From c51896b2da91e6967d6f83e6c7a2ff741778f6b3 Mon Sep 17 00:00:00 2001
From: "igor%mir2.org" <igor%mir2.org@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Wed, 16 May 2007 22:41:50 +0000
Subject: [PATCH] Bug 380833: AllocSlot now insists on the new slot being
 already set to void. r=brendan

git-svn-id: svn://10.0.0.236/trunk@226549 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/js/src/jsobj.c | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/mozilla/js/src/jsobj.c b/mozilla/js/src/jsobj.c
index 0d4f8bfe879..47a7e8cb81c 100644
--- a/mozilla/js/src/jsobj.c
+++ b/mozilla/js/src/jsobj.c
@@ -2814,13 +2814,8 @@ js_AllocSlot(JSContext *cx, JSObject *obj, uint32 *slotp)
         return JS_FALSE;
     }
 
-#ifdef DEBUG
-#if JS_BYTES_PER_WORD == 8
-    STOBJ_SET_SLOT(obj, map->freeslot, (jsval)0xddddddddddddddd8L);
-#else
-    STOBJ_SET_SLOT(obj, map->freeslot, (jsval)0xddddddd8);
-#endif
-#endif
+    /* ReallocSlots or js_FreeSlot should set the free slots to void. */   
+    JS_ASSERT(STOBJ_GET_SLOT(obj, map->freeslot) == JSVAL_VOID);
     *slotp = map->freeslot++;
     return JS_TRUE;
 }