Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 7 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/basic/bug1821959.js b/js/src/jit-test/tests/basic/bug1821959.js
new file mode 100644
index 0000000000..d7fbe7260f
--- /dev/null
+++ b/js/src/jit-test/tests/basic/bug1821959.js
@@ -0,0 +1,7 @@
+// Transplant an object that is using the shifted-dense-elements optimization
+const v1 = this.transplantableObject();
+const v2 = v1.object;
+Array.prototype.push.call(v2, 0);
+Array.prototype.push.call(v2, 0);
+Array.prototype.shift.call(v2);
+v1.transplant(newGlobal());