From 656fd91c4468f2342a0dc9af0e0a3441303e497e Mon Sep 17 00:00:00 2001 From: David Anderson Date: Tue, 23 Nov 2010 17:07:01 -0800 Subject: [PATCH] Fix another IC patching range check (bug 602333 part 4, r=dmandelin, a=b8+). --- js/src/methodjit/PolyIC.cpp | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/js/src/methodjit/PolyIC.cpp b/js/src/methodjit/PolyIC.cpp index d33302b2ee..e60d9c2051 100644 --- a/js/src/methodjit/PolyIC.cpp +++ b/js/src/methodjit/PolyIC.cpp @@ -2117,10 +2117,8 @@ GetElementIC::attachGetProp(JSContext *cx, JSObject *obj, const Value &v, jsid i if (hasLastStringStub && !buffer.verifyRange(lastStringStub)) return disable(cx, "code memory is out of range"); - if ((shouldPatchInlineTypeGuard() || shouldPatchUnconditionalClaspGuard()) && - !buffer.verifyRange(cx->fp()->jit())) { + if (!buffer.verifyRange(cx->fp()->jit())) return disable(cx, "code memory is out of range"); - } // Patch all guards. buffer.maybeLink(atomIdGuard, slowPathStart); -- 2.11.4.GIT