Bug 980450 - Always initialize outparams in LookupOwnPropertyWithFlagsInline, r=luke.

2014-03-07 09:36:24 -07:00
parent 989695b24d
commit b478815e1a
1 changed files with 3 additions and 0 deletions
--- a/js/src/jsobj.cpp
+++ b/js/src/jsobj.cpp
@@ -4007,6 +4007,9 @@ LookupOwnPropertyWithFlagsInline(ExclusiveContext *cx,
            if (index < obj->template as<TypedArrayObject>().length()) {
                objp.set(obj);
                MarkDenseOrTypedArrayElementFound<allowGC>(propp);
+            } else {
+                objp.set(nullptr);
+                propp.set(nullptr);
            }
            *donep = true;
            return true;