Changeset 153148 in webkit for trunk/Source/JavaScriptCore/runtime/JSCellInlines.h

Timestamp:

Jul 24, 2013, 8:59:49 PM (12 years ago)

Author:

[email protected]

Message:

fourthTier: DFG shouldn't allocate in the GC heap
​https://bugs.webkit.org/show_bug.cgi?id=115598

Reviewed by Geoffrey Garen.

I believe that we've now fixed this, and this patch just adds the relevant assertion.

• runtime/JSCellInlines.h:

(JSC::JSCell::JSCell):

File:

• trunk/Source/JavaScriptCore/runtime/JSCellInlines.h (modified) (4 diffs)

trunk/Source/JavaScriptCore/runtime/JSCellInlines.h

@@ -1 +1 @@
 /*
- * Copyright (C) 2012 Apple Inc. All rights reserved.
+ * Copyright (C) 2012, 2013 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -33 +33 @@
 #include "JSString.h"
 #include "Structure.h"
+#include <wtf/CompilationThread.h>
 
 namespace JSC {
@@ -38 +39 @@
 inline JSCell::JSCell(CreatingEarlyCellTag)
 {
+    ASSERT(!isCompilationThread());
 }
 
@@ -43 +45 @@
     : m_structure(vm, this, structure)
 {
+    ASSERT(!isCompilationThread());
 }