diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
commit | 2aa4a82499d4becd2284cdb482213d541b8804dd (patch) | |
tree | b80bf8bf13c3766139fbacc530efd0dd9d54394c /js/src/jit-test/tests/backup-point-bug1315634.js | |
parent | Initial commit. (diff) | |
download | firefox-upstream.tar.xz firefox-upstream.zip |
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'js/src/jit-test/tests/backup-point-bug1315634.js')
-rw-r--r-- | js/src/jit-test/tests/backup-point-bug1315634.js | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/backup-point-bug1315634.js b/js/src/jit-test/tests/backup-point-bug1315634.js new file mode 100644 index 0000000000..337bd5b40c --- /dev/null +++ b/js/src/jit-test/tests/backup-point-bug1315634.js @@ -0,0 +1,29 @@ +setJitCompilerOption('ion.forceinlineCaches', 1); +function g(f, x) { + for (var j = 0; j < 3; ++j) + for (var k = 0; k < 21; ++k) + try { + f(x[k]); + } catch (e) {} +} +a0 = y = []; +function f2() { + f1() +}; +function f1() { + switch (abs(abs(3187503207)(134217728) | 0) | 0) { + case -2: + this.y.splice(NaN, 2, x({}) = 4277) + } + return + 4006901336 | 0 +} +g(f1, []); +g(f2, []); +f1 = (function() { + function f() { + a0.splice(NaN, 0); + } + return f; +})(); +g(f2, []); |