summaryrefslogtreecommitdiff
path: root/gnu/packages/patches/icecat-CVE-2015-4513-pt05.patch
blob: b25f2231a7b4a0077903dddb4fd9b23baf821885 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
From d91a58cb0094d0421439a915be0b4879a45d20d4 Mon Sep 17 00:00:00 2001
From: Brian Hackett <bhackett1024@gmail.com>
Date: Mon, 12 Oct 2015 17:15:12 -0600
Subject: [PATCH] Bug 1209471 - Fix group used for Array.concat result,
 r=jandem. a=al

---
 js/src/jsarray.cpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/js/src/jsarray.cpp b/js/src/jsarray.cpp
index 3d574d5..b4ff057 100644
--- a/js/src/jsarray.cpp
+++ b/js/src/jsarray.cpp
@@ -2661,6 +2661,7 @@ js::array_concat(JSContext* cx, unsigned argc, Value* vp)
         narr = NewDenseEmptyArray(cx);
         if (!narr)
             return false;
+        TryReuseArrayGroup(aobj, narr);
         args.rval().setObject(*narr);
         length = 0;
     }
-- 
2.5.0