Bug 382631 Creating proxy of "this" in JavaScript using nsProxyObjectManager::GetProxyForObject causes random memory rewrite

r=dougt a=beltzner


git-svn-id: svn://10.0.0.236/trunk@250571 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
timeless%mozdev.org 2008-04-21 18:57:14 +00:00
parent 3dbb585106
commit b8ed7591cc

View File

@ -154,7 +154,8 @@ nsProxyEventObject::convertMiniVariantToVariant(const XPTMethodDescriptor *metho
for (int i = 0; i < paramCount; i++)
{
const nsXPTParamInfo& paramInfo = methodInfo->params[i];
if ((GetProxyType() & NS_PROXY_ASYNC) && paramInfo.IsDipper())
if ((GetProxyType() & NS_PROXY_ASYNC) &&
(paramInfo.IsOut() || paramInfo.IsDipper()))
{
NS_WARNING("Async proxying of out parameters is not supported");
free(*fullParam);