Bug 604971 - array.sort compare-function gets incorrect this. r=jwalden

2010-10-18 12:24:23 -07:00
parent 63e489b0f1
commit 0e486fd5ec
3 changed files with 25 additions and 1 deletions
--- a/js/src/jsarray.cpp
+++ b/js/src/jsarray.cpp
@@ -1905,7 +1905,7 @@ js::array_sort(JSContext *cx, uintN argc, Value *vp)
            }
        } else {
            CompareArgs ca(cx);
-            if (!ca.session.start(cx, fval, NullValue(), 2))
+            if (!ca.session.start(cx, fval, UndefinedValue(), 2))
                return false;

            if (!js_MergeSort(vec, size_t(newlen), sizeof(Value),