1510624 - StructuredClone array reader should initialize target array even in error cases

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect, P3)

Description

[Andy Wingo [:wingo]]

If there is an error when reading an array in StructuredClone, the tail of the target array may remain uninintialized.  This should be fixed.  See https://phabricator.services.mozilla.com/D10046?id=29106#inline-49460.

Comment 1

[Andy Wingo [:wingo]]

Attachment: Bug 1510624 - StructuredClone array reader should initialize target array even in error cases

Comment 2

[Andreea Pavel [:apavel]]

https://hg.mozilla.org/integration/autoland/rev/a419cfce1d7b

Comment 3

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/a419cfce1d7b