Changeset 35657 in webkit for trunk/JavaScriptCore/kjs/JSVariableObject.h

Timestamp:

Aug 10, 2008, 3:06:13 AM (17 years ago)

Author:

[email protected]

Message:

Reviewed by Sam Weinig.

Added same heap debug checks to more code paths.

• kjs/JSActivation.cpp: (KJS::JSActivation::put): (KJS::JSActivation::putWithAttributes):
• kjs/JSGlobalObject.cpp: (KJS::JSGlobalObject::putWithAttributes):
• kjs/JSObject.h: (KJS::JSObject::putDirect):
• kjs/JSVariableObject.h: (KJS::JSVariableObject::symbolTablePut): (KJS::JSVariableObject::symbolTablePutWithAttributes):

File:

• trunk/JavaScriptCore/kjs/JSVariableObject.h (modified) (2 diffs)

trunk/JavaScriptCore/kjs/JSVariableObject.h

@@ -126 +126 @@
     inline bool JSVariableObject::symbolTablePut(const Identifier& propertyName, JSValue* value)
     {
+        ASSERT(!Heap::heap(value) || Heap::heap(value) == Heap::heap(this));
+
         SymbolTableEntry entry = symbolTable().inlineGet(propertyName.ustring().rep());
         if (entry.isNull())
@@ -137 +139 @@
     inline bool JSVariableObject::symbolTablePutWithAttributes(const Identifier& propertyName, JSValue* value, unsigned attributes)
     {
+        ASSERT(!Heap::heap(value) || Heap::heap(value) == Heap::heap(this));
+
         SymbolTable::iterator iter = symbolTable().find(propertyName.ustring().rep());
         if (iter == symbolTable().end())