Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 15 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/auto-regress/bug666599.js b/js/src/jit-test/tests/auto-regress/bug666599.js
new file mode 100644
index 0000000000..6c76178296
--- /dev/null
+++ b/js/src/jit-test/tests/auto-regress/bug666599.js
@@ -0,0 +1,15 @@
+// Binary: cache/js-dbg-32-0428dbdf3d58-linux
+// Flags:
+//
+o1 = new Float32Array().buffer
+o2 = ArrayBuffer.prototype
+o3 = new Uint32Array().buffer
+for (i = 0; i < 2; i++) {
+    for (var x in o2) {
+        o3.__defineGetter__("", function() {})
+    }
+    o2.__defineGetter__("", function() {})
+    o1[
+    x]
+    o1.__proto__ = o3
+}