diff options
Diffstat (limited to 'js/src/jit-test/tests/ion/result-type-mutated.js')
-rw-r--r-- | js/src/jit-test/tests/ion/result-type-mutated.js | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/result-type-mutated.js b/js/src/jit-test/tests/ion/result-type-mutated.js new file mode 100644 index 0000000000..601a6d6176 --- /dev/null +++ b/js/src/jit-test/tests/ion/result-type-mutated.js @@ -0,0 +1,18 @@ +// jitcode which uses objects of one type might not be invalidated when that +// object changes type, if the object isn't accessed in any way. + +function foo(x) { + return x.f; +} + +function bar() { + with({}){} + + var a = {}; + var b = { f: a }; + foo(b); + a.__proto__ = null; + foo(b); +} + +bar(); |