Title: [229570] trunk/Source/_javascript_Core
Revision
229570
Author
[email protected]
Date
2018-03-12 20:04:25 -0700 (Mon, 12 Mar 2018)

Log Message

Unreviewed, fix obsolete ASSERT
https://bugs.webkit.org/show_bug.cgi?id=183310

Now NewObject can be conereted from CallObjectConstructor and CreateThis.

* dfg/DFGNode.h:
(JSC::DFG::Node::convertToNewObject):

Modified Paths

Diff

Modified: trunk/Source/_javascript_Core/ChangeLog (229569 => 229570)


--- trunk/Source/_javascript_Core/ChangeLog	2018-03-13 02:05:56 UTC (rev 229569)
+++ trunk/Source/_javascript_Core/ChangeLog	2018-03-13 03:04:25 UTC (rev 229570)
@@ -1,3 +1,13 @@
+2018-03-12  Yusuke Suzuki  <[email protected]>
+
+        Unreviewed, fix obsolete ASSERT
+        https://bugs.webkit.org/show_bug.cgi?id=183310
+
+        Now NewObject can be conereted from CallObjectConstructor and CreateThis.
+
+        * dfg/DFGNode.h:
+        (JSC::DFG::Node::convertToNewObject):
+
 2018-03-12  Tim Horton  <[email protected]>
 
         Stop using SDK conditionals to control feature definitions

Modified: trunk/Source/_javascript_Core/dfg/DFGNode.h (229569 => 229570)


--- trunk/Source/_javascript_Core/dfg/DFGNode.h	2018-03-13 02:05:56 UTC (rev 229569)
+++ trunk/Source/_javascript_Core/dfg/DFGNode.h	2018-03-13 03:04:25 UTC (rev 229570)
@@ -726,7 +726,7 @@
 
     void convertToNewObject(RegisteredStructure structure)
     {
-        ASSERT(m_op == CallObjectConstructor);
+        ASSERT(m_op == CallObjectConstructor || m_op == CreateThis);
         setOpAndDefaultFlags(NewObject);
         children.reset();
         m_opInfo = structure;
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to