js/src/jit-test/tests/gc/bug-832103.js

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/gc/bug-832103.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,27 @@
     1.4 +//|jit-test| error:TypeError
     1.5 +RegExp("").exec()
     1.6 +Object.defineProperty(this, "x", {
     1.7 +    get: function() {
     1.8 +        return new Array
     1.9 +    }
    1.10 +})
    1.11 +Object.defineProperty(this, "y", {
    1.12 +    get: function() {
    1.13 +        return [function() {}, 0, 0, 0, 0, 0, 0]
    1.14 +    }
    1.15 +})
    1.16 +r = RegExp("");
    1.17 +uneval(undefined)
    1.18 +with({
    1.19 +    b: gczeal(9, 2)
    1.20 +});
    1.21 +r = /()/;
    1.22 +y.sort(function(j) {
    1.23 +    if (j) {
    1.24 +        a =
    1.25 +        new
    1.26 +        Array
    1.27 +    } else {
    1.28 +        x.v()
    1.29 +    }
    1.30 +})

mercurial