summaryrefslogtreecommitdiff
path: root/chromium/v8/src/diagnostics/objects-debug.cc
diff options
context:
space:
mode:
Diffstat (limited to 'chromium/v8/src/diagnostics/objects-debug.cc')
-rw-r--r--chromium/v8/src/diagnostics/objects-debug.cc3
1 files changed, 3 insertions, 0 deletions
diff --git a/chromium/v8/src/diagnostics/objects-debug.cc b/chromium/v8/src/diagnostics/objects-debug.cc
index 07634f3ca79..c5d1b25737f 100644
--- a/chromium/v8/src/diagnostics/objects-debug.cc
+++ b/chromium/v8/src/diagnostics/objects-debug.cc
@@ -691,6 +691,9 @@ void Map::MapVerify(Isolate* isolate) {
.IsConsistentWithBackPointers());
SLOW_DCHECK(!FLAG_unbox_double_fields ||
layout_descriptor().IsConsistentWithMap(*this));
+ // Only JSFunction maps have has_prototype_slot() bit set and constructible
+ // JSFunction objects must have prototype slot.
+ CHECK_IMPLIES(has_prototype_slot(), instance_type() == JS_FUNCTION_TYPE);
if (!may_have_interesting_symbols()) {
CHECK(!has_named_interceptor());
CHECK(!is_dictionary_map());