1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/js/src/jit-test/tests/basic/bug535474.js Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,27 @@ 1.4 +function f() { 1.5 + var _76 = {}; 1.6 + for (var i = 0; i < arguments.length; i++) { 1.7 + var typ = arguments[i]; 1.8 + _76[typ] = typ; 1.9 + } 1.10 + return function () { 1.11 + for (var i = 0; i < arguments.length; i++) { 1.12 + if (!(typeof (arguments[i]) in _76)) { 1.13 + return false; 1.14 + } 1.15 + } 1.16 + return true; 1.17 + } 1.18 +} 1.19 + 1.20 +g = f("number", "boolean", "object"); 1.21 + 1.22 +g("a", "b", "c", "d", "e", "f", 2); 1.23 +g(2, "a", "b", "c", "d", "e", "f", 2); 1.24 + 1.25 +/* 1.26 + * Don't assert -- 1.27 + * Assertion failed: frame entry -4 wasn't freed 1.28 + * : _activation.entry[i] == 0 (../nanojit/Assembler.cpp:786) 1.29 + */ 1.30 +