Runtime assert added to %NormalizeElements.
authorishell@chromium.org <ishell@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 4 Aug 2014 11:00:19 +0000 (11:00 +0000)
committerishell@chromium.org <ishell@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 4 Aug 2014 11:00:19 +0000 (11:00 +0000)
BUG=399654
LOG=N
R=danno@chromium.org

Review URL: https://codereview.chromium.org/423073007

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@22809 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

src/runtime.cc

index aa5d94b..28e1340 100644 (file)
@@ -15092,6 +15092,8 @@ RUNTIME_FUNCTION(Runtime_NormalizeElements) {
   HandleScope scope(isolate);
   ASSERT(args.length() == 1);
   CONVERT_ARG_HANDLE_CHECKED(JSObject, array, 0);
+  RUNTIME_ASSERT(!array->HasExternalArrayElements() &&
+                 !array->HasFixedTypedArrayElements());
   JSObject::NormalizeElements(array);
   return *array;
 }