diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/ion/bug706692.js --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/js/src/jit-test/tests/ion/bug706692.js Wed Dec 31 06:09:35 2014 +0100 @@ -0,0 +1,21 @@ +// |jit-test| error: TypeError + +// Bailout from a stack with multiple ion frames of different flavors. +function f(obj,b,c) { + return obj(); // Throw error. +} + +function g(f,obj) { + return f(obj); // Call f() with insufficient arguments, generating a RectifierFrame. +} + +function h(f, g, obj) { + return g(f, obj); // EntryFrame. Generate a JSFrame. +} + +f(); // Prime f(). +g(); // Prime g(). +var obj = new Object(); + +h(f,g,obj); +