wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 907358 - Exactly root internal pointers in Array.join; r=Waldo

Browse Source 
--HG--
extra : rebase_source : c7f0c4dfd9a1ac7f7877e1cbe0778ac0f071e9d4
This commit is contained in:
Terrence Cole 2013-08-20 13:13:21 -07:00
parent 35539c04ed
commit 5790ed7ce6
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
js/src/jsarray.cpp
View File

@ -1,5 +1,6 @@
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*-
* vim: set ts=8 sts=4 et sw=4 tw=99:
* vim: set sw=4 ts=8 et tw=78:
*
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
@ -932,13 +933,13 @@ array_join_sub(JSContext *cx, CallArgs &args, bool locale)
// Various optimized versions of steps 7-10
if (!locale && !seplen && obj->is<ArrayObject>() && !ObjectMayHaveExtraIndexedProperties(obj)) {
const Value *start = obj->getDenseElements();
const Value *end = start + obj->getDenseInitializedLength();
const Value *elem;
for (elem = start; elem < end; elem++) {
uint32_t i;
for (i = 0; i < obj->getDenseInitializedLength(); ++i) {
if (!JS_CHECK_OPERATION_LIMIT(cx))
return false;
const Value *elem = &obj->getDenseElement(i);
/*
* Object stringifying is slow; delegate it to a separate loop to
* keep this one tight.
@ -953,7 +954,7 @@ array_join_sub(JSContext *cx, CallArgs &args, bool locale)
}
RootedValue v(cx);
for (uint32_t i = uint32_t(PointerRangeSize(start, elem)); i < length; i++) {
for (; i < length; ++i) {
if (!JS_CHECK_OPERATION_LIMIT(cx))
return false;