js/src/jit-test/tests/jaeger/bug651147.js

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/jaeger/bug651147.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,7 @@
     1.4 +var BUGNUMBER = 96284;
     1.5 +var BUGNUMBER = "410725";
     1.6 +function iteratorToArray(iterator) {
     1.7 +    var result = [];
     1.8 +    for (var i in iterator) BUGNUMBER[result.length];
     1.9 +}
    1.10 +try { obj = { a: 1, }('["a", "b"]', iteratorToArray(), 'uneval(iteratorToArray(new Iterator(obj,true)))'); } catch (e) { }

mercurial