1 files changed, 38 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/baseline/bug1209585.js b/js/src/jit-test/tests/baseline/bug1209585.js
new file mode 100644
index 0000000000..6873fe37d5
--- /dev/null
+++ b/js/src/jit-test/tests/baseline/bug1209585.js
@@ -0,0 +1,38 @@
+// |jit-test| skip-if: helperThreadCount() === 0 || !('oomAtAllocation' in this)
+
+if ("gczeal" in this)
+    gczeal(0);
+
+eval("g=function() {}")
+var lfGlobal = newGlobal();
+for (lfLocal in this) {
+    if (!(lfLocal in lfGlobal)) {
+        lfGlobal[lfLocal] = this[lfLocal];
+    }
+}
+lfGlobal.offThreadCompileToStencil(`
+if (!("oomAtAllocation" in this && "resetOOMFailure" in this))
+    gczeal(0);
+function oomTest(f) {
+    var i = 1;
+    do {
+        try {
+            oomAtAllocation(i);
+            f();
+            more = resetOOMFailure();
+        } catch (e) {
+            more = resetOOMFailure();
+        }
+        i++;
+    } while(more);
+}
+var g = newGlobal();
+oomTest(function() { new revocable(); });
+`);
+try {
+    var stencil = lfGlobal.finishOffThreadStencil();
+    lfGlobal.evalStencil(stencil);
+} catch(e) {
+    // This can happen if we OOM while bailing out in Ion.
+    assertEq(e, "out of memory");
+}