Where did this come from?

Where did this come from? It fixes two crashing assertions. Still another crash further down.
This commit is contained in:
win7-7 2026-01-16 09:38:08 +02:00 committed by wuggy
commit 51d5c3cda8

View file

@ -1572,6 +1572,11 @@ CreateDependentString::generate(MacroAssembler& masm, const JSAtomState& names,
masm.storePtr(temp1, Address(string, JSDependentString::offsetOfBase()));
masm.bind(&noBase);
}
// Post-barrier the base store, whether it was the direct or indirect
// base (both will end up in temp1 here).
masm.branchPtrInNurseryChunk(Assembler::Equal, string, temp2, &done);
masm.branchPtrInNurseryChunk(Assembler::NotEqual, temp1, temp2, &done);
masm.bind(&done);
}