Bug 761439 - Make IndirectProxyHandler::nativeCall indirect (r=sfink)

--HG--
extra : rebase_source : 453c3b3711c71a75243d65e4646cfd8e02a60131

js/src/jit-test/tests/basic/testBug761439.js

@@ -0,0 +1,5 @@
+var b = new ArrayBuffer(4);
+var dv = new DataView(b);
+dv.setInt32(0, 42);
+var w = wrap(dv);
+assertEq(DataView.prototype.getInt32.call(w, 0), 42);

js/src/jsproxy.cpp

@@ -459,6 +459,7 @@ bool
 IndirectProxyHandler::nativeCall(JSContext *cx, JSObject *proxy, Class *clasp,
                                  Native native, CallArgs args)
 {
+    args.thisv() = ObjectValue(*GetProxyTargetObject(proxy));
     return CallJSNative(cx, native, args);
 }
 

js/src/jswrapper.cpp

@@ -706,7 +706,7 @@ CrossCompartmentWrapper::nativeCall(JSContext *cx, JSObject *wrapper, Class *cla
             return false;
     }
 
-    if (!DirectWrapper::nativeCall(cx, wrapper, clasp, native, dstArgs))
+    if (!CallJSNative(cx, native, dstArgs))
         return false;
 
     srcArgs.rval() = dstArgs.rval();