1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/js/src/jit-test/tests/ion/bug800179.js Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,24 @@
1.4 +// |jit-test| error: TypeError
1.5 +
1.6 +try {
1.7 + x = []
1.8 + y = function() {}
1.9 + t = Uint8ClampedArray
1.10 + Object.defineProperty(x, 1, {
1.11 + get: (function() {
1.12 + for (v of t) {}
1.13 + })
1.14 + })
1.15 + Object.defineProperty(x, 8, {
1.16 + configurable: t
1.17 + }).reverse()
1.18 +} catch (e) {}
1.19 +Object.defineProperty([], 1, {
1.20 + configurable: true,
1.21 + get: (function() {
1.22 + for (j = 0; j < 50; ++j) {
1.23 + y()
1.24 + }
1.25 + })
1.26 +}).pop()
1.27 +x.map(y)
