Bug 506894 - Crash - e4x/GC/regress-357063-01.js. r=gal

2009-07-28 12:19:00 -07:00
parent 7e12f04be2
commit 85219ebeb6
1 changed files with 6 additions and 2 deletions
--- a/js/src/jsxml.cpp
+++ b/js/src/jsxml.cpp
@@ -932,8 +932,12 @@ XMLArraySetCapacity(JSContext *cx, JSXMLArray *array, uint32 capacity)

    if (capacity == 0) {
        /* We could let realloc(p, 0) free this, but purify gets confused. */
-        if (array->vector)
+        if (array->vector) {
+            if (cx)
                cx->free(array->vector);
+            else
+                js_free(array->vector);
+        }
        vector = NULL;
    } else {
        if (