1 files changed, 76 insertions, 0 deletions
diff --git a/js/src/tests/non262/statements/for-in-with-gc-and-unvisited-deletion.js b/js/src/tests/non262/statements/for-in-with-gc-and-unvisited-deletion.js
new file mode 100644
index 0000000000..34e1eba1ec
--- /dev/null
+++ b/js/src/tests/non262/statements/for-in-with-gc-and-unvisited-deletion.js
@@ -0,0 +1,76 @@
+// Any copyright is dedicated to the Public Domain.
+// http://creativecommons.org/licenses/publicdomain/
+
+//-----------------------------------------------------------------------------
+var gTestfile = "for-in-with-gc-and-unvisited-deletion.js";
+var BUGNUMBER = 1462939;
+var summary =
+  "Don't mishandle deletion of a property from the internal iterator " +
+  "created for a for-in loop, when a gc occurs just after it";
+
+print(BUGNUMBER + ": " + summary);
+
+/**************
+ * BEGIN TEST *
+ **************/
+
+function testOneDeletion()
+{
+  var o = {
+    p: 1,
+    r: 3,
+    s: 4,
+  };
+
+  for (var i in o)
+  {
+    gc();
+    delete o.s;
+  }
+}
+testOneDeletion();
+
+function testTwoDeletions()
+{
+  var o = {
+    p: 1,
+    r: 3,
+    s: 4,
+    t: 5,
+  };
+
+  for (var i in o)
+  {
+    gc();
+    delete o.t;
+    delete o.s;
+  }
+}
+testTwoDeletions();
+
+function testThreeDeletions()
+{
+  var o = {
+    p: 1,
+    r: 3,
+    s: 4,
+    t: 5,
+    x: 7,
+  };
+
+  for (var i in o)
+  {
+    gc();
+    delete o.x;
+    delete o.t;
+    delete o.s;
+  }
+}
+testThreeDeletions();
+
+/******************************************************************************/
+
+if (typeof reportCompare === "function")
+  reportCompare(true, true);
+
+print("Tests complete");