Bug 790338 - Sweep debugger objects in the same group as their debugees r=billm

2012-10-16 12:28:32 +01:00
parent 21c0e8f767
commit b41cf40a30
5 changed files with 177 additions and 36 deletions
--- a/js/src/jsweakmap.cpp
+++ b/js/src/jsweakmap.cpp
@@ -247,6 +247,8 @@ WeakMap_set_impl(JSContext *cx, CallArgs args)
        }
    }

+    JS_ASSERT(key->compartment() == thisObj->compartment());
+    JS_ASSERT_IF(value.isObject(), value.toObject().compartment() == thisObj->compartment());
    if (!map->put(key, value)) {
        JS_ReportOutOfMemory(cx);
        return false;