From 8d3ec131cc07610922473737f419ca974c7c163b Mon Sep 17 00:00:00 2001
From: Steve Fink <sfink@mozilla.com>
Date: Tue, 22 Oct 2013 16:24:42 -0700
Subject: [PATCH] Bug 929151 - JS_ASSERT(good), not JS_ASSERT(bad). r=bustage

--HG--
extra : rebase_source : dea0a9dfc214449e56d6e69defb4f80ca5ebecc9
---
 js/src/vm/Shape.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/src/vm/Shape.cpp b/js/src/vm/Shape.cpp
index 2992b7313e8b..60fec2241469 100644
--- a/js/src/vm/Shape.cpp
+++ b/js/src/vm/Shape.cpp
@@ -1620,7 +1620,7 @@ EmptyShape::insertInitialShape(ExclusiveContext *cx, HandleShape shape, HandleOb
 
     /* Bug 929547 - we do not rekey based on metadata object moves */
     JSObject *metadata = shape->getObjectMetadata();
-    JS_ASSERT_IF(metadata, gc::IsInsideNursery(cx->compartment()->runtimeFromAnyThread(), metadata));
+    JS_ASSERT_IF(metadata, !gc::IsInsideNursery(cx->compartment()->runtimeFromAnyThread(), metadata));
 
     InitialShapeSet::Ptr p = cx->compartment()->initialShapes.lookup(lookup);
     JS_ASSERT(p);