From f86ef7c9ef77478d0141f13d72e2efc95d86d717 Mon Sep 17 00:00:00 2001 From: "ishell@chromium.org" Date: Mon, 4 Aug 2014 11:00:19 +0000 Subject: [PATCH] Runtime assert added to %NormalizeElements. BUG=399654 LOG=N R=danno@chromium.org Review URL: https://codereview.chromium.org/423073007 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@22809 ce2b1a6d-e550-0410-aec6-3dcde31c8c00 --- src/runtime.cc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/runtime.cc b/src/runtime.cc index aa5d94b..28e1340 100644 --- a/src/runtime.cc +++ b/src/runtime.cc @@ -15092,6 +15092,8 @@ RUNTIME_FUNCTION(Runtime_NormalizeElements) { HandleScope scope(isolate); ASSERT(args.length() == 1); CONVERT_ARG_HANDLE_CHECKED(JSObject, array, 0); + RUNTIME_ASSERT(!array->HasExternalArrayElements() && + !array->HasFixedTypedArrayElements()); JSObject::NormalizeElements(array); return *array; } -- 2.7.4