Bug 607196 - Remove bogus atom assertion in JSOP_DOUBLE (r=lw)
authorBill McCloskey <wmccloskey@mozilla.com>
Sun, 31 Oct 2010 10:38:06 -0700
changeset 57670 7af31ff1e9f532afa4244cd552f36f3fbc0f40b8
parent 57669 def6608b28719a96a70355f57660989fa33b87e6
child 57671 85ea6b284b3058ed7f76416dc221565d006ceae0
push id17032
push userrsayre@mozilla.com
push dateWed, 17 Nov 2010 21:55:39 +0000
treeherdermozilla-central@78a42f77bb90 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerslw
bugs607196
milestone2.0b8pre
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 607196 - Remove bogus atom assertion in JSOP_DOUBLE (r=lw)
js/src/jsinterp.cpp
--- a/js/src/jsinterp.cpp
+++ b/js/src/jsinterp.cpp
@@ -4914,17 +4914,16 @@ END_CASE(JSOP_INDEXBASE3)
 BEGIN_CASE(JSOP_RESETBASE0)
 BEGIN_CASE(JSOP_RESETBASE)
     atoms = script->atomMap.vector;
 END_CASE(JSOP_RESETBASE)
 
 BEGIN_CASE(JSOP_DOUBLE)
 {
     JS_ASSERT(!regs.fp->hasImacropc());
-    JS_ASSERT(size_t(atoms - script->atomMap.vector) <= script->atomMap.length);
     double dbl;
     LOAD_DOUBLE(0, dbl);
     PUSH_DOUBLE(dbl);
 }
 END_CASE(JSOP_DOUBLE)
 
 BEGIN_CASE(JSOP_STRING)
 {