From 483224b99d574c83f5fed38fd66334db2f5c4652 Mon Sep 17 00:00:00 2001
From: Bill McCloskey <wmccloskey@mozilla.com>
Date: Thu, 19 Jul 2012 16:56:14 -0700
Subject: [PATCH] Bug 758408 - Fix XML slot handling (r=Waldo)

---
 js/src/jsxml.cpp | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/js/src/jsxml.cpp b/js/src/jsxml.cpp
index f61a548fb81..65e8c1ec8d6 100644
--- a/js/src/jsxml.cpp
+++ b/js/src/jsxml.cpp
@@ -7470,7 +7470,7 @@ namespace js {
 bool
 GlobalObject::getFunctionNamespace(JSContext *cx, Value *vp)
 {
-    HeapSlot &v = getSlotRef(FUNCTION_NS);
+    Value v = getSlot(FUNCTION_NS);
     if (v.isUndefined()) {
         JSRuntime *rt = cx->runtime;
         JSLinearString *prefix = rt->atomState.typeAtoms[JSTYPE_FUNCTION];
@@ -7489,7 +7489,8 @@ GlobalObject::getFunctionNamespace(JSContext *cx, Value *vp)
         if (!JSObject::clearType(cx, obj))
             return false;
 
-        v.set(this, FUNCTION_NS, ObjectValue(*obj));
+        v = ObjectValue(*obj);
+        setSlot(FUNCTION_NS, v);
     }
 
     *vp = v;