903519 - Strings in the nursery: barriers

Cell.h was missed after headers split to nursery support. Third crash.
This commit is contained in:
win7-7 2026-01-16 00:03:21 +02:00 committed by wuggy
commit 2f815b1d5b

View file

@ -246,7 +246,11 @@ Cell::storeBuffer() const
inline JS::TraceKind
Cell::getTraceKind() const
{
return isTenured() ? asTenured().getTraceKind() : JS::TraceKind::Object;
if (isTenured())
return asTenured().getTraceKind();
if (js::shadow::String::nurseryCellIsString(this))
return JS::TraceKind::String;
return JS::TraceKind::Object;
}
/* static */ MOZ_ALWAYS_INLINE bool