Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 23 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/basic/shifted-elements3.js b/js/src/jit-test/tests/basic/shifted-elements3.js
new file mode 100644
index 0000000000..6bbe296faa
--- /dev/null
+++ b/js/src/jit-test/tests/basic/shifted-elements3.js
@@ -0,0 +1,23 @@
+// Always use the per-element barrier.
+gczeal(12);
+
+function f() {
+    var arr = [];
+    for (var i = 0; i < 1000; i++)
+        arr.push(i);
+    gc(); // Ensure arr is tenured.
+
+    for (var i = 0; i < 10; i++)
+        arr.shift();
+
+    // Add a nursery object, shift all elements, and trigger a GC to ensure
+    // the post barrier doesn't misbehave.
+    for (var j = 0; j < 40; j++)
+        arr[500] = {x: j};
+    while (arr.length > 0)
+        arr.shift();
+
+    gc();
+    return arr;
+}
+f();