Title: [137705] trunk/Source/_javascript_Core
- Revision
- 137705
- Author
- [email protected]
- Date
- 2012-12-13 20:19:09 -0800 (Thu, 13 Dec 2012)
Log Message
Don't assert that flags <= 0x3ff in JSTypeInfo
https://bugs.webkit.org/show_bug.cgi?id=104988
Reviewed by Sam Weinig.
This assertion doesn't accomplish anything other than crashes.
* runtime/JSTypeInfo.h:
(JSC::TypeInfo::TypeInfo):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (137704 => 137705)
--- trunk/Source/_javascript_Core/ChangeLog 2012-12-14 04:04:11 UTC (rev 137704)
+++ trunk/Source/_javascript_Core/ChangeLog 2012-12-14 04:19:09 UTC (rev 137705)
@@ -1,5 +1,17 @@
2012-12-13 Filip Pizlo <[email protected]>
+ Don't assert that flags <= 0x3ff in JSTypeInfo
+ https://bugs.webkit.org/show_bug.cgi?id=104988
+
+ Reviewed by Sam Weinig.
+
+ This assertion doesn't accomplish anything other than crashes.
+
+ * runtime/JSTypeInfo.h:
+ (JSC::TypeInfo::TypeInfo):
+
+2012-12-13 Filip Pizlo <[email protected]>
+
Named lookups on HTML documents produce inconsistent results in _javascript_Core bindings
https://bugs.webkit.org/show_bug.cgi?id=104623
Modified: trunk/Source/_javascript_Core/runtime/JSTypeInfo.h (137704 => 137705)
--- trunk/Source/_javascript_Core/runtime/JSTypeInfo.h 2012-12-14 04:04:11 UTC (rev 137704)
+++ trunk/Source/_javascript_Core/runtime/JSTypeInfo.h 2012-12-14 04:19:09 UTC (rev 137705)
@@ -55,7 +55,6 @@
, m_flags(flags & 0xff)
, m_flags2(flags >> 8)
{
- ASSERT(flags <= 0x3ff);
ASSERT(static_cast<int>(type) <= 0xff);
ASSERT(type >= CompoundType || !(flags & OverridesVisitChildren));
// No object that doesn't ImplementsHasInstance should override it!
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo/webkit-changes
