shithub: libmujs

Info  •  Files  •  Log  •  Branches

Fix 699383: Sorting arrays with zero or negative length.

--- a/jsarray.c

+++ b/jsarray.c

@@ -291,6 +291,10 @@

 	int i, n, len;

 	len = js_getlength(J, 0);

+	if (len <= 0) {

+		js_copy(J, 0);

+		return;

+	}

 	array = js_malloc(J, len * sizeof *array);

 	if (js_try(J)) {