From 36d22d82aa202bb199967e9512281e9a53db42c9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 21:33:14 +0200 Subject: Adding upstream version 115.7.0esr. Signed-off-by: Daniel Baumann --- .../tests/basic/dense-elements-hole-negative.js | 31 ++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 js/src/jit-test/tests/basic/dense-elements-hole-negative.js (limited to 'js/src/jit-test/tests/basic/dense-elements-hole-negative.js') diff --git a/js/src/jit-test/tests/basic/dense-elements-hole-negative.js b/js/src/jit-test/tests/basic/dense-elements-hole-negative.js new file mode 100644 index 0000000000..cf63da92e0 --- /dev/null +++ b/js/src/jit-test/tests/basic/dense-elements-hole-negative.js @@ -0,0 +1,31 @@ +// The index is negative before code generation. + +let v = {}; +let negativeIndex = -1; + +function f(obj) { + assertEq(obj[negativeIndex] === v, true); +} +for (let i = 0; i < 2000; i++) { + let obj = {}; + obj[1] = {}; + obj[negativeIndex] = v; + f(obj); +} + +// The sign of the index changes after the code generation. + +function g(obj, i) { + for (let j = 0; j < 4; j++) { + assertEq(obj[i-j] === v, true); + } +} +for (let i = 0; i < 2000; i++) { + let obj = {}; + obj[1] = {}; + let X = 2000 - i; + for (let j = 0; j < 10; j++) { + obj[X-j] = v; + } + g(obj, X); +} -- cgit v1.2.3