Index: src/ia32/ic-ia32.cc |
diff --git a/src/ia32/ic-ia32.cc b/src/ia32/ic-ia32.cc |
index 3c95356642b42a2d90c6a1ec1e9679e870bb1580..a7c9ee8d0f52483e935d72c38f84d8fff6a00582 100644 |
--- a/src/ia32/ic-ia32.cc |
+++ b/src/ia32/ic-ia32.cc |
@@ -765,7 +765,7 @@ void KeyedStoreIC::GenerateGeneric(MacroAssembler* masm, |
// ecx: key (a smi) |
// edi: receiver map |
__ mov(ebx, FieldOperand(edx, JSObject::kElementsOffset)); |
- // Check that the object is in fast mode and writable. |
+ // Check array bounds. Both the key and the length of FixedArray are smis. |
__ cmp(ecx, FieldOperand(ebx, FixedArray::kLengthOffset)); |
__ j(below, &fast_object_with_map_check); |