js/src/jit-test/tests/auto-regress/bug737737.js@6474c204b198
js/src/jit-test/tests/auto-regress/bug737737.js
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 // Binary: cache/js-dbg-32-e96d5b1f47b8-linux
2 // Flags: --ion-eager
3 //
4 function b(z) {
5 switch (z) {
6 default:
7 primarySandbox = newGlobal()
8 }
9 return function(f, code) {
10 try {
11 evalcx(code, primarySandbox)
12 } catch (e) {}
13 }
14 }
15 function a(code) {
16 gc();
17 f = Function(code)
18 c(f, code)
19 }
20 c = b()
21 a("\
22 f2 = (function() {\
23 a0 + o2.m;\
24 a2.shift()\
25 });\
26 a2 = new Array;\
27 Object.defineProperty(a2, 0, {\
28 get: f2\
29 });\
30 o2 = {};\
31 a0 = [];\
32 a2.shift();\
33 var x;\
34 ")
35 a("a0 = x")
36 a("a2.shift()")
