From 0930236a6e8bef5c2b90f1522a06acf9dee9c15d Mon Sep 17 00:00:00 2001
From: Lucas Forschler <lforschler@apple.com>
Date: Wed, 22 Oct 2014 15:05:00 +0200
Subject: Fix assert after makerope boundary check

The browser demo asserts on qt-project.org after the makerope security
fix.

Port of http://trac.webkit.org/changeset/169397

Change-Id: I19c98737735d9b17133742752928d4ce6349de13
Reviewed-by: Michael Bruning <michael.bruning@digia.com>
---
 Source/JavaScriptCore/dfg/DFGAbstractState.cpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Source/JavaScriptCore/dfg/DFGAbstractState.cpp b/Source/JavaScriptCore/dfg/DFGAbstractState.cpp
index ab2a5af98..ad4e84198 100644
--- a/Source/JavaScriptCore/dfg/DFGAbstractState.cpp
+++ b/Source/JavaScriptCore/dfg/DFGAbstractState.cpp
@@ -476,6 +476,7 @@ bool AbstractState::executeEffects(unsigned indexInBlock, Node* node)
     }
         
     case MakeRope: {
+        node->setCanExit(true);
         forNode(node).set(m_graph.m_vm.stringStructure.get());
         break;
     }
-- 
cgit v1.2.1