From 36d22d82aa202bb199967e9512281e9a53db42c9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 21:33:14 +0200 Subject: Adding upstream version 115.7.0esr. Signed-off-by: Daniel Baumann --- js/src/tests/non262/regress/regress-592556-c35.js | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 js/src/tests/non262/regress/regress-592556-c35.js (limited to 'js/src/tests/non262/regress/regress-592556-c35.js') diff --git a/js/src/tests/non262/regress/regress-592556-c35.js b/js/src/tests/non262/regress/regress-592556-c35.js new file mode 100644 index 0000000000..c2ceb4a321 --- /dev/null +++ b/js/src/tests/non262/regress/regress-592556-c35.js @@ -0,0 +1,20 @@ +// Any copyright is dedicated to the Public Domain. +// http://creativecommons.org/licenses/publicdomain/ +// Contributor: Jason Orendorff + +var obj = {a: 0, b: 1, c: 2}; +delete obj.b; // switch to dictionary mode +Object.defineProperty(obj, 'g', + {get: function () { return -1; }, configurable: true}); +for (var i = 3; i < 20; i++) + obj['x' + i] = i; // get property table +for (var i = 3; i < 20; i++) + delete obj['x' + i]; // add to freelist +delete obj.g; // must update lastProp->freeslot, to avoid assertion + +// extra junk to try to hit the assertion, if freeslot is not updated +gc(); +obj.d = 3; +obj.e = 4; + +reportCompare(0, 0, 'ok'); -- cgit v1.2.3