Closed Bug 790724 Opened 13 years ago Closed 13 years ago

[Workers] DOMException::Create

Categories

(Core :: DOM: Workers, defect)

Product:
Core
Component:
DOM: Workers
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: timeless, Unassigned)

References

(
URL
)

Details

(Keywords: csectype-oom)

217 DOMException::Create(JSContext* aCx, nsresult aNSResult) 233 JSString* jsname = JS_NewStringCopyZ(aCx, name); this isn't rooted yet 238 JSString* jsmessage = JS_NewStringCopyZ(aCx, message); this triggers a GC 244 JS_SetReservedSlot(obj, SLOT_name, STRING_TO_JSVAL(jsname)); this roots name, which is unfortunately way too late.
The stack scanner should see this, right?
This is handled by the stack scanner.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WORKSFORME
Group: core-security
You need to log in before you can comment on or make changes to this bug.