From 36d22d82aa202bb199967e9512281e9a53db42c9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 21:33:14 +0200 Subject: Adding upstream version 115.7.0esr. Signed-off-by: Daniel Baumann --- js/src/jit-test/tests/arrays/sort-update-types.js | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 js/src/jit-test/tests/arrays/sort-update-types.js (limited to 'js/src/jit-test/tests/arrays/sort-update-types.js') diff --git a/js/src/jit-test/tests/arrays/sort-update-types.js b/js/src/jit-test/tests/arrays/sort-update-types.js new file mode 100644 index 0000000000..ab0063fd49 --- /dev/null +++ b/js/src/jit-test/tests/arrays/sort-update-types.js @@ -0,0 +1,20 @@ +Object.setPrototypeOf(Array.prototype, { + get 0() { + Object.setPrototypeOf(Array.prototype, Object.prototype); + return "159".repeat(5).substring(2, 5); + } +}); + +var array = [ + /*0*/, 1, 2, 3, 4, 5, 6, 7, 8, 9, + 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, + 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, + 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, +]; + +array.sort(); + +gc(); + +var r = array[array.length - 1] * 1; +assertEq(r, 915); -- cgit v1.2.3