Bug 1117240 - Check return value when creating type object in RegExpCompartment::createMatchResultTemp() r=bhackett

js/src/vm/RegExpObject.cpp

@@ -710,6 +710,8 @@ RegExpCompartment::createMatchResultTemplateObject(JSContext *cx)
     Rooted<TaggedProto> proto(cx, templateObject->getTaggedProto());
     types::TypeObject *type =
         cx->compartment()->types.newTypeObject(cx, templateObject->getClass(), proto);
+    if (!type)
+        return matchResultTemplateObject_; // = nullptr
     templateObject->setType(type);
 
     /* Set dummy index property */