diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
commit | 2aa4a82499d4becd2284cdb482213d541b8804dd (patch) | |
tree | b80bf8bf13c3766139fbacc530efd0dd9d54394c /js/src/jit-test/tests/cacheir/bug1471361.js | |
parent | Initial commit. (diff) | |
download | firefox-upstream.tar.xz firefox-upstream.zip |
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'js/src/jit-test/tests/cacheir/bug1471361.js')
-rw-r--r-- | js/src/jit-test/tests/cacheir/bug1471361.js | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/cacheir/bug1471361.js b/js/src/jit-test/tests/cacheir/bug1471361.js new file mode 100644 index 0000000000..d50acdf558 --- /dev/null +++ b/js/src/jit-test/tests/cacheir/bug1471361.js @@ -0,0 +1,13 @@ +// This is a fuzzer-found crash inducing test. +// Pass is simply not crashing. +(function () { + f = function(y) { + ~+y; + } + x = [new Number]; + for (var j = 0; j < 3; ++j) { + for (var k = 0; k < 3; ++k) { + f(x[k]); + } + } +})(); |