Bug 556830 followup to fix debug bustage
authorBoris Zbarsky <bzbarsky@mit.edu>
Mon, 26 Apr 2010 11:15:33 -0400
changeset 41776 15091841f59e207444a76793d1e28c775674c7d3
parent 41775 259971053e0b3289cd91516963341d5a9f3a6715
child 41777 04b98e71bc55ab557c4d92e335aec70a1184f470
push idunknown
push userunknown
push dateunknown
bugs556830
milestone1.9.3a5pre
Bug 556830 followup to fix debug bustage
js/src/jsobj.cpp
--- a/js/src/jsobj.cpp
+++ b/js/src/jsobj.cpp
@@ -4957,17 +4957,18 @@ js_SetPropertyHelper(JSContext *cx, JSOb
     JSScopeProperty *sprop;
     JSScope *scope;
     uintN attrs, flags;
     intN shortid;
     JSClass *clasp;
     JSPropertyOp getter, setter;
     bool added;
 
-    JS_ASSERT((defineHow & ~(JSDNP_CACHE_RESULT | JSDNP_SET_METHOD)) == 0);
+    JS_ASSERT((defineHow &
+               ~(JSDNP_CACHE_RESULT | JSDNP_SET_METHOD | JSDNP_UNQUALIFIED)) == 0);
     if (defineHow & JSDNP_CACHE_RESULT)
         JS_ASSERT_NOT_ON_TRACE(cx);
 
     /* Convert string indices to integers if appropriate. */
     id = js_CheckForStringIndex(id);
 
     /*
      * We peek at obj->scope() without locking obj. Any race means a failure