1 files changed, 25 insertions, 0 deletions
diff --git a/gnu/packages/patches/icecat-CVE-2015-4513-pt05.patch b/gnu/packages/patches/icecat-CVE-2015-4513-pt05.patch
new file mode 100644
index 0000000000..b25f2231a7
--- /dev/null
+++ b/gnu/packages/patches/icecat-CVE-2015-4513-pt05.patch
@@ -0,0 +1,25 @@
+From d91a58cb0094d0421439a915be0b4879a45d20d4 Mon Sep 17 00:00:00 2001
+From: Brian Hackett <bhackett1024@gmail.com>
+Date: Mon, 12 Oct 2015 17:15:12 -0600
+Subject: [PATCH] Bug 1209471 - Fix group used for Array.concat result,
+ r=jandem. a=al
+
+---
+ js/src/jsarray.cpp | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/js/src/jsarray.cpp b/js/src/jsarray.cpp
+index 3d574d5..b4ff057 100644
+--- a/js/src/jsarray.cpp
++++ b/js/src/jsarray.cpp
+@@ -2661,6 +2661,7 @@ js::array_concat(JSContext* cx, unsigned argc, Value* vp)
+         narr = NewDenseEmptyArray(cx);
+         if (!narr)
+             return false;
++        TryReuseArrayGroup(aobj, narr);
+         args.rval().setObject(*narr);
+         length = 0;
+     }
+-- 
+2.5.0
+