Bug 1153498 - Use RelocatablePtr in RegExpShared since these can be destroyed outside of the GC r=terrence

js/src/jit-test/tests/gc/bug-1153498.js

@@ -0,0 +1,10 @@
+// |jit-test| allow-oom; allow-unhandlable-oom
+if (!("oomAfterAllocations" in this && "gczeal" in this))
+    quit();
+gczeal(0);
+"".search(function() {});
+r = /x/;
+x = [/y/];
+oomAfterAllocations(5);
+x.v = function() {};
+a = /z/;

js/src/vm/RegExpObject.h

@@ -119,7 +119,7 @@ class RegExpShared
 
     struct RegExpCompilation
     {
-        HeapPtrJitCode jitCode;
+        RelocatablePtrJitCode jitCode;
         uint8_t* byteCode;
 
         RegExpCompilation() : byteCode(nullptr) {}
@@ -131,7 +131,7 @@ class RegExpShared
     };
 
     /* Source to the RegExp, for lazy compilation. */
-    HeapPtrAtom        source;
+    RelocatablePtrAtom source;
 
     RegExpFlag         flags;
     size_t             parenCount;