1 files changed, 160 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/cacheir/add-dense-element-non-writable-length.js b/js/src/jit-test/tests/cacheir/add-dense-element-non-writable-length.js
new file mode 100644
index 0000000000..635ee07186
--- /dev/null
+++ b/js/src/jit-test/tests/cacheir/add-dense-element-non-writable-length.js
@@ -0,0 +1,160 @@
+// Add dense elements to packed and non-packed arrays. Cover both mono- and
+// polymorphic call sites. Change array length to non-writable during execution.
+
+function testAddDenseEmpty() {
+  var array = [];
+
+  function store(ar, index) {
+    ar[index] = index;
+  }
+
+  for (var i = 0; i < 10; ++i) {
+    if (i === 5) {
+      Object.defineProperty(array, "length", {writable: false});
+    }
+    store(array, i);
+  }
+
+  assertEq(array.length, 5);
+  for (var i = 0; i < 5; ++i) {
+    assertEq(array[i], i);
+  }
+  for (var i = 5; i < 10; ++i) {
+    assertEq(i in array, false);
+  }
+}
+testAddDenseEmpty();
+
+function testAddDensePacked() {
+  var array = [0, 1];
+
+  function store(ar, index) {
+    ar[index] = index;
+  }
+
+  for (var i = 2; i < 10; ++i) {
+    if (i === 5) {
+      Object.defineProperty(array, "length", {writable: false});
+    }
+    store(array, i);
+  }
+
+  assertEq(array.length, 5);
+  for (var i = 0; i < 5; ++i) {
+    assertEq(array[i], i);
+  }
+  for (var i = 5; i < 10; ++i) {
+    assertEq(i in array, false);
+  }
+}
+testAddDensePacked();
+
+function testAddDenseNonPacked() {
+  var array = [/* hole */, 1];
+
+  function store(ar, index) {
+    ar[index] = index;
+  }
+
+  for (var i = 2; i < 10; ++i) {
+    if (i === 5) {
+      Object.defineProperty(array, "length", {writable: false});
+    }
+    store(array, i);
+  }
+
+  assertEq(array.length, 5);
+  assertEq(0 in array, false);
+  for (var i = 1; i < 5; ++i) {
+    assertEq(array[i], i);
+  }
+  for (var i = 5; i < 10; ++i) {
+    assertEq(i in array, false);
+  }
+}
+testAddDenseNonPacked();
+
+function testAddDenseEmptyPoly() {
+  var array = [];
+
+  function store(ar, index) {
+    ar[index] = index;
+  }
+
+  var objects = [array, {}];
+
+  for (var i = 0; i < 10; ++i) {
+    if (i === 5) {
+      Object.defineProperty(array, "length", {writable: false});
+    }
+    for (var j = 0; j < objects.length; ++j) {
+      store(objects[j], i);
+    }
+  }
+
+  assertEq(array.length, 5);
+  for (var i = 0; i < 5; ++i) {
+    assertEq(array[i], i);
+  }
+  for (var i = 5; i < 10; ++i) {
+    assertEq(i in array, false);
+  }
+}
+testAddDenseEmptyPoly();
+
+function testAddDensePackedPoly() {
+  var array = [0, 1];
+
+  function store(ar, index) {
+    ar[index] = index;
+  }
+
+  var objects = [array, {}];
+
+  for (var i = 2; i < 10; ++i) {
+    if (i === 5) {
+      Object.defineProperty(array, "length", {writable: false});
+    }
+    for (var j = 0; j < objects.length; ++j) {
+      store(objects[j], i);
+    }
+  }
+
+  assertEq(array.length, 5);
+  for (var i = 0; i < 5; ++i) {
+    assertEq(array[i], i);
+  }
+  for (var i = 5; i < 10; ++i) {
+    assertEq(i in array, false);
+  }
+}
+testAddDensePackedPoly();
+
+function testAddDenseNonPackedPoly() {
+  var array = [/* hole */, 1];
+
+  function store(ar, index) {
+    ar[index] = index;
+  }
+
+  var objects = [array, {}];
+
+  for (var i = 2; i < 10; ++i) {
+    if (i === 5) {
+      Object.defineProperty(array, "length", {writable: false});
+    }
+    for (var j = 0; j < objects.length; ++j) {
+      store(objects[j], i);
+    }
+  }
+
+  assertEq(array.length, 5);
+  assertEq(0 in array, false);
+  for (var i = 1; i < 5; ++i) {
+    assertEq(array[i], i);
+  }
+  for (var i = 5; i < 10; ++i) {
+    assertEq(i in array, false);
+  }
+}
+testAddDenseNonPackedPoly();