Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 19 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/warp/bug1683309.js b/js/src/jit-test/tests/warp/bug1683309.js
new file mode 100644
index 0000000000..63a0defe4e
--- /dev/null
+++ b/js/src/jit-test/tests/warp/bug1683309.js
@@ -0,0 +1,19 @@
+// |jit-test| slow; --ion-offthread-compile=off;
+//
+// Bug 1683309: Assertion failure: [barrier verifier] Unmarked edge: JS Object 0xebbb6d1dee0 'object slot' edge to JS Object 0xebbb6d29f60, at gc/Verifier.cpp:392
+
+
+if (helperThreadCount() > 0) {
+  evalInWorker(`
+  try{
+    gczeal(4);
+    function f86(depth) {
+      var x = async target => ([]);
+      o62 = unescape;
+      x(o62.prop, o62);
+      f86(true + 1);
+    }
+    f86(0);
+  } catch (e) {}
+  `);
+}