summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/ion/bug800179.js
blob: 91b9d87db2108d2f3c552e08e7a646d897ed39f2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
// |jit-test| error: TypeError

try {
    x = []
    y = function() {}
    t = Uint8ClampedArray
    Object.defineProperty(x, 1, {
        get: (function() {
            for (v of t) {}
        })
    })
    Object.defineProperty(x, 8, {
        configurable: t
    }).reverse()
} catch (e) {}
Object.defineProperty([], 1, {
    configurable: true,
    get: (function() {
        for (j = 0; j < 50; ++j) {
            y()
        }
    })
}).pop()
x.map(y)