diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-19 00:47:55 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-19 00:47:55 +0000 |
commit | 26a029d407be480d791972afb5975cf62c9360a6 (patch) | |
tree | f435a8308119effd964b339f76abb83a57c29483 /js/src/jit-test/tests/ion/bug1812508.js | |
parent | Initial commit. (diff) | |
download | firefox-26a029d407be480d791972afb5975cf62c9360a6.tar.xz firefox-26a029d407be480d791972afb5975cf62c9360a6.zip |
Adding upstream version 124.0.1.upstream/124.0.1
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'js/src/jit-test/tests/ion/bug1812508.js')
-rw-r--r-- | js/src/jit-test/tests/ion/bug1812508.js | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/bug1812508.js b/js/src/jit-test/tests/ion/bug1812508.js new file mode 100644 index 0000000000..f08981c3ab --- /dev/null +++ b/js/src/jit-test/tests/ion/bug1812508.js @@ -0,0 +1,53 @@ +let toBeIncremented = 0; +function megamorphicGetIncremented(thisIsMegamorphic, thisIsAlwaysTrue) { + // We need this to always evaluate as foo, and have an else clause which + // would bail if we ever hit it. + let key = thisIsAlwaysTrue ? "foo" : thisIsMegamorphic.bob; + + // The first megamorphic load: + if (!thisIsMegamorphic[key]) { + // The store which invalidates it + thisIsMegamorphic[key] = ++toBeIncremented; + } + // The megamorphic load which was bugged + return thisIsMegamorphic[key]; +} + +// We just need enough shapes to go megamorphic. Put in a bunch though +// just to be sure +let objShapes = [ + {a: 1}, + // We need the shapes to occasionally have "foo" defined, but be false, + // otherwise stub folding will mean we don't go megamorphic because + // we'll just attach "Missing" which in our case just differs by a + // single shape guard. + {b: 1, baz: 2, foo: false}, + {c: 1}, + {d: 1, baz: 2, foo: false}, + {e: 1}, + {f: 1, baz: 2, foo: false}, + {g: 1}, + {h: 1, baz: 2, foo: false}, + {i: 1}, + {j: 1, baz: 2, foo: false}, + {k: 1}, + {l: 1, baz: 2, foo: false}, + {m: 1}, + {n: 1, baz: 2, foo: false}, + {o: 1}, + {p: 1, baz: 2, foo: false}, + {q: 1}, + {r: 1, baz: 2, foo: false}, + {s: 1}, + {t: 1, baz: 2, foo: false}, +]; +let objs = []; +for (let i = 0; i < 100; i++) { + let obj = Object.assign({}, objShapes[i % objShapes.length]); + objs.push(obj); +} + +for (let i = 1; i < 100; i++) { + let id = megamorphicGetIncremented(objs[i], true); + assertEq(id, i); +} |