Unreviewed, relax limitation in operationCreateThis
authorutatane.tea@gmail.com <utatane.tea@gmail.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 29 Dec 2015 13:57:21 +0000 (13:57 +0000)
committerutatane.tea@gmail.com <utatane.tea@gmail.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 29 Dec 2015 13:57:21 +0000 (13:57 +0000)
https://bugs.webkit.org/show_bug.cgi?id=152383

Unreviewed. operationCreateThis now can be called with non constructible function.

* dfg/DFGOperations.cpp:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@194436 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/dfg/DFGOperations.cpp

index 00e3e7f..7ab2d73 100644 (file)
@@ -1,5 +1,14 @@
 2015-12-29  Yusuke Suzuki  <utatane.tea@gmail.com>
 
+        Unreviewed, relax limitation in operationCreateThis
+        https://bugs.webkit.org/show_bug.cgi?id=152383
+
+        Unreviewed. operationCreateThis now can be called with non constructible function.
+
+        * dfg/DFGOperations.cpp:
+
+2015-12-29  Yusuke Suzuki  <utatane.tea@gmail.com>
+
         [ES6][ES7] Drop Constructability of generator function
         https://bugs.webkit.org/show_bug.cgi?id=152383
 
index c964ee4..a6d60ad 100644 (file)
@@ -165,11 +165,6 @@ JSCell* JIT_OPERATION operationCreateThis(ExecState* exec, JSObject* constructor
     VM& vm = exec->vm();
     NativeCallFrameTracer tracer(&vm, exec);
 
-#if !ASSERT_DISABLED
-    ConstructData constructData;
-    ASSERT(jsCast<JSFunction*>(constructor)->methodTable(vm)->getConstructData(jsCast<JSFunction*>(constructor), constructData) == ConstructTypeJS);
-#endif
-    
     return constructEmptyObject(exec, jsCast<JSFunction*>(constructor)->rareData(exec, inlineCapacity)->allocationProfile()->structure());
 }