AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity

Fixed assertions when accessing the hidden properties dictionary.

Browse Source 
TBR=jkummerow@chromium.org

Review URL: https://chromiumcodereview.appspot.com/9360012

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@10627 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
This commit is contained in:
svenpanne@chromium.org 2012-02-08 07:23:14 +00:00
parent cc3c37ef61
commit 557fc46b62
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/objects.cc
View File

@ -3779,7 +3779,8 @@ MaybeObject* JSObject::GetHiddenPropertiesDictionary(bool create_if_absent) {
this->FastPropertyAt(descriptors->GetFieldIndex(0));
return StringDictionary::cast(hidden_store);
} else {
ASSERT(descriptors->GetType(0) == MAP_TRANSITION);
ASSERT(descriptors->GetType(0) == NULL_DESCRIPTOR ||
descriptors->GetType(0) == MAP_TRANSITION);
}
}
} else {
@ -3826,7 +3827,8 @@ MaybeObject* JSObject::SetHiddenPropertiesDictionary(
this->FastPropertyAtPut(descriptors->GetFieldIndex(0), dictionary);
return this;
} else {
ASSERT(descriptors->GetType(0) == MAP_TRANSITION);
ASSERT(descriptors->GetType(0) == NULL_DESCRIPTOR ||
descriptors->GetType(0) == MAP_TRANSITION);
}
}
}