Commit ab4164de authored by Igor Sheludko's avatar Igor Sheludko Committed by Commit Bot

[debug] Fix SloppyArgumentsElements verifier.

BUG=chromium:713365

Change-Id: I5d9d5b5e00a637923a1a3e0dc7f81fa4075c4e82
Reviewed-on: https://chromium-review.googlesource.com/484300Reviewed-by: 's avatarJakob Kummerow <jkummerow@chromium.org>
Commit-Queue: Igor Sheludko <ishell@chromium.org>
Cr-Commit-Position: refs/heads/master@{#44782}
parent 7c87aeb1
......@@ -495,8 +495,9 @@ void SloppyArgumentsElements::SloppyArgumentsElementsVerify(
JSSloppyArgumentsObject* holder) {
Isolate* isolate = GetIsolate();
FixedArrayVerify();
// Abort verification if only partially initialized.
if (arguments()->IsUndefined(isolate)) return;
// Abort verification if only partially initialized (can't use arguments()
// getter because it does FixedArray::cast()).
if (get(kArgumentsIndex)->IsUndefined(isolate)) return;
ElementsKind kind = holder->GetElementsKind();
CHECK(IsFixedArray());
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment