Last Comment Bug 779015 - Typed Array Is*Array() throws.
: Typed Array Is*Array() throws.
Status: RESOLVED FIXED
:
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: unspecified
: x86 Mac OS X
: -- normal (vote)
: mozilla17
Assigned To: Eric Faust [:efaust]
:
Mentors:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-07-30 18:31 PDT by Eric Faust [:efaust]
Modified: 2012-08-01 02:51 PDT (History)
1 user (show)
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments
Fix (1.91 KB, patch)
2012-07-30 18:31 PDT, Eric Faust [:efaust]
bhackett1024: review+
Details | Diff | Splinter Review

Description Eric Faust [:efaust] 2012-07-30 18:31:18 PDT
Created attachment 647391 [details] [diff] [review]
Fix

The macro that generates JS_Is*Array() doesn't clear the exception from the unboxing the way that IsArrayObject() and IsArrayBufferViewObject() do. The caller is not expecting an exception to result from asking a question about the type of a thing.
Comment 2 Ed Morley [:emorley] 2012-08-01 02:51:45 PDT
https://hg.mozilla.org/mozilla-central/rev/64c45d6c350c

Note You need to log in before you can comment on or make changes to this bug.