REGRESSION (r208711-r208722): ASSERTION FAILED: hasInlineStorage()
[WebKit-https.git] / Source / JavaScriptCore / runtime / JSObject.h
index 7f7ab981953089edf70eb8a6a52dcd99a52fb3ab..b4097a4888f9c759e14f5dc3fdbd2f7e2e0c87d6 100644 (file)
@@ -1112,7 +1112,7 @@ private:
     explicit JSFinalObject(VM& vm, Structure* structure, Butterfly* butterfly = nullptr)
         : JSObject(vm, structure, butterfly)
     {
-        memset(inlineStorage(), 0, structure->inlineCapacity() * sizeof(EncodedJSValue));
+        memset(inlineStorageUnsafe(), 0, structure->inlineCapacity() * sizeof(EncodedJSValue));
     }
 };