Change assert to release assert for WTF::double_conversion::Vector to prevent OOB memory access.

third_party/WebKit/Source/wtf/dtoa/utils.h

 // Copyright 2010 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 145 matching lines @@
 
         // Returns the length of the vector.
         int length() const { return length_; }
 
         // Returns whether or not the vector is empty.
         bool is_empty() const { return length_ == 0; }
 
         // Returns the pointer to the start of the data in the vector.
         T* start() const { return start_; }
 
-        // Access individual vector elements - checks bounds in debug mode.
+        // Access individual vector elements.
         T& operator[](int index) const {
-            ASSERT(0 <= index && index < length_);
+            RELEASE_ASSERT(0 <= index && index < length_);
             return start_[index];
         }
 
         T& first() { return start_[0]; }
 
         T& last() { return start_[length_ - 1]; }
 
     private:
         T* start_;
         int length_;
@@ skipping 121 matching lines @@
     template <class Dest, class Source>
     inline Dest BitCast(Source* source) {
         return BitCast<Dest>(reinterpret_cast<uintptr_t>(source));
     }
 
 }  // namespace double_conversion
 
 } // namespace WTF
 
 #endif  // DOUBLE_CONVERSION_UTILS_H_