LibJS: Protect execution context variable environments from GC

At the moment these environments are always the same as the lexical
ones, so this didn't cause any trouble. Once we start separating them
we have to make sure both environments are protected.

1 files changed, 1 insertions, 0 deletions

diff --git a/Userland/Libraries/LibJS/Runtime/VM.cpp b/Userland/Libraries/LibJS/Runtime/VM.cpp
index 4a032b732f..cd6fd9f65c 100644
--- a/Userland/Libraries/LibJS/Runtime/VM.cpp
+++ b/Userland/Libraries/LibJS/Runtime/VM.cpp
@@ -106,6 +106,7 @@ void VM::gather_roots(HashTable<Cell*>& roots)
                 roots.set(&argument.as_cell());
         }
         roots.set(execution_context->lexical_environment);
+        roots.set(execution_context->variable_environment);
     }
 
 #define __JS_ENUMERATE(SymbolName, snake_name) \