Mark types for second value pushed by JSOP_CALLXMLNAME, bug 717252. r=dvander

This commit is contained in:
Brian Hackett 2012-01-13 17:45:11 -08:00
parent 9cecd65269
commit afa722933a

View File

@ -4064,8 +4064,11 @@ ScriptAnalysis::analyzeTypesBytecode(JSContext *cx, unsigned offset,
pushed[0].addType(cx, Type::UnknownType());
break;
case JSOP_XMLNAME:
case JSOP_CALLXMLNAME:
pushed[1].addType(cx, Type::UnknownType());
/* FALLTHROUGH */
case JSOP_XMLNAME:
pushed[0].addType(cx, Type::UnknownType());
break;