From 2aa4a82499d4becd2284cdb482213d541b8804dd Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 28 Apr 2024 16:29:10 +0200 Subject: Adding upstream version 86.0.1. Signed-off-by: Daniel Baumann --- js/src/tests/non262/regress/regress-592556-c35.js | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 js/src/tests/non262/regress/regress-592556-c35.js (limited to 'js/src/tests/non262/regress/regress-592556-c35.js') diff --git a/js/src/tests/non262/regress/regress-592556-c35.js b/js/src/tests/non262/regress/regress-592556-c35.js new file mode 100644 index 0000000000..c2ceb4a321 --- /dev/null +++ b/js/src/tests/non262/regress/regress-592556-c35.js @@ -0,0 +1,20 @@ +// Any copyright is dedicated to the Public Domain. +// http://creativecommons.org/licenses/publicdomain/ +// Contributor: Jason Orendorff + +var obj = {a: 0, b: 1, c: 2}; +delete obj.b; // switch to dictionary mode +Object.defineProperty(obj, 'g', + {get: function () { return -1; }, configurable: true}); +for (var i = 3; i < 20; i++) + obj['x' + i] = i; // get property table +for (var i = 3; i < 20; i++) + delete obj['x' + i]; // add to freelist +delete obj.g; // must update lastProp->freeslot, to avoid assertion + +// extra junk to try to hit the assertion, if freeslot is not updated +gc(); +obj.d = 3; +obj.e = 4; + +reportCompare(0, 0, 'ok'); -- cgit v1.2.3