From ae8c4618b76fd544e7190ae85333dbe60a5a2e99 Mon Sep 17 00:00:00 2001 From: davidot Date: Wed, 7 Jul 2021 14:21:57 +0200 Subject: [PATCH] LibJS: Use as_object instead of as_array in flatten_into_array Since is_array does not guarantee that it is we must use as_object here. --- Userland/Libraries/LibJS/Runtime/ArrayPrototype.cpp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Userland/Libraries/LibJS/Runtime/ArrayPrototype.cpp b/Userland/Libraries/LibJS/Runtime/ArrayPrototype.cpp index 62c6075bee..5fe1fa7847 100644 --- a/Userland/Libraries/LibJS/Runtime/ArrayPrototype.cpp +++ b/Userland/Libraries/LibJS/Runtime/ArrayPrototype.cpp @@ -1845,10 +1845,10 @@ static size_t flatten_into_array(GlobalObject& global_object, Object& new_array, } if (depth > 0 && value.is_array(global_object)) { - auto length = length_of_array_like(global_object, value.as_array()); + auto length = length_of_array_like(global_object, value.as_object()); if (vm.exception()) return {}; - target_index = flatten_into_array(global_object, new_array, value.as_array(), length, target_index, depth - 1); + target_index = flatten_into_array(global_object, new_array, value.as_object(), length, target_index, depth - 1); if (vm.exception()) return {}; continue;