roytam1/basilisk55
1
0
Fork 0
mirror of https://github.com/roytam1/basilisk55.git synced 2026-06-23 08:58:42 +00:00
Code Issues Projects Releases Wiki Activity

cherry-picked mozilla upstream changes:

Browse Source 
bug1302340, bug1318792, bug1321502, bug1333631, bug1334047, bug1334281, bug1334590, bug1334972, bug1335619, bug1335654, bug1336044, bug1336098, bug1336229, bug1336349, bug1336481, bug1336899, bug1344443
This commit is contained in:
Roy Tam
2018-04-13 23:44:41 +08:00
parent 03af666853
commit ee7cd5f958
49 changed files with 660 additions and 170 deletions
Download Patch File Download Diff File Expand all files Collapse all files
js/src/jsarray.cpp
+1 -1
View File
@@ -2614,7 +2614,7 @@ js::array_splice_impl(JSContext* cx, unsigned argc, Value* vp, bool returnValueI
* path may validly *not* throw -- if all the elements being moved are
* holes.)
*/
if (obj->is<ArrayObject>()) {
if (obj->is<ArrayObject>() && !ObjectMayHaveExtraIndexedProperties(obj)) {
Rooted<ArrayObject*> arr(cx, &obj->as<ArrayObject>());
if (arr->lengthIsWritable()) {
DenseElementResult result =