Merging upstream version 125.0.1.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 22 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/ion/bug1877709.js b/js/src/jit-test/tests/ion/bug1877709.js
new file mode 100644
index 0000000000..1dac277a90
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug1877709.js
@@ -0,0 +1,22 @@
+function testMathyFunction (f, inputs) {
+  var results = [];
+    for (var j = 0; j < inputs.length; ++j)
+      for (var k = 0; k < inputs.length; ++k)
+        results.push(f(inputs[j], inputs[k]));
+}
+mathy1=(function(stdlib,foreign,heap){
+  ff = foreign.ff;
+  Float32ArrayView = new stdlib.Float32Array(heap);
+  Uint32ArrayView = new stdlib.Uint32Array(heap);
+  function f(d0) {
+    var i2=0;
+    var i4;
+    i2=Float32ArrayView[2];
+    i4=i2;
+    ff(2,0) ? f : 6;
+    Uint32ArrayView[!!d0] + [...[eval]]
+    return i4 ? 1 : 0;
+  }
+return f
+})(this,{ ff:(Function('')) },new SharedArrayBuffer(40));
+testMathyFunction(mathy1,[Math.N,Number.M,(2),Number.M])