Revision: 8946
Author: [email protected]
Date: Tue Aug 16 08:51:49 2011
Log: Fix potentially GC unsafe place in
JSObject::DeleteElementWithInterceptor.
Review URL: http://codereview.chromium.org/7660012
http://code.google.com/p/v8/source/detail?r=8946
Modified:
/branches/bleeding_edge/src/objects.cc
=======================================
--- /branches/bleeding_edge/src/objects.cc Fri Aug 12 07:52:03 2011
+++ /branches/bleeding_edge/src/objects.cc Tue Aug 16 08:51:49 2011
@@ -3167,9 +3167,10 @@
ASSERT(result->IsBoolean());
return *v8::Utils::OpenHandle(*result);
}
- MaybeObject* raw_result = GetElementsAccessor()->Delete(*this_handle,
- index,
- NORMAL_DELETION);
+ MaybeObject* raw_result = this_handle->GetElementsAccessor()->Delete(
+ *this_handle,
+ index,
+ NORMAL_DELETION);
RETURN_IF_SCHEDULED_EXCEPTION(isolate);
return raw_result;
}
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
