ug 490741 - Crash [@ js_GetUpvar] on datepick (r=mrbkap).
authorBrendan Eich <brendan@mozilla.org>
Fri, 01 May 2009 18:55:26 -0700
changeset 28004 3bdc174e297bb250bb82d852fadbfbe79a8200e8
parent 28003 f474676a65df5d1e319d4af4608f11fef19594da
child 28005 c7515a091bff3ad12e7fa6d0fb96ac83c2776171
push id6839
push userrsayre@mozilla.com
push dateTue, 05 May 2009 18:41:02 +0000
treeherdermozilla-central@3065dcc6f64e [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersmrbkap
bugs490741
milestone1.9.2a1pre
ug 490741 - Crash [@ js_GetUpvar] on datepick (r=mrbkap).
js/src/jsparse.cpp
--- a/js/src/jsparse.cpp
+++ b/js/src/jsparse.cpp
@@ -1710,16 +1710,17 @@ FindFunArgs(JSFunctionBox *funbox, int l
                 JSAtomListElement *ale;
 
                 while ((ale = iter()) != NULL) {
                     JSDefinition *lexdep = ALE_DEFN(ale)->resolve();
 
                     if (!lexdep->isFreeVar() && int(lexdep->frameLevel()) <= fnlevel) {
                         fn->setFunArg();
                         queue->push(funbox);
+                        fnlevel = int(funbox->level);
                         break;
                     }
                 }
             }
         }
 
         if (funbox->kids)
             FindFunArgs(funbox->kids, fnlevel, queue);