wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 1105232 - Fix race condition updating copy-on-write array owner pointer in compacting GC r=terrence

Browse Source
This commit is contained in:
Jon Coppeard 2014-12-01 06:05:41 -08:00
parent 3665e05348
commit a32fe4c0ad
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
js/src/jsobj.cpp
View File

@ -2769,8 +2769,7 @@ JSObject::fixupAfterMovingGC()
ObjectElements *header = as<NativeObject>().getElementsHeader();
if (header->isCopyOnWrite()) {
HeapPtrNativeObject &owner = header->ownerObject();
if (IsForwarded(owner.get()))
owner = Forwarded(owner.get());
owner = MaybeForwarded(owner.get());
as<NativeObject>().elements_ = owner->getElementsHeader()->elements();
}
}