corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[INFER] Stronger type-correctness assertions when setting or getting properties, bug 619693.

Browse Source
This commit is contained in:
Brian Hackett
2011-03-06 15:35:09 -08:00
parent 61af7482a6
commit ca3296da88
9 changed files with 134 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
js/src/jsarray.cpp
View File

@@ -2614,7 +2614,7 @@ array_concat(JSContext *cx, uintN argc, Value *vp)
nobj->setType(ntype);
if (!nobj->setArrayLength(cx, length))
return JS_FALSE;
if (!InitArrayTypes(cx, ntype, vector, length))
if (!InitArrayTypes(cx, ntype, vector, initlen))
return JS_FALSE;
if (!aobj->isPackedDenseArray() && !nobj->setDenseArrayNotPacked(cx))
return JS_FALSE;