From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 02:47:55 +0200 Subject: Adding upstream version 124.0.1. Signed-off-by: Daniel Baumann --- js/src/jit-test/tests/wasm/bigint/bug1633740.js | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 js/src/jit-test/tests/wasm/bigint/bug1633740.js (limited to 'js/src/jit-test/tests/wasm/bigint/bug1633740.js') diff --git a/js/src/jit-test/tests/wasm/bigint/bug1633740.js b/js/src/jit-test/tests/wasm/bigint/bug1633740.js new file mode 100644 index 0000000000..773e8932d9 --- /dev/null +++ b/js/src/jit-test/tests/wasm/bigint/bug1633740.js @@ -0,0 +1,25 @@ +// Test for bug 1633740, an intermittent GC-related crash caused by +// the bigint/i64 conversion in inlined Ion to Wasm calls. + +// Used to help ensure this will trigger the Ion inlined call path. +var threshold = 2 * getJitCompilerOptions()["ion.warmup.trigger"] + 10; +function testWithJit(f) { + for (var i = 0; i < threshold; i++) { + f(); + } +} + +function test() { + var exports = wasmEvalText(`(module + (func (export "f") (param i64) (result i64) + (local.get 0) + ))`).exports; + var f = exports.f; + + testWithJit(() => { + assertEq(f("5"), 5n); + }); +} + +gczeal(7, 1); // Collect nursery on every allocation. +test(); -- cgit v1.2.3