From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Fri, 19 Apr 2024 02:47:55 +0200
Subject: Adding upstream version 124.0.1.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 js/src/jit-test/tests/ion/bug800179.js | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 js/src/jit-test/tests/ion/bug800179.js

(limited to 'js/src/jit-test/tests/ion/bug800179.js')

diff --git a/js/src/jit-test/tests/ion/bug800179.js b/js/src/jit-test/tests/ion/bug800179.js
new file mode 100644
index 0000000000..91b9d87db2
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug800179.js
@@ -0,0 +1,24 @@
+// |jit-test| error: TypeError
+
+try {
+    x = []
+    y = function() {}
+    t = Uint8ClampedArray
+    Object.defineProperty(x, 1, {
+        get: (function() {
+            for (v of t) {}
+        })
+    })
+    Object.defineProperty(x, 8, {
+        configurable: t
+    }).reverse()
+} catch (e) {}
+Object.defineProperty([], 1, {
+    configurable: true,
+    get: (function() {
+        for (j = 0; j < 50; ++j) {
+            y()
+        }
+    })
+}).pop()
+x.map(y)
-- 
cgit v1.2.3