Fix

ShortDevelopment · ShortDevelopment · commit 2e63773dbf8a · 2022-10-03T12:54:19.000-07:00
diff --git a/lib/Runtime/Library/JavascriptArray.cpp b/lib/Runtime/Library/JavascriptArray.cpp
@@ -9484,9 +9484,8 @@ using namespace Js;
         }
         else
         {
-            Assert(fromVal < MaxArrayLength);
-            Assert(toVal < MaxArrayLength);
-            Assert(direction != -1 && (fromVal + count <= MaxArrayLength && toVal + count <= MaxArrayLength));
+            Assert(direction != -1 || (fromVal < MaxArrayLength && toVal < MaxArrayLength));
+            Assert(fromVal + count <= MaxArrayLength && toVal + count <= MaxArrayLength);
 
             uint32 fromIndex = static_cast<uint32>(fromVal);
             uint32 toIndex = static_cast<uint32>(toVal);

Original file line number	Diff line number	Diff line change
`@@ -9484,9 +9484,8 @@ using namespace Js;`
`9484`	`9484`	`}`
`9485`	`9485`	`else`
`9486`	`9486`	`{`
`9487`		`- Assert(fromVal < MaxArrayLength);`
`9488`		`- Assert(toVal < MaxArrayLength);`
`9489`		`- Assert(direction != -1 && (fromVal + count <= MaxArrayLength && toVal + count <= MaxArrayLength));`
	`9487`	`+ Assert(direction != -1 \|\| (fromVal < MaxArrayLength && toVal < MaxArrayLength));`
	`9488`	`+ Assert(fromVal + count <= MaxArrayLength && toVal + count <= MaxArrayLength);`
`9490`	`9489`
`9491`	`9490`	`uint32 fromIndex = static_cast<uint32>(fromVal);`
`9492`	`9491`	`uint32 toIndex = static_cast<uint32>(toVal);`