From 2aa4a82499d4becd2284cdb482213d541b8804dd Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 28 Apr 2024 16:29:10 +0200 Subject: Adding upstream version 86.0.1. Signed-off-by: Daniel Baumann --- js/src/jit-test/tests/ion/bug1620215.js | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 js/src/jit-test/tests/ion/bug1620215.js (limited to 'js/src/jit-test/tests/ion/bug1620215.js') diff --git a/js/src/jit-test/tests/ion/bug1620215.js b/js/src/jit-test/tests/ion/bug1620215.js new file mode 100644 index 0000000000..70b95ca630 --- /dev/null +++ b/js/src/jit-test/tests/ion/bug1620215.js @@ -0,0 +1,15 @@ +function test(x) { + for (var i = 0; i < 10; ++i) { + // Create an IC specialized for lazy arguments when Baseline runs. + arguments[0]; + // De-optimize lazy arguments by accessing an out-of-bounds argument. + arguments[10]; + + // Overwrite |arguments| to get a Value type. + arguments = 0; + + for (var j = 0; j < 1500; j++) {} + return; + } +} +test(1); -- cgit v1.2.3