Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 25 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/wasm/bigint/bug1633740.js b/js/src/jit-test/tests/wasm/bigint/bug1633740.js
new file mode 100644
index 0000000000..773e8932d9
--- /dev/null
+++ b/js/src/jit-test/tests/wasm/bigint/bug1633740.js
@@ -0,0 +1,25 @@
+// Test for bug 1633740, an intermittent GC-related crash caused by
+// the bigint/i64 conversion in inlined Ion to Wasm calls.
+
+// Used to help ensure this will trigger the Ion inlined call path.
+var threshold = 2 * getJitCompilerOptions()["ion.warmup.trigger"] + 10;
+function testWithJit(f) {
+  for (var i = 0; i < threshold; i++) {
+    f();
+  }
+}
+
+function test() {
+  var exports = wasmEvalText(`(module
+    (func (export "f") (param i64) (result i64)
+      (local.get 0)
+    ))`).exports;
+  var f = exports.f;
+
+  testWithJit(() => {
+    assertEq(f("5"), 5n);
+  });
+}
+
+gczeal(7, 1); // Collect nursery on every allocation.
+test();