Closed Bug 1017417 Opened 11 years ago Closed 11 years ago

Handlify nsTArrayToJSArray

Categories

(Core :: JavaScript: GC, defect)

Product:
Core
Component:
JavaScript: GC
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1017419

People

(Reporter: sfink, Assigned: sfink)

References

Details

This is the one and only semi-valid rooting hazard I see on b2g: Function 'uint8 GetDevicesTask::ParseSuccessfulReply(class JS::MutableHandle<JS::Value>)' has unrooted 'JsDevices' of type 'JSObject*' live across GC call 'uint32 nsTArrayToJSArray(JSContext*, class nsTArray<nsRefPtr<mozilla::dom::bluetooth::BluetoothDevice> >*, JSObject**) [with T = nsRefPtr<mozilla::dom::bluetooth::BluetoothDevice>; nsresult = tag_nsresult]' at dom/bluetooth/BluetoothAdapter.cpp:107 dom/bluetooth/BluetoothAdapter.cpp:108: Assume(44,45, null(JsDevices*), true) GC Function: _Z17nsTArrayToJSArrayI8nsRefPtrIN7mozilla3dom9bluetooth15BluetoothDeviceEEE12tag_nsresultP9JSContextRK8nsTArrayIT_EPP8JSObject|uint32 nsTArrayToJSArray(JSContext*, class nsTArray<nsRefPtr<mozilla::dom::bluetooth::BluetoothDevice> >*, JSObject**) [with T = nsRefPtr<mozilla::dom::bluetooth::BluetoothDevice>; nsresult = tag_nsresult] FieldCall: mozilla::dom::bluetooth::BluetoothDevice.QueryInterface
Blocks: ExactRootingB2G
Status: ASSIGNED → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.