js/src/jit-test/tests/ion/bug706692.js

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/ion/bug706692.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,21 @@
     1.4 +// |jit-test| error: TypeError
     1.5 +
     1.6 +// Bailout from a stack with multiple ion frames of different flavors.
     1.7 +function f(obj,b,c) {
     1.8 +	return obj(); // Throw error.
     1.9 +}
    1.10 +
    1.11 +function g(f,obj) {
    1.12 +	return f(obj); // Call f() with insufficient arguments, generating a RectifierFrame.
    1.13 +}
    1.14 +
    1.15 +function h(f, g, obj) {
    1.16 +	return g(f, obj); // EntryFrame. Generate a JSFrame.
    1.17 +}
    1.18 +
    1.19 +f(); // Prime f().
    1.20 +g(); // Prime g().
    1.21 +var obj = new Object();
    1.22 +
    1.23 +h(f,g,obj);
    1.24 +

mercurial