From 36d22d82aa202bb199967e9512281e9a53db42c9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 21:33:14 +0200 Subject: Adding upstream version 115.7.0esr. Signed-off-by: Daniel Baumann --- js/src/tests/non262/regress/regress-419018.js | 44 +++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 js/src/tests/non262/regress/regress-419018.js (limited to 'js/src/tests/non262/regress/regress-419018.js') diff --git a/js/src/tests/non262/regress/regress-419018.js b/js/src/tests/non262/regress/regress-419018.js new file mode 100644 index 0000000000..43627cb677 --- /dev/null +++ b/js/src/tests/non262/regress/regress-419018.js @@ -0,0 +1,44 @@ +/* -*- indent-tabs-mode: nil; js-indent-level: 2 -*- */ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +//----------------------------------------------------------------------------- +var BUGNUMBER = 419018; +var summary = 'UMR in JSENUMERATE_INIT'; +var actual = 'No Crash'; +var expect = 'No Crash'; + +//----------------------------------------------------------------------------- +test(); +//----------------------------------------------------------------------------- + +function test() +{ + printBugNumber(BUGNUMBER); + printStatus (summary); + + print('This test must be run under valgrind to check if an UMR occurs in slowarray_enumerate'); + + try + { + function parse() { + var a = []; // need array init + a["b"] = 1; // need to set obj property + return a; + } + // var c; // can't declare c + // var d = {}; // can't add this (weird!) + // var d = ""; // nor this + var x = parse(""); // won't crash without string arg (weird!) + // var d = ""; // nor here + for (var o in x) + c[o]; // need to look up o in undefined object + } + catch(ex) + { + } + + reportCompare(expect, actual, summary); +} + -- cgit v1.2.3