From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 02:47:55 +0200 Subject: Adding upstream version 124.0.1. Signed-off-by: Daniel Baumann --- js/src/tests/non262/regress/regress-481436.js | 38 +++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 js/src/tests/non262/regress/regress-481436.js (limited to 'js/src/tests/non262/regress/regress-481436.js') diff --git a/js/src/tests/non262/regress/regress-481436.js b/js/src/tests/non262/regress/regress-481436.js new file mode 100644 index 0000000000..8520e2ffae --- /dev/null +++ b/js/src/tests/non262/regress/regress-481436.js @@ -0,0 +1,38 @@ +/* -*- indent-tabs-mode: nil; js-indent-level: 2 -*- */ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +//----------------------------------------------------------------------------- +var BUGNUMBER = 481436; +var summary = 'TM: Do not crash @ FlushNativeStackFrame/JS_XDRNewMem'; +var actual = ''; +var expect = ''; + + +printBugNumber(BUGNUMBER); +printStatus (summary); + + +function search(m, n) { + if (m.name == n) + return m; + for (var i = 0; i < m.items.length; i++) + if (m.items[i].type == 'M') + search(m.items[i], n); +} + +function crash() { + for (var i = 0; i < 2; i++) { + var root = {name: 'root', type: 'M', items: [{}]}; + search(root, 'x'); + root.items.push({name: 'tim', type: 'M', items: []}); + search(root, 'x'); + search(root, 'x'); + } +} + +crash(); + + +reportCompare(expect, actual, summary); -- cgit v1.2.3