Changeset 170011 in webkit for trunk/Source/JavaScriptCore/dfg/DFGCapabilities.h

Timestamp:

Jun 16, 2014, 9:40:56 AM (11 years ago)

Author:

[email protected]

Message:

Convert ASSERT in inlineFunctionForCapabilityLevel to early return
​https://bugs.webkit.org/show_bug.cgi?id=133903

Reviewed by Mark Hahnenberg.

Hardened code by Converting ASSERT to return CannotCompile.

• dfg/DFGCapabilities.h:

(JSC::DFG::inlineFunctionForCapabilityLevel):

File:

• trunk/Source/JavaScriptCore/dfg/DFGCapabilities.h (modified) (1 diff)

trunk/Source/JavaScriptCore/dfg/DFGCapabilities.h

@@ -150 +150 @@
 {
     if (isClosureCall) {
-        ASSERT(kind == CodeForCall);
+        if (kind != CodeForCall)
+            return CannotCompile;
         return inlineFunctionForClosureCallCapabilityLevel(codeBlock);
     }