JSImmutableButterfly should assert m_header is adjacent to the data
authorkeith_miller@apple.com <keith_miller@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 19 Jun 2018 06:58:47 +0000 (06:58 +0000)
committerkeith_miller@apple.com <keith_miller@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 19 Jun 2018 06:58:47 +0000 (06:58 +0000)
commit59b19e0ec38bc2375ed3c8d81227ba5df92387d0
tree0375acc36c878c579c1670fa0848b726a8483746
parentdf2ae2320da66f508921a954ff38cfcbe5b354cd
JSImmutableButterfly should assert m_header is adjacent to the data
https://bugs.webkit.org/show_bug.cgi?id=186795

Reviewed by Saam Barati.

* runtime/JSImmutableButterfly.cpp:
* runtime/JSImmutableButterfly.h:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@232954 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/runtime/JSImmutableButterfly.cpp
Source/JavaScriptCore/runtime/JSImmutableButterfly.h