From be16123ddcaf061afced444a6db7d5b55020b744 Mon Sep 17 00:00:00 2001 From: wolfbeast Date: Sun, 23 Feb 2020 11:33:50 +0100 Subject: Revert "Issue #1382 - Remove invalid assertion." This reverts commit 9c6a8450b3e96442035b84025b0dd13be3a9e5f8. --- js/src/jsarray.cpp | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/js/src/jsarray.cpp b/js/src/jsarray.cpp index 87d1a5accc..4ee967d4c8 100644 --- a/js/src/jsarray.cpp +++ b/js/src/jsarray.cpp @@ -2106,15 +2106,14 @@ js::ArrayShiftMoveElements(NativeObject* obj) MOZ_ASSERT_IF(obj->is(), obj->as().lengthIsWritable()); size_t initlen = obj->getDenseInitializedLength(); - - if (initlen > 0) { - /* - * At this point the length and initialized length have already been - * decremented and the result fetched, so just shift the array elements - * themselves. - */ - obj->moveDenseElementsNoPreBarrier(0, 1, initlen); - } + MOZ_ASSERT(initlen > 0); + + /* + * At this point the length and initialized length have already been + * decremented and the result fetched, so just shift the array elements + * themselves. + */ + obj->moveDenseElementsNoPreBarrier(0, 1, initlen); } static inline void -- cgit v1.2.3