From a70d07a7bbab1f97b83e4cf981ab7929e195f864 Mon Sep 17 00:00:00 2001
From: win7-7 <win7-7@users.noreply.github.com>
Date: Fri, 16 Jan 2026 11:54:34 +0200
Subject: [PATCH] These asserts now work after 903519 - Allocate strings in the
 nursery if enabled, leaving only one major assert left in jsgc.cpp.

These asserts now work after 903519 - Allocate strings in the nursery if enabled.
---
 js/src/gc/Cell.h      | 4 ++--
 js/src/gc/Marking.cpp | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/js/src/gc/Cell.h b/js/src/gc/Cell.h
index d656b04f0b..fde676f5d3 100644
--- a/js/src/gc/Cell.h
+++ b/js/src/gc/Cell.h
@@ -261,14 +261,14 @@ Cell::needWriteBarrierPre(JS::Zone* zone) {
 /* static */ MOZ_ALWAYS_INLINE TenuredCell*
 TenuredCell::fromPointer(void* ptr)
 {
-    //MOZ_ASSERT(static_cast<TenuredCell*>(ptr)->isTenured());
+    MOZ_ASSERT(static_cast<TenuredCell*>(ptr)->isTenured());
     return static_cast<TenuredCell*>(ptr);
 }
 
 /* static */ MOZ_ALWAYS_INLINE const TenuredCell*
 TenuredCell::fromPointer(const void* ptr)
 {
-    //MOZ_ASSERT(static_cast<const TenuredCell*>(ptr)->isTenured());
+    MOZ_ASSERT(static_cast<const TenuredCell*>(ptr)->isTenured());
     return static_cast<const TenuredCell*>(ptr);
 }
 
diff --git a/js/src/gc/Marking.cpp b/js/src/gc/Marking.cpp
index 14657948eb..511d2b073b 100644
--- a/js/src/gc/Marking.cpp
+++ b/js/src/gc/Marking.cpp
@@ -1001,7 +1001,7 @@ bool
 js::GCMarker::mark(T* thing)
 {
     AssertShouldMarkInZone(thing);
-    //MOZ_ASSERT(!IsInsideNursery(TenuredCell::fromPointer(thing)));
+    MOZ_ASSERT(!IsInsideNursery(TenuredCell::fromPointer(thing)));
     return ParticipatesInCC<T>::value
            ? TenuredCell::fromPointer(thing)->markIfUnmarked(markColor())
            : TenuredCell::fromPointer(thing)->markIfUnmarked(MarkColor::Black);