mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
Bug 830049 - Don't crash when trying to attach caches for property sets on non-native objects, r=dvander.
This commit is contained in:
parent
c6adbf1b9c
commit
b2671ac3f3
@ -1435,6 +1435,9 @@ IsPropertySetterCallInlineable(JSContext *cx, HandleObject obj, HandleObject hol
|
||||
if (!shape)
|
||||
return false;
|
||||
|
||||
if (!holder->isNative())
|
||||
return false;
|
||||
|
||||
if (shape->hasSlot())
|
||||
return false;
|
||||
|
||||
|
10
js/src/jit-test/tests/basic/bug830049.js
Normal file
10
js/src/jit-test/tests/basic/bug830049.js
Normal file
@ -0,0 +1,10 @@
|
||||
// |jit-test| error: InternalError
|
||||
|
||||
p = Proxy.create({
|
||||
has: function() function r() s += ''
|
||||
})
|
||||
Object.prototype.__proto__ = p
|
||||
function TestCase(n) {
|
||||
this.name = n
|
||||
}
|
||||
new TestCase()
|
Loading…
Reference in New Issue
Block a user