From 69e8060636ba5d50244f00580bc2e21522ecf9e1 Mon Sep 17 00:00:00 2001 From: "ager@chromium.org" Date: Thu, 30 Oct 2008 11:38:22 +0000 Subject: [PATCH] Move assertion that might cause garbage collections to before extracting raw pointers. Review URL: http://codereview.chromium.org/8913 git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@654 ce2b1a6d-e550-0410-aec6-3dcde31c8c00 --- src/runtime.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/runtime.cc b/src/runtime.cc index cb5c5384d..8459af16b 100644 --- a/src/runtime.cc +++ b/src/runtime.cc @@ -3439,8 +3439,8 @@ static ObjectPair LoadContextSlotHelper(Arguments args, bool throw_error) { // If the holder is found, we read the property from it. if (!holder.is_null() && holder->IsJSObject()) { + ASSERT(Handle::cast(holder)->HasProperty(*name)); JSObject* object = JSObject::cast(*holder); - ASSERT(object->HasProperty(*name)); JSObject* receiver = (object->IsGlobalObject()) ? GlobalObject::cast(object)->global_receiver() : ComputeReceiverForNonGlobal(object); -- 2.34.1