Harden how the compiler references GC objects
[WebKit.git] / Source / JavaScriptCore / dfg / DFGNode.cpp
index 6a94b59..76cc0da 100644 (file)
@@ -175,7 +175,7 @@ void Node::convertToPutHint(const PromotedLocationDescriptor& descriptor, Node*
 void Node::convertToPutStructureHint(Node* structure)
 {
     ASSERT(m_op == PutStructure);
-    ASSERT(structure->castConstant<Structure*>() == transition()->next);
+    ASSERT(structure->castConstant<Structure*>() == transition()->next.get());
     convertToPutHint(StructurePLoc, child1().node(), structure);
 }