From 36d22d82aa202bb199967e9512281e9a53db42c9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 21:33:14 +0200 Subject: Adding upstream version 115.7.0esr. Signed-off-by: Daniel Baumann --- js/src/jit-test/tests/ion/bug1527148.js | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 js/src/jit-test/tests/ion/bug1527148.js (limited to 'js/src/jit-test/tests/ion/bug1527148.js') diff --git a/js/src/jit-test/tests/ion/bug1527148.js b/js/src/jit-test/tests/ion/bug1527148.js new file mode 100644 index 0000000000..509dbb90b5 --- /dev/null +++ b/js/src/jit-test/tests/ion/bug1527148.js @@ -0,0 +1,17 @@ +var log = ""; +function g() { + var x = []; + for (var k = 0; k < 2; ++k) { + x.push(k); + } + log += x; +} +for (var i = 0; i < 1; i++) { + f = function() {}; +} +g(); +Array.prototype.push = f; +g(); +f.__proto__ = []; +g(); +assertEq(log, "0,1"); -- cgit v1.2.3