From 02216187623662255b08526470ab6fe4743749c8 Mon Sep 17 00:00:00 2001
From: wolfbeast <mcwerewolf@wolfbeast.com>
Date: Mon, 8 Jul 2019 02:17:07 +0200
Subject: [PATCH] Avoid type confusion in ArrayJoinDenseKernel

---
 js/src/jsarray.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/src/jsarray.cpp b/js/src/jsarray.cpp
index ec65bce64e..ff581beec5 100644
--- a/js/src/jsarray.cpp
+++ b/js/src/jsarray.cpp
@@ -1048,7 +1048,7 @@ struct StringSeparatorOp
 
 template <typename SeparatorOp>
 static bool
-ArrayJoinDenseKernel(JSContext* cx, SeparatorOp sepOp, HandleNativeObject obj, uint64_t length,
+ArrayJoinDenseKernel(JSContext* cx, SeparatorOp sepOp, HandleNativeObject obj, uint32_t length,
                      StringBuffer& sb, uint32_t* numProcessed)
 {
     // This loop handles all elements up to initializedLength. If