summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/ion/bug706692.js
blob: d30254590390b37591607d38b2d22cac9a18f77f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
// |jit-test| error: TypeError

// Bailout from a stack with multiple ion frames of different flavors.
function f(obj,b,c) {
	return obj(); // Throw error.
}

function g(f,obj) {
	return f(obj); // Call f() with insufficient arguments, generating a RectifierFrame.
}

function h(f, g, obj) {
	return g(f, obj); // EntryFrame. Generate a JSFrame.
}

f(); // Prime f().
g(); // Prime g().
var obj = new Object();

h(f,g,obj);