nagai/fune
3
0
Fork 0
forked from mirrors/gecko-dev
Code Pull requests Activity

Bug 1843824: Handle dead wrappers. r=iain

Browse source 
Differential Revision: https://phabricator.services.mozilla.com/D183714
This commit is contained in:
André Bargull 2023-08-21 08:32:10 +00:00
parent a412242182
commit 9a309c9c2a
1 changed files with 5 additions and 1 deletions
repo.diff.show_diff_stats Download patch file Download diff file Expand all files Collapse all files

6
js/src/builtin/Promise.cpp
View file

@ -568,7 +568,11 @@ JSObject* PromiseObject::allocationSite() {
JSObject* PromiseObject::resolutionSite() {
auto debugInfo = PromiseDebugInfo::FromPromise(this);
if (debugInfo) {
return debugInfo->resolutionSite();
JSObject* site = debugInfo->resolutionSite();
if (site && !JS_IsDeadWrapper(site)) {
MOZ_ASSERT(UncheckedUnwrap(site)->is<SavedFrame>());
return site;
}
}
return nullptr;
}