Commit 5ff458cf authored by ossy@webkit.org's avatar ossy@webkit.org

unshift/pop fifo may consume excessive memory

https://bugs.webkit.org/show_bug.cgi?id=75588

Reviewed by Zoltan Herczeg.

Buildfix after r104120.

* runtime/JSArray.cpp: Remove useless asserts, baecause unsigned expression >= 0 is always true
(JSC::JSArray::unshiftCount):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@104136 268f45cc-cd09-0410-ab3c-d52691b4dbfc
parent 2b791cc0
2012-01-05 Csaba Osztrogonác <ossy@webkit.org>
unshift/pop fifo may consume excessive memory
https://bugs.webkit.org/show_bug.cgi?id=75588
Reviewed by Zoltan Herczeg.
Buildfix after r104120.
* runtime/JSArray.cpp: Remove useless asserts, baecause unsigned expression >= 0 is always true
(JSC::JSArray::unshiftCount):
2012-01-05 Zoltan Herczeg <zherczeg@webkit.org>
Unreviewed gardening after r104134.
......@@ -827,12 +827,8 @@ void JSArray::shiftCount(ExecState* exec, unsigned count)
void JSArray::unshiftCount(ExecState* exec, unsigned count)
{
ArrayStorage* storage = m_storage;
ASSERT(m_indexBias >= 0);
ASSERT(count >= 0);
unsigned length = storage->m_length;
if (length != storage->m_numValuesInVector) {
// If m_length and m_numValuesInVector aren't the same, we have a sparse vector
// which means we need to go through each entry looking for the the "empty"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment