Changeset 162156 in webkit for trunk/Source/JavaScriptCore/interpreter/Interpreter.cpp

Timestamp:

Jan 16, 2014, 2:55:30 PM (12 years ago)

Author:

[email protected]

Message:

throwing an objc object (or general binding object) triggers an assertion
​https://bugs.webkit.org/show_bug.cgi?id=127146

Reviewed by Alexey Proskuryakov.

This is simply a bogus assertion as we can't guarantee a bindings object
won't intercept assignment to .stack

• interpreter/Interpreter.cpp:

(JSC::Interpreter::unwind):

File:

• trunk/Source/JavaScriptCore/interpreter/Interpreter.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/interpreter/Interpreter.cpp

@@ -678 +678 @@
 
     ASSERT(callFrame->vm().exceptionStack().size());
-    ASSERT(!exceptionValue.isObject() || asObject(exceptionValue)->hasProperty(callFrame, callFrame->vm().propertyNames->stack));
 
     Debugger* debugger = callFrame->vmEntryGlobalObject()->debugger();