Bug 831658 - Handle multiple RegExpShareds in the same compartment. r=dvander

js/src/jit-test/tests/basic/bug831658.js

@@ -0,0 +1,4 @@
+// Don't assert.
+String.prototype.search = evalcx('').String.prototype.search
+x = /./.test()
+''.search(/()/)

js/src/vm/RegExpObject.cpp

@@ -652,8 +652,7 @@ RegExpCompartment::~RegExpCompartment()
      * RegExpStatics may have prevented a single RegExpShared from
      * being collected during RegExpCompartment::sweep().
      */
-    if (!inUse_.empty()) {
-        PendingSet::Enum e(inUse_);
+    for (PendingSet::Enum e(inUse_); !e.empty(); e.popFront()) {
         RegExpShared *shared = e.front();
         JS_ASSERT(shared->activeUseCount == 0);
         js_delete(shared);