Fix crash when running with aggressive gc

The CallData is allocated on the JS stack explicitly uninitialized. So
it's important to initialize all fields (including the new newTarget) to
avoid dangling pointers.

Task-number: QTBUG-70205
Change-Id: Id3511fa5e32a75b3cb16f39cc0805dc2ebf42f71
Reviewed-by: Lars Knoll <lars.knoll@qt.io>

1 files changed, 1 insertions, 0 deletions

diff --git a/src/qml/jsruntime/qv4jscall_p.h b/src/qml/jsruntime/qv4jscall_p.h
index 55cedf50aa..31689b1ba1 100644
--- a/src/qml/jsruntime/qv4jscall_p.h
+++ b/src/qml/jsruntime/qv4jscall_p.h
@@ -86,6 +86,7 @@ struct JSCallData {
         ptr->context = Encode::undefined();
         ptr->accumulator = Encode::undefined();
         ptr->thisObject = thisObject->asReturnedValue();
+        ptr->newTarget = Encode::undefined();
         ptr->setArgc(argc);
         if (argc)
             memcpy(ptr->args, args, argc*sizeof(Value));