R=erik.corry@gmail.com
TEST=mjsunit/array-elements-from-array-prototype-chain
Review URL: http://codereview.chromium.org/8572004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@9996
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
// This method depends on non writability of Object and Array prototype
// fields.
if (array_proto->elements() != heap->empty_fixed_array()) return false;
- // Hidden prototype
- array_proto = JSObject::cast(array_proto->GetPrototype());
- ASSERT(array_proto->elements() == heap->empty_fixed_array());
// Object.prototype
Object* proto = array_proto->GetPrototype();
if (proto == heap->null_value()) return false;