+jorendorff

This commit is contained in:
Benjamin Smedberg 2008-12-17 13:15:08 -05:00
parent 954913ca57
commit 252eab1177

View File

@ -4945,8 +4945,7 @@ js_DecompileValueGenerator(JSContext *cx, intN spindex, jsval v,
spindex == JSDVG_IGNORE_STACK || spindex == JSDVG_IGNORE_STACK ||
spindex == JSDVG_SEARCH_STACK); spindex == JSDVG_SEARCH_STACK);
for (fp = cx->fp; fp && !fp->script; fp = fp->down) fp = js_GetScriptedCaller(cx, NULL);
continue;
if (!fp || !fp->regs || !fp->regs->sp) if (!fp || !fp->regs || !fp->regs->sp)
goto do_fallback; goto do_fallback;