Bug 1099440 - Make JS_TraceIncomingCCWs use MarkObjectUnbarriered instead of calling the tracer itself. r=terrence

js/src/gc/Tracer.cpp

@@ -139,13 +139,14 @@ JS_TraceIncomingCCWs(JSTracer *trc, const JS::ZoneSet &zones)
                 // zones multiple times, and don't hold a strong reference.
                 if (key.kind == CrossCompartmentKey::StringWrapper)
                     continue;
+                JSObject *obj = static_cast<JSObject *>(key.wrapped);
                 // Ignore CCWs whose wrapped value doesn't live in our given set
                 // of zones.
-                if (!zones.has(static_cast<JSObject *>(key.wrapped)->zone()))
+                if (!zones.has(obj->zone()))
                     continue;
 
-                void *thing = key.wrapped;
+                MarkObjectUnbarriered(trc, &obj, "cross-compartment wrapper");
-                trc->callback(trc, &thing, GetGCThingTraceKind(key.wrapped));
+                MOZ_ASSERT(obj == key.wrapped);
             }
         }
     }