From 36d22d82aa202bb199967e9512281e9a53db42c9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 21:33:14 +0200 Subject: Adding upstream version 115.7.0esr. Signed-off-by: Daniel Baumann --- .../jit-test/tests/ion/fold-linear-arith-bug1528829.js | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 js/src/jit-test/tests/ion/fold-linear-arith-bug1528829.js (limited to 'js/src/jit-test/tests/ion/fold-linear-arith-bug1528829.js') diff --git a/js/src/jit-test/tests/ion/fold-linear-arith-bug1528829.js b/js/src/jit-test/tests/ion/fold-linear-arith-bug1528829.js new file mode 100644 index 0000000000..e4529c1bfb --- /dev/null +++ b/js/src/jit-test/tests/ion/fold-linear-arith-bug1528829.js @@ -0,0 +1,18 @@ +// |jit-test| --ion-warmup-threshold=0; --ion-check-range-analysis + +function f(o) { + // Int32 math does an overflow check. + o += 1; + // Int32 math does an underflow check. + o += -2147483647; + // If previous math operations are folded, we should keep the smallest + // overflow check and the highest underflow check to stay within the + // expected range deduced by Range Analysis. + for (let i = 0; i < 1; ++i) { + o -= 1; + } +} +f(0); +f(0); +f(2147483647); + -- cgit v1.2.3