Remove bogus assert, bug 696039. r=dvander
This commit is contained in:
@@ -2436,7 +2436,6 @@ mjit::stubs::ArrayShift(VMFrame &f)
|
||||
{
|
||||
JSObject *obj = &f.regs.sp[-1].toObject();
|
||||
JS_ASSERT(obj->isDenseArray());
|
||||
JS_ASSERT(!js_PrototypeHasIndexedProperties(f.cx, obj));
|
||||
|
||||
/*
|
||||
* At this point the length and initialized length have already been
|
||||
|
||||
Reference in New Issue
Block a user