Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 12 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/basic/testDeepBailFromHasInstance.js b/js/src/jit-test/tests/basic/testDeepBailFromHasInstance.js
new file mode 100644
index 0000000000..6be2576838
--- /dev/null
+++ b/js/src/jit-test/tests/basic/testDeepBailFromHasInstance.js
@@ -0,0 +1,12 @@
+var arr = [Math, Math, Math, Math, {}];
+var obj = {};
+var x;
+var result = 'no error';
+try {
+    for (var i = 0; i < arr.length; i++)
+        x = (obj instanceof arr[i]);  // last iteration throws, triggering deep bail
+} catch (exc) {
+    result = exc.constructor.name;
+}
+assertEq(result, 'TypeError');
+