mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
Bug 835496 - Don't try to fix the types for object initializers with dense elements, r=jandem.
This commit is contained in:
parent
42d12beb79
commit
34f1ba9368
6
js/src/jit-test/tests/ion/bug835496.js
Normal file
6
js/src/jit-test/tests/ion/bug835496.js
Normal file
@ -0,0 +1,6 @@
|
||||
// |jit-test| error: TypeError
|
||||
|
||||
(function([{x}]) {})({
|
||||
t: 0,
|
||||
"1": 0
|
||||
})
|
@ -3248,7 +3248,7 @@ TypeCompartment::fixObjectType(JSContext *cx, HandleObject obj)
|
||||
*/
|
||||
JS_ASSERT(obj->isObject());
|
||||
|
||||
if (obj->slotSpan() == 0 || obj->inDictionaryMode())
|
||||
if (obj->slotSpan() == 0 || obj->inDictionaryMode() || !obj->hasEmptyElements())
|
||||
return;
|
||||
|
||||
ObjectTypeTable::AddPtr p = objectTypeTable->lookupForAdd(obj.get());
|
||||
|
Loading…
Reference in New Issue
Block a user