[Webkit-unassigned] [Bug 136313] ASSERTION FAILED: from.isCell() && from.asCell()->JSCell::inherits(std::remove_pointer<To>::type::info()) in JSC::jsCast(JSC::JSValue) [with To = JSC::JSScope*]

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=136313


Michael Saboff <msaboff at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #237257|                            |review+
               Flag|                            |




--- Comment #4 from Michael Saboff <msaboff at apple.com>  2014-08-27 15:25:57 PST ---
(From update of attachment 237257)
View in context: https://bugs.webkit.org/attachment.cgi?id=237257&action=review

r=me

> Source/JavaScriptCore/jit/JITOperations.cpp:614
> +    execCallee->setCallerFrame(static_cast<CallFrame*>(exec));

The static_cast is not needed.  CallFrame is a typedef of ExecState.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.