Bug 435226 - dense arrays yield bogus __count__ values, r=shaver

This commit is contained in:
2008-06-09 15:25:33 -07:00
parent 931d5f9ba3
commit 4b16055ad7

View File

@@ -912,8 +912,8 @@ array_enumerate(JSContext *cx, JSObject *obj, JSIterateOp enum_op,
case JSENUMERATE_INIT:
JS_ASSERT(OBJ_IS_DENSE_ARRAY(cx, obj));
length = ARRAY_DENSE_LENGTH(obj);
if (idp && !IndexToId(cx, length, idp))
return JS_FALSE;
if (idp)
*idp = INT_TO_JSVAL(obj->fslots[JSSLOT_ARRAY_COUNT]);
ii = NULL;
for (i = 0; i != length; ++i) {
if (obj->dslots[i] == JSVAL_HOLE) {