michael@0: /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
michael@0: /* This Source Code Form is subject to the terms of the Mozilla Public
michael@0:  * License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0:  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
michael@0: 
michael@0: //-----------------------------------------------------------------------------
michael@0: var BUGNUMBER = 481436;
michael@0: var summary = 'TM: Do not crash @ FlushNativeStackFrame/JS_XDRNewMem';
michael@0: var actual = '';
michael@0: var expect = '';
michael@0: 
michael@0: 
michael@0: printBugNumber(BUGNUMBER);
michael@0: printStatus (summary);
michael@0: 
michael@0: jit(true);
michael@0: 
michael@0: function search(m, n) {
michael@0:   if (m.name == n)
michael@0:     return m;
michael@0:   for (var i = 0; i < m.items.length; i++)
michael@0:     if (m.items[i].type == 'M')
michael@0:       search(m.items[i], n);
michael@0: }
michael@0: 
michael@0: function crash() {
michael@0:   for (var i = 0; i < 2; i++) {
michael@0:     var root = {name: 'root', type: 'M', items: [{}]};
michael@0:     search(root, 'x');
michael@0:     root.items.push({name: 'tim', type: 'M', items: []});
michael@0:     search(root, 'x');
michael@0:     search(root, 'x');
michael@0:   }
michael@0: }
michael@0: 
michael@0: crash();
michael@0: 
michael@0: jit(false);
michael@0: 
michael@0: reportCompare(expect, actual, summary);