wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Fix misuse of shape->slot(), bug 703818.

Browse Source
This commit is contained in:
Brian Hackett 2011-11-22 17:44:26 -05:00
parent 74b1236011
commit c26fc2aa88
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
js/src/jit-test/tests/basic/bug703818.js Normal file
View File

@ -0,0 +1,3 @@
Object.defineProperty(Namespace.prototype, "toString", {
enumerable: true
})

2
js/src/jsscope.cpp
View File

@ -400,7 +400,7 @@ JSObject::getChildProperty(JSContext *cx, Shape *parent, Shape &child)
/* Slots can only be allocated out of order on objects in dictionary mode. */
JS_ASSERT(inDictionaryMode() ||
parent->hasMissingSlot() ||
child.slot() == parent->slot() + 1);
child.slot() == parent->maybeSlot() + 1);
}
}