1 files changed, 7 insertions, 4 deletions
diff --git a/js/src/vm/NativeObject-inl.h b/js/src/vm/NativeObject-inl.h
index 69976bc462..1fa5cbd10e 100644
--- a/js/src/vm/NativeObject-inl.h
+++ b/js/src/vm/NativeObject-inl.h
@@ -239,12 +239,15 @@ NativeObject::ensureDenseElements(ExclusiveContext* cx, uint32_t index, uint32_t
     return DenseElementResult::Success;
 }
 
-inline Value
-NativeObject::getDenseOrTypedArrayElement(uint32_t idx)
+template <AllowGC allowGC>
+inline bool
+NativeObject::getDenseOrTypedArrayElement(ExclusiveContext* cx, uint32_t idx,
+                                          typename MaybeRooted<Value, allowGC>::MutableHandleType val)
 {
     if (is<TypedArrayObject>())
-        return as<TypedArrayObject>().getElement(idx);
-    return getDenseElement(idx);
+        return as<TypedArrayObject>().getElement<allowGC>(cx, idx, val);
+    val.set(getDenseElement(idx));
+    return true;
 }
 
 /* static */ inline NativeObject*