summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/cacheir/bug1471361.js
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 14:29:10 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 14:29:10 +0000
commit2aa4a82499d4becd2284cdb482213d541b8804dd (patch)
treeb80bf8bf13c3766139fbacc530efd0dd9d54394c /js/src/jit-test/tests/cacheir/bug1471361.js
parentInitial commit. (diff)
downloadfirefox-upstream.tar.xz
firefox-upstream.zip
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'js/src/jit-test/tests/cacheir/bug1471361.js')
-rw-r--r--js/src/jit-test/tests/cacheir/bug1471361.js13
1 files changed, 13 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/cacheir/bug1471361.js b/js/src/jit-test/tests/cacheir/bug1471361.js
new file mode 100644
index 0000000000..d50acdf558
--- /dev/null
+++ b/js/src/jit-test/tests/cacheir/bug1471361.js
@@ -0,0 +1,13 @@
+// This is a fuzzer-found crash inducing test.
+// Pass is simply not crashing.
+(function () {
+ f = function(y) {
+ ~+y;
+ }
+ x = [new Number];
+ for (var j = 0; j < 3; ++j) {
+ for (var k = 0; k < 3; ++k) {
+ f(x[k]);
+ }
+ }
+})();