webkitgtk-2.4.11webkitgtk-2.4.11

1 files changed, 3 insertions, 5 deletions

diff --git a/Source/JavaScriptCore/runtime/JSArrayBufferViewInlines.h b/Source/JavaScriptCore/runtime/JSArrayBufferViewInlines.h
index 3c4b054ba..de4e8587c 100644
--- a/Source/JavaScriptCore/runtime/JSArrayBufferViewInlines.h
+++ b/Source/JavaScriptCore/runtime/JSArrayBufferViewInlines.h
@@ -59,18 +59,16 @@ inline void JSArrayBufferView::neuter()
 {
     ASSERT(hasArrayBuffer());
     m_length = 0;
-    m_vector.clear();
+    m_vector = 0;
 }
 
 inline unsigned JSArrayBufferView::byteOffset()
 {
     if (!hasArrayBuffer())
         return 0;
-
-    ASSERT(!vector() == !buffer()->data());
-
+    
     ptrdiff_t delta =
-        bitwise_cast<uint8_t*>(vector()) - static_cast<uint8_t*>(buffer()->data());
+        static_cast<uint8_t*>(m_vector) - static_cast<uint8_t*>(buffer()->data());
     
     unsigned result = static_cast<unsigned>(delta);
     ASSERT(static_cast<ptrdiff_t>(result) == delta);