Added possibility of miscompiled regexp to verfifier.

src/objects-debug.cc

Index: src/objects-debug.cc
diff --git a/src/objects-debug.cc b/src/objects-debug.cc
index ef4aae531155ed0d621d73c8359e0fdcf5473d9b..922dd9a90fb0ff5e1c24bde8e8cac2c27596b731 100644
--- a/src/objects-debug.cc
+++ b/src/objects-debug.cc
@@ -769,10 +769,13 @@ void JSRegExp::JSRegExpVerify() {
 
       FixedArray* arr = FixedArray::cast(data());
       Object* ascii_data = arr->get(JSRegExp::kIrregexpASCIICodeIndex);
-      ASSERT(ascii_data->IsTheHole()
+      // TheHole : Not compiled yet.
+      // JSObject: Compilation error.
+      // Code/ByteArray: Compiled code.
+      ASSERT(ascii_data->IsTheHole() || ascii_data->IsJSObject()
           || (is_native ? ascii_data->IsCode() : ascii_data->IsByteArray()));

[Mads Ager (chromium), 2009/09/02 08:15:14]

Put the || on the previous line and indent:

ASSERT(ascii_data... ||
       (is_native ...));

       Object* uc16_data = arr->get(JSRegExp::kIrregexpUC16CodeIndex);
-      ASSERT(uc16_data->IsTheHole()
+      ASSERT(uc16_data->IsTheHole() || ascii_data->IsJSObject()
           || (is_native ? uc16_data->IsCode() : uc16_data->IsByteArray()));

[Mads Ager (chromium), 2009/09/02 08:15:14]

Indentation as above.

       ASSERT(arr->get(JSRegExp::kIrregexpCaptureCountIndex)->IsSmi());
       ASSERT(arr->get(JSRegExp::kIrregexpMaxRegisterCountIndex)->IsSmi());