Closed
Bug 1150858
Opened 9 years ago
Closed 9 years ago
ArrayBufferObject::fun_transfer tries to unwrap nullptr
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
mozilla40
| Tracking | Status | |
|---|---|---|
| firefox40 | --- | fixed |
People
(Reporter: peterv, Assigned: luke)
References
Details
Attachments
(1 file)
|
2.11 KB,
patch
|
sfink
:
review+
|
Details | Diff | Splinter Review |
http://hg.mozilla.org/mozilla-central/annotate/70a113676b21/js/src/vm/ArrayBufferObject.cpp#l363 tries to unwrap |oldBuffer|, which hasn't been set to anything. It probably should unwrap |oldBufferObj|.
|
Assignee | |
Comment 1•9 years ago
|
||
D'oh, thanks!
|
||
Updated•9 years ago
|
Attachment #8587951 -
Flags: review?(sphink) → review+
|
|
Assignee | |
Comment 2•9 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/e45901374cd4
|
||
Comment 3•9 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/e45901374cd4
Status: ASSIGNED → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla40
You need to log in
before you can comment on or make changes to this bug.
Description
•