Title: [143667] trunk/Source/_javascript_Core
- Revision
- 143667
- Author
- fpi...@apple.com
- Date
- 2013-02-21 16:55:40 -0800 (Thu, 21 Feb 2013)
Log Message
Object allocation profiling will refuse to create objects with more than JSFinalObject::maxInlineCapacity() inline slots, but JSFunction::allocationProfile() asserts that the number of inline slots is always what it asked for
https://bugs.webkit.org/show_bug.cgi?id=110519
<rdar://problem/13218566>
Reviewed by Geoffrey Garen.
* runtime/JSFunction.h:
(JSC::JSFunction::allocationProfile):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (143666 => 143667)
--- trunk/Source/_javascript_Core/ChangeLog 2013-02-22 00:55:28 UTC (rev 143666)
+++ trunk/Source/_javascript_Core/ChangeLog 2013-02-22 00:55:40 UTC (rev 143667)
@@ -1,3 +1,14 @@
+2013-02-21 Filip Pizlo <fpi...@apple.com>
+
+ Object allocation profiling will refuse to create objects with more than JSFinalObject::maxInlineCapacity() inline slots, but JSFunction::allocationProfile() asserts that the number of inline slots is always what it asked for
+ https://bugs.webkit.org/show_bug.cgi?id=110519
+ <rdar://problem/13218566>
+
+ Reviewed by Geoffrey Garen.
+
+ * runtime/JSFunction.h:
+ (JSC::JSFunction::allocationProfile):
+
2013-02-21 Roger Fong <roger_f...@apple.com>
Unreviewed. Build fix for VS2010 WebKit solution.
Modified: trunk/Source/_javascript_Core/runtime/JSFunction.h (143666 => 143667)
--- trunk/Source/_javascript_Core/runtime/JSFunction.h 2013-02-22 00:55:28 UTC (rev 143666)
+++ trunk/Source/_javascript_Core/runtime/JSFunction.h 2013-02-22 00:55:40 UTC (rev 143667)
@@ -136,7 +136,6 @@
{
if (UNLIKELY(m_allocationProfile.isNull()))
return createAllocationProfile(exec, inlineCapacity);
- ASSERT(inlineCapacity <= m_allocationProfile.structure()->inlineCapacity());
return &m_allocationProfile;
}
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
