wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 1210596 - Mark array groups as not packed when initializing individual elements with holes, r=jandem.

Browse Source
This commit is contained in:
Brian Hackett 2015-10-05 10:18:05 -06:00
parent 7152b64191
commit 71956a7643
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
js/src/jit-test/tests/basic/bug1210596.js Normal file
View File

@ -0,0 +1,4 @@
var count = 0;
var a = Array.prototype.concat.call([], [, []], []);
a.forEach(function() { count++; });
assertEq(count, 1);

5
js/src/vm/NativeObject-inl.h
View File

@ -79,7 +79,10 @@ inline void
NativeObject::initDenseElementWithType(ExclusiveContext* cx, uint32_t index, const Value& val)
{
MOZ_ASSERT(!shouldConvertDoubleElements());
AddTypePropertyId(cx, this, JSID_VOID, val);
if (val.isMagic(JS_ELEMENTS_HOLE))
markDenseElementsNotPacked(cx);
else
AddTypePropertyId(cx, this, JSID_VOID, val);
initDenseElement(index, val);
}