From 546747b78513a09a973a266ae4f0d4a8d3713761 Mon Sep 17 00:00:00 2001
From: Bill McCloskey <wmccloskey@mozilla.com>
Date: Wed, 5 Nov 2014 17:52:38 -0800
Subject: [PATCH] Bug 1091964 - Avoid spurious rooting hazard on a CLOSED TREE

---
 js/ipc/WrapperOwner.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/js/ipc/WrapperOwner.cpp b/js/ipc/WrapperOwner.cpp
index bb377fea64f3..f67a8d435958 100644
--- a/js/ipc/WrapperOwner.cpp
+++ b/js/ipc/WrapperOwner.cpp
@@ -711,9 +711,10 @@ WrapperOwner::regexp_toShared(JSContext *cx, HandleObject proxy, RegExpGuard *g)
 void
 CPOWProxyHandler::finalize(JSFreeOp *fop, JSObject *proxy) const
 {
+    AuxCPOWData *aux = AuxCPOWDataOf(proxy);
+
     OwnerOf(proxy)->drop(proxy);
 
-    AuxCPOWData *aux = AuxCPOWDataOf(proxy);
     if (aux)
         delete aux;
 }