[MERGE #4528 @leirocks] Fix bad assertion in DirectSetItemAtRange for…

… OP_MEMSET Merge pull request #4528 from leirocks:op_memset
chakra-core · Jan 16, 2018 · a0d01ee · a0d01ee
2 parents b0a2395 + c23dae7
commit a0d01ee
Showing 1 changed file with 2 additions and 10 deletions.
diff --git a/lib/Runtime/Library/JavascriptArray.inl b/lib/Runtime/Library/JavascriptArray.inl
@@ -1160,23 +1160,15 @@ SECOND_PASS:
         }
         else if (startIndex == 0 && length > this->length && (head == EmptySegment || length > head->size))
         {
-
             Recycler *recycler = GetRecycler();
-            this->length = length;
-            this->EnsureHead<T>();
-            SparseArraySegmentBase* current = nullptr;
-
-            Assert(head->size < length);
-
-            current = SparseArraySegment<T>::AllocateSegment(recycler, 0, length, (SparseArraySegment<T> *)nullptr);
+            SparseArraySegmentBase* current = SparseArraySegment<T>::AllocateSegment(recycler, 0, length, (SparseArraySegment<T> *)nullptr);
             this->SetHeadAndLastUsedSegment(current);
+            this->length = length;
 
             Assert(!HasSegmentMap());
 
             SetHasNoMissingValues(true);
-
             CopyValueToSegmentBuferNoCheck(((Js::SparseArraySegment<T>*)current)->elements, length, newValue);
-            this->SetLastUsedSegment(current);
         }
         else
         {