From a3853feed290878411288cfffd4870e36a10561c Mon Sep 17 00:00:00 2001 From: "fschneider@chromium.org" Date: Tue, 24 May 2011 08:38:42 +0000 Subject: [PATCH] Remove wrong assert to fix a debug crash with arguments object. We don't need to assert the existence of a length-property of the arguments object because it is not a JSArray, but just a normal JSObject. BUG=v8:1227 Review URL: http://codereview.chromium.org/7064020 git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@8024 ce2b1a6d-e550-0410-aec6-3dcde31c8c00 --- src/contexts.cc | 1 - 1 file changed, 1 deletion(-) diff --git a/src/contexts.cc b/src/contexts.cc index b02ac1716..f6031f1d0 100644 --- a/src/contexts.cc +++ b/src/contexts.cc @@ -162,7 +162,6 @@ Handle Context::Lookup(Handle name, ContextLookupFlags flags, ASSERT(index >= 0); // arguments must exist and be in the heap context Handle arguments(JSObject::cast(context->get(index)), isolate); - ASSERT(arguments->HasLocalProperty(isolate->heap()->length_symbol())); if (FLAG_trace_contexts) { PrintF("=> found parameter %d in arguments object\n", param_index); } -- 2.34.1