Adding upstream version 86.0.1.upstream/86.0.1upstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 20 insertions, 0 deletions

diff --git a/js/src/tests/non262/regress/regress-592556-c35.js b/js/src/tests/non262/regress/regress-592556-c35.js
new file mode 100644
index 0000000000..c2ceb4a321
--- /dev/null
+++ b/js/src/tests/non262/regress/regress-592556-c35.js
@@ -0,0 +1,20 @@
+// Any copyright is dedicated to the Public Domain.

+// http://creativecommons.org/licenses/publicdomain/

+// Contributor: Jason Orendorff <jorendorff@mozilla.com>

+

+var obj = {a: 0, b: 1, c: 2};

+delete obj.b;  // switch to dictionary mode

+Object.defineProperty(obj, 'g',

+                      {get: function () { return -1; }, configurable: true});

+for (var i = 3; i < 20; i++)

+    obj['x' + i] = i;  // get property table

+for (var i = 3; i < 20; i++)

+    delete obj['x' + i];  // add to freelist

+delete obj.g;  // must update lastProp->freeslot, to avoid assertion

+

+// extra junk to try to hit the assertion, if freeslot is not updated

+gc();

+obj.d = 3;

+obj.e = 4;

+

+reportCompare(0, 0, 'ok');