JavaScriptCore-7600.1.4.9.tar.gz

[apple/javascriptcore.git] / heap / HandleSet.cpp

diff --git a/heap/HandleSet.cpp b/heap/HandleSet.cpp
index fdb554448bc5d7bf3a598c325a2cce3114f5ab61..be667e8202fc9c0edd6e3e4493331c20db06f1e1 100644 (file)
--- a/heap/HandleSet.cpp
+++ b/heap/HandleSet.cpp
@@ -30,14 +30,13 @@
 #include "HandleBlockInlines.h"
 #include "HeapRootVisitor.h"
 #include "JSObject.h"
-#include "Operations.h"
+#include "JSCInlines.h"
 #include <wtf/DataLog.h>
 
 namespace JSC {
 
 HandleSet::HandleSet(VM* vm)
     : m_vm(vm)
-    , m_nextToFinalize(0)
 {
     grow();
 }
@@ -73,10 +72,6 @@ void HandleSet::visitStrongHandles(HeapRootVisitor& heapRootVisitor)
 
 void HandleSet::writeBarrier(HandleSlot slot, const JSValue& value)
 {
-    // Forbid assignment to handles during the finalization phase, since it would violate many GC invariants.
-    // File a bug with stack trace if you hit this.
-    RELEASE_ASSERT(!m_nextToFinalize);
-
     if (!value == !*slot && slot->isCell() == value.isCell())
         return;