1 files changed, 48 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/inlining/getelem-getter-bailout.js b/js/src/jit-test/tests/ion/inlining/getelem-getter-bailout.js
new file mode 100644
index 0000000000..71fc680a8a
--- /dev/null
+++ b/js/src/jit-test/tests/ion/inlining/getelem-getter-bailout.js
@@ -0,0 +1,48 @@
+// Test bailouts in inlined jsop_getelem accesses.
+
+// Defined outside of the test functions to ensure they're recognised as
+// constants in Ion.
+var atom = "prop";
+var symbol = Symbol();
+
+function testAtom() {
+    var holder = {
+        get [atom]() {
+            bailout();
+            return 1;
+        }
+    };
+
+    function f() {
+        for (var i = 0; i < 2000; ++i) {
+            var x = holder[atom];
+            assertEq(x, 1);
+        }
+    }
+
+    for (var i = 0; i < 2; i++) {
+        f();
+    }
+}
+testAtom();
+
+function testSymbol() {
+    var holder = {
+        get [symbol]() {
+            bailout();
+            return 1;
+        }
+    };
+
+    function f() {
+        for (var i = 0; i < 2000; ++i) {
+            var x = holder[symbol];
+            assertEq(x, 1);
+        }
+    }
+
+    for (var i = 0; i < 2; i++) {
+        f();
+    }
+}
+testSymbol();