Bug 994876 followup - Fix assert.
authorJan de Mooij <jdemooij@mozilla.com>
Tue, 15 Apr 2014 18:13:49 +0200
changeset 197148 c3878c9f598dc2b794f2ae6023053225d31b629b
parent 197147 ed50327aae73fee29da32ffb5bb11ea51a27579d
child 197149 3486a7a210a1164e8a64e1a344e9a97da8362ab1
push id3624
push userasasaki@mozilla.com
push dateMon, 09 Jun 2014 21:49:01 +0000
treeherdermozilla-beta@b1a5da15899a [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
bugs994876
milestone31.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 994876 followup - Fix assert.
js/src/jit/BaselineIC.h
--- a/js/src/jit/BaselineIC.h
+++ b/js/src/jit/BaselineIC.h
@@ -3550,17 +3550,17 @@ class ICSetElem_DenseAdd : public ICUpda
     static size_t offsetOfType() {
         return offsetof(ICSetElem_DenseAdd, type_);
     }
 
     HeapPtrTypeObject &type() {
         return type_;
     }
     size_t protoChainDepth() const {
-        MOZ_ASSERT(extra_ < MAX_PROTO_CHAIN_DEPTH);
+        MOZ_ASSERT(extra_ <= MAX_PROTO_CHAIN_DEPTH);
         return extra_;
     }
 
     template <size_t ProtoChainDepth>
     ICSetElem_DenseAddImpl<ProtoChainDepth> *toImplUnchecked() {
         return static_cast<ICSetElem_DenseAddImpl<ProtoChainDepth> *>(this);
     }