Bug 462851 - Protect against enumerating the call object's prototype. r=brendan a=sayrer

This commit is contained in:
Blake Kaplan 2008-12-13 14:17:24 -08:00
parent 5200089bae
commit 87667890ab

View File

@ -714,7 +714,7 @@ call_enumerate(JSContext *cx, JSObject *obj)
JSProperty *prop; JSProperty *prop;
fun = js_GetCallObjectFunction(obj); fun = js_GetCallObjectFunction(obj);
n = JS_GET_LOCAL_NAME_COUNT(fun); n = fun ? JS_GET_LOCAL_NAME_COUNT(fun) : 0;
if (n == 0) if (n == 0)
return JS_TRUE; return JS_TRUE;