Bug 505494 - Unwrap invisible wrappers when they're passed to Function.prototype.apply. r=mrbkap

js/src/jsarray.cpp

@@ -581,7 +581,7 @@ js_IsArrayLike(JSContext *cx, JSObject *obj, JSBool *answerp, jsuint *lengthp)
 {
     JSClass *clasp;
 
-    clasp = OBJ_GET_CLASS(cx, obj);
+    clasp = OBJ_GET_CLASS(cx, js_GetWrappedObject(cx, obj));
     *answerp = (clasp == &js_ArgumentsClass || clasp == &js_ArrayClass ||
                 clasp == &js_SlowArrayClass);
     if (!*answerp) {

js/src/xpconnect/tests/mochitest/test_wrappers.html

@@ -111,6 +111,15 @@
     is(XPCSafeJSObjectWrapper.prototype + '',
        "[object XPCSafeJSObjectWrapper]",
        "able to convert XPCSafeJSObjectWrapper.prototype to string");
+
+    try {
+        is((function(x) { return x+1; }).apply(this,
+                                               XPCSafeJSObjectWrapper([1])),
+           2);
+    } catch (e) {
+        ok(false,
+           "Unable to call apply() with a XPCSafeJSObjectWrapped array");
+    }
     </script>
 </body>
 </html>