| Index: src/builtins/builtins-array.cc
|
| diff --git a/src/builtins/builtins-array.cc b/src/builtins/builtins-array.cc
|
| index 7e8c48668ff11cb36852eff96f67df69f7693ba4..39072d1d8667b7b11f7355eee51a1a44ce17a0e2 100644
|
| --- a/src/builtins/builtins-array.cc
|
| +++ b/src/builtins/builtins-array.cc
|
| @@ -2179,14 +2179,14 @@ void Builtins::Generate_ArrayIteratorPrototypeNext(
|
|
|
| assembler->Bind(&if_isfastarray);
|
| {
|
| - assembler->Assert(
|
| + assembler->CSA_ASSERT(
|
| assembler->Word32Equal(assembler->LoadMapInstanceType(array_map),
|
| assembler->Int32Constant(JS_ARRAY_TYPE)));
|
|
|
| Node* length = assembler->LoadObjectField(array, JSArray::kLengthOffset);
|
|
|
| - assembler->Assert(assembler->TaggedIsSmi(length));
|
| - assembler->Assert(assembler->TaggedIsSmi(index));
|
| + assembler->CSA_ASSERT(assembler->TaggedIsSmi(length));
|
| + assembler->CSA_ASSERT(assembler->TaggedIsSmi(index));
|
|
|
| assembler->GotoUnless(assembler->SmiBelow(index, length), &set_done);
|
|
|
| @@ -2384,8 +2384,8 @@ void Builtins::Generate_ArrayIteratorPrototypeNext(
|
| assembler->Bind(&done);
|
| length = var_length.value();
|
| }
|
| - assembler->Assert(assembler->TaggedIsSmi(length));
|
| - assembler->Assert(assembler->TaggedIsSmi(index));
|
| + assembler->CSA_ASSERT(assembler->TaggedIsSmi(length));
|
| + assembler->CSA_ASSERT(assembler->TaggedIsSmi(index));
|
|
|
| assembler->GotoUnless(assembler->SmiBelow(index, length), &set_done);
|
|
|
|
|