Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 32 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/proxy/bug1853180-2.js b/js/src/jit-test/tests/proxy/bug1853180-2.js
new file mode 100644
index 0000000000..97b7face46
--- /dev/null
+++ b/js/src/jit-test/tests/proxy/bug1853180-2.js
@@ -0,0 +1,32 @@
+// |jit-test| --fast-warmup
+
+function foo(o) {
+  return o.x;
+}
+
+with ({}) {}
+
+var trigger = false;
+
+var handler = {
+  get: (target, prop) => {
+    if (trigger) {
+      transplant(newGlobal({newCompartment: true}));
+    }
+    return 1;
+  },
+  getOwnPropertyDescriptor: (target, prop) => {
+    return Object.getOwnPropertyDescriptor(target, prop);
+  }
+}
+
+let {object, transplant} = transplantableObject();
+Object.defineProperty(object, 'x', { value: 1, configurable: false, writable: false });
+
+var proxy = new Proxy(object, handler);
+for (var i = 0; i < 50; i++) {
+  foo(proxy);
+}
+
+trigger = true;
+foo(proxy);