Merging upstream version 125.0.1.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 20 insertions, 0 deletions

diff --git a/js/src/jit-test/tests/wasm/regress/bug1880770.js b/js/src/jit-test/tests/wasm/regress/bug1880770.js
new file mode 100644
index 0000000000..0e748137d2
--- /dev/null
+++ b/js/src/jit-test/tests/wasm/regress/bug1880770.js
@@ -0,0 +1,20 @@
+// Check proper handling of OOM during segments creation.
+
+var x = {};
+Object.defineProperty(x, "", {
+  enumerable: true,
+  get: function () {
+    new WebAssembly.Instance(
+      new WebAssembly.Module(
+        wasmTextToBinary(
+          '(func $f (result f32) f32.const 0)(table (export "g") 1 funcref) (elem (i32.const 0) $f)'
+        )
+      )
+    ).exports.g
+      .get(0)
+      .type(WebAssembly, "", WebAssembly.Module, {});
+  },
+});
+oomTest(function () {
+  Object.values(x);
+});