From c80dca054705419461bc0cc5dfc8e08d0c57c3b8 Mon Sep 17 00:00:00 2001
From: Brian Hackett <bhackett1024@gmail.com>
Date: Mon, 6 Dec 2010 15:54:16 -0800
Subject: [PATCH] [INFER] Fix overly aggressive assert, bug 609899.

---
 js/src/jsanalyze.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/src/jsanalyze.cpp b/js/src/jsanalyze.cpp
index 45086b103f2..31710b5b4cb 100644
--- a/js/src/jsanalyze.cpp
+++ b/js/src/jsanalyze.cpp
@@ -935,7 +935,7 @@ LifetimeScript::analyze(JSContext *cx, analyze::Script *analysis, JSScript *scri
                     targetOffset = targetOffset + GetJumpOffset(target, target);
                 } else {
                     /* This is a loop back edge, no lifetime to pull in yet. */
-                    JS_ASSERT(nop == JSOP_TRACE);
+                    JS_ASSERT(nop == JSOP_TRACE || nop == JSOP_NOTRACE);
                     codeArray[targetOffset].loopBackedge = offset;
                     break;
                 }