From 827b32999560f611c7cd196eeb24c8ba183e97a9 Mon Sep 17 00:00:00 2001
From: Andreas Gal <gal@mozilla.com>
Date: Mon, 24 May 2010 14:16:58 -0700
Subject: [PATCH] Abort recording if js_FindIdentifierBase fails (567580,
 r=brendan).

---
 js/src/jstracer.cpp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/js/src/jstracer.cpp b/js/src/jstracer.cpp
index 7aac6fd87a8..37e6ec30398 100644
--- a/js/src/jstracer.cpp
+++ b/js/src/jstracer.cpp
@@ -13946,6 +13946,8 @@ TraceRecorder::record_JSOP_BINDNAME()
     JSAtom *atom = atoms[GET_INDEX(cx->regs->pc)];
     jsid id = ATOM_TO_JSID(atom);
     JSObject *obj2 = js_FindIdentifierBase(cx, fp->scopeChain, id);
+    if (!obj2)
+        RETURN_ERROR_A("error in js_FindIdentifierBase");
     if (obj2 != globalObj && obj2->getClass() != &js_CallClass)
         RETURN_STOP_A("BINDNAME on non-global, non-call object");