From 36d22d82aa202bb199967e9512281e9a53db42c9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 21:33:14 +0200 Subject: Adding upstream version 115.7.0esr. Signed-off-by: Daniel Baumann --- js/src/jit-test/tests/asm.js/bug1602675.js | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 js/src/jit-test/tests/asm.js/bug1602675.js (limited to 'js/src/jit-test/tests/asm.js/bug1602675.js') diff --git a/js/src/jit-test/tests/asm.js/bug1602675.js b/js/src/jit-test/tests/asm.js/bug1602675.js new file mode 100644 index 0000000000..facc68cf9e --- /dev/null +++ b/js/src/jit-test/tests/asm.js/bug1602675.js @@ -0,0 +1,19 @@ +// |jit-test| skip-if: !isAsmJSCompilationAvailable() +// +// Confusion between TA constructor and TA view led to invalid wasm code +// generation and a subsequent failure in the wasm verifier. This code should +// not validate; we should fall back to JS execution. + +function f(stdlib, foreign, buffer) { + "use asm"; + var i32 =stdlib.Int32Array + function g(i) { + i=i|0; + var j=0; + for (; (j>>>0) < 100000; j=(j+1)|0) + i32[i>>2] = j; + } + return g +} +var g = f(this, null, new ArrayBuffer(1<<16)); +g(1<<16); -- cgit v1.2.3