Bug 1067344 - content process crash in nsXPCWrappedJS::CanSkip(), r=mccr8

--HG--
extra : rebase_source : 687813170d30e3763de9917bccdb4c58df576d61
This commit is contained in:
Olli Pettay 2014-09-15 19:26:20 +03:00
parent dd2a56d042
commit 97cfe7e60e

View File

@ -70,8 +70,11 @@ nsXPCWrappedJS::CanSkip()
// For non-root wrappers, check if the root wrapper will be
// added to the CC graph.
if (!IsRootWrapper())
if (!IsRootWrapper()) {
// mRoot points to null after unlinking.
NS_ENSURE_TRUE(mRoot, false);
return mRoot->CanSkip();
}
// For the root wrapper, check if there is an aggregated
// native object that will be added to the CC graph.