Bug 989414 - Allocate Lamba objects in the nursery; r=jonco
☠☠ backed out by c8d9cc05d899 ☠ ☠
authorTerrence Cole <terrence@mozilla.com>
Fri, 02 May 2014 08:39:08 -0700
changeset 181764 8f4e9cf85af807633add95d9495ba1238a09bc59
parent 181763 db686f9cc96fdb60d3bec2431ef18c710548b24e
child 181765 3e7464b5820398ab78ff702ac728aeda8787ce56
push id272
push userpvanderbeken@mozilla.com
push dateMon, 05 May 2014 16:31:18 +0000
reviewersjonco
bugs989414
milestone32.0a1
Bug 989414 - Allocate Lamba objects in the nursery; r=jonco
js/src/vm/Interpreter.cpp
--- a/js/src/vm/Interpreter.cpp
+++ b/js/src/vm/Interpreter.cpp
@@ -3582,17 +3582,17 @@ js::GetScopeNameForTypeOf(JSContext *cx,
     return JSObject::getProperty(cx, obj, obj, name, vp);
 }
 
 JSObject *
 js::Lambda(JSContext *cx, HandleFunction fun, HandleObject parent)
 {
     MOZ_ASSERT(!fun->isArrow());
 
-    RootedObject clone(cx, CloneFunctionObjectIfNotSingleton(cx, fun, parent, TenuredObject));
+    RootedObject clone(cx, CloneFunctionObjectIfNotSingleton(cx, fun, parent));
     if (!clone)
         return nullptr;
 
     MOZ_ASSERT(clone->global() == clone->global());
     return clone;
 }
 
 JSObject *