[JAEGER] Merge from fatval.
authorDavid Anderson <danderson@mozilla.com>
Tue, 25 May 2010 14:39:12 -0700
changeset 52577 bbf7aa3a8906c132e4ef31f57174f116530728c3
parent 52575 cf409e84dbe2d9bffbddc2f0551b04072dfc0696 (current diff)
parent 52576 df551707b3e01a17815eaf5304001df12c8eac69 (diff)
child 52578 60195c70e78503bdc130f8c91aaebbf22581f2cb
push idunknown
push userunknown
push dateunknown
milestone1.9.3a5pre
[JAEGER] Merge from fatval.
--- a/js/src/jsarray.cpp
+++ b/js/src/jsarray.cpp
@@ -1639,17 +1639,17 @@ array_reverse(JSContext *cx, uintN argc,
         if (!JS_CHECK_OPERATION_LIMIT(cx) ||
             !GetArrayElement(cx, obj, i, &hole, tvr.addr()) ||
             !GetArrayElement(cx, obj, len - i - 1, &hole2, vp) ||
             !SetOrDeleteArrayElement(cx, obj, len - i - 1, hole, tvr.value()) ||
             !SetOrDeleteArrayElement(cx, obj, i, hole2, *vp)) {
             return false;
         }
     }
-    JS_ASSERT(obj == &vp->asObject());
+    vp->setObject(*obj);
     return true;
 }
 
 typedef struct MSortArgs {
     size_t       elsize;
     JSComparator cmp;
     void         *arg;
     JSBool       isValue;