1 files changed, 20 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/wasm/regress/bug1678785.js b/js/src/jit-test/tests/wasm/regress/bug1678785.js
new file mode 100644
index 0000000000..b04ac8480b
--- /dev/null
+++ b/js/src/jit-test/tests/wasm/regress/bug1678785.js
@@ -0,0 +1,20 @@
+
+// This exposed a bug in CL's aarch64 isel, in which the -4098 was
+// incorrectly sign-extended out to 64 bits.
+
+let { exports } = new WebAssembly.Instance(new WebAssembly.Module(
+    wasmTextToBinary(`
+      (module
+        (type (;0;) (func))
+        (type (;1;) (func (result i32)))
+        (type (;2;) (func (result i64)))
+        (func (;0;) (type 0)
+          i32.const -4098
+          i32.load16_s offset=1
+          drop)
+        (memory (;0;) 1)
+        (export "g" (func 0)))` )));
+try {
+    exports.g();
+} catch (e) {}
+