From 36d22d82aa202bb199967e9512281e9a53db42c9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 21:33:14 +0200 Subject: Adding upstream version 115.7.0esr. Signed-off-by: Daniel Baumann --- js/src/jit-test/tests/ion/bug998059.js | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 js/src/jit-test/tests/ion/bug998059.js (limited to 'js/src/jit-test/tests/ion/bug998059.js') diff --git a/js/src/jit-test/tests/ion/bug998059.js b/js/src/jit-test/tests/ion/bug998059.js new file mode 100644 index 0000000000..fc2c68d7f5 --- /dev/null +++ b/js/src/jit-test/tests/ion/bug998059.js @@ -0,0 +1,25 @@ +// Test various ways of changing the behavior of |typedArray.length|. + +function addLengthProperty() { + var x = new Uint16Array(); + Object.defineProperty(x, "length", {value:1}); + for (var i = 0; i < 5; i++) + assertEq(x.length, 1); +} +addLengthProperty(); + +function changePrototype() { + var x = new Uint16Array(); + x.__proto__ = [0]; + for (var i = 0; i < 5; i++) + assertEq(x.length, 1); +} +changePrototype(); + +function redefineLengthProperty() { + var x = new Uint16Array(); + Object.defineProperty(Uint16Array.prototype, "length", {value:1}); + for (var i = 0; i < 5; i++) + assertEq(x.length, 1); +} +redefineLengthProperty(); -- cgit v1.2.3