Bug 1138676 - Watch for groups with lazy protos in PropertyReadNeedsTypeBarrier, r=jandem.

This commit is contained in:
Brian Hackett 2015-03-03 06:19:37 -06:00
parent 766eba80ee
commit 84f64a2290

View File

@ -4588,7 +4588,7 @@ jit::PropertyReadNeedsTypeBarrier(JSContext *propertycx,
if (key->isSingleton())
obj = key->singleton();
else
obj = key->proto().toObjectOrNull();
obj = key->proto().isLazy() ? nullptr : key->proto().toObjectOrNull();
while (obj) {
if (!obj->getClass()->isNative())