michael@0: var a = [1,2,3,4,5];
michael@0: 
michael@0: // Basic overflow in hoisted condition.
michael@0: function foo(x, n) {
michael@0:   var v = 0;
michael@0:   for (var i = 0; i < n; i++)
michael@0:     v += x[i];
michael@0:   return v;
michael@0: }
michael@0: for (var i = 0; i < 15; i++)
michael@0:   assertEq(foo(a, 5), 15);
michael@0: assertEq(foo(a, 6), NaN);
michael@0: 
michael@0: // Basic underflow in hoisted condition.
michael@0: function foo2(x, m, n) {
michael@0:   var v = 0;
michael@0:   for (var i = m; i < n; i++)
michael@0:     v += x[i];
michael@0:   return v;
michael@0: }
michael@0: for (var i = 0; i < 15; i++)
michael@0:   assertEq(foo2(a, 0, 5), 15);
michael@0: assertEq(foo2(a, -1, 5), NaN);
michael@0: 
michael@0: // Overflow when hoisting consolidated condition.
michael@0: function foo3(x, m, n) {
michael@0:   var v = 0;
michael@0:   for (var i = m; i < n; i++)
michael@0:     v += x[i] + x[i + 1] + x[i + 2];
michael@0:   return v;
michael@0: }
michael@0: for (var i = 0; i < 15; i++)
michael@0:   assertEq(foo3(a, 0, 3), 27);
michael@0: assertEq(foo3(a, 0, 4), NaN);
michael@0: 
michael@0: // Underflow when hoisting consolidated condition.
michael@0: function foo4(x, m, n) {
michael@0:   var v = 0;
michael@0:   for (var i = m; i < n; i++)
michael@0:     v += x[i] + x[i - 1] + x[i - 2];
michael@0:   return v;
michael@0: }
michael@0: for (var i = 0; i < 15; i++)
michael@0:   assertEq(foo4(a, 2, 5), 27);
michael@0: assertEq(foo4(a, 0, 5), NaN);
michael@0: 
michael@0: // Underflow due to decreasing index.
michael@0: function foo5(x, n) {
michael@0:   var v = 0;
michael@0:   for (var i = 0; i < n; i++) {
michael@0:     v += x[i];
michael@0:     if (n == 4)
michael@0:       i -= 2;
michael@0:     if (i == -5)
michael@0:       break;
michael@0:   }
michael@0:   return v;
michael@0: }
michael@0: for (var i = 0; i < 15; i++)
michael@0:   assertEq(foo5(a, 5), 15);
michael@0: assertEq(foo5(a, 4), NaN);
michael@0: 
michael@0: // Overflow after access at constant offset.
michael@0: function foo6(x, m, n) {
michael@0:   var v = 0;
michael@0:   for (var i = m; i < n; i++)
michael@0:     v += x[i + 10];
michael@0:   return v;
michael@0: }
michael@0: for (var i = 0; i < 15; i++)
michael@0:   assertEq(foo6(a, -10, -5), 15);
michael@0: assertEq(foo6(a, -10, -4), NaN);
michael@0: 
michael@0: // Underflow after access at constant offset.
michael@0: function foo7(x, m, n) {
michael@0:   var v = 0;
michael@0:   for (var i = m; i < n; i++)
michael@0:     v += x[i + 10];
michael@0:   return v;
michael@0: }
michael@0: for (var i = 0; i < 15; i++)
michael@0:   assertEq(foo7(a, -10, -5), 15);
michael@0: assertEq(foo7(a, -11, -5), NaN);