1 files changed, 55 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/getprop-primitive.js b/js/src/jit-test/tests/ion/getprop-primitive.js
new file mode 100644
index 000000000..27606c413
--- /dev/null
+++ b/js/src/jit-test/tests/ion/getprop-primitive.js
@@ -0,0 +1,55 @@
+
+var testSet1 = [1, "", Symbol("a"), true];
+var testSet2 = [1, "", Symbol("a"), true, { bar: 5 }];
+
+Number.prototype.bar = 1;
+String.prototype.bar = 2;
+Symbol.prototype.bar = 3;
+Boolean.prototype.bar = 4;
+
+function assertEqIf(prev, curr, expected) {
+    // Branch pruning absolutely want to get rid of the next branch
+    // which causes bailouts, so we forbid inlining of this function.
+    with({}){}
+    if (prev) {
+        assertEq(curr, expected);
+        return false;
+    }
+    return true;
+}
+
+var f;
+var template = function (set) {
+    var lastX = 0, x = 0, i = 0, y = 0;
+    var cont = true;
+    while (cont) { // OSR here.
+        for (var i = 0; i < set.length; i++) {
+            x = x + (inIon() ? 1 : 0);
+            if (set[i].placeholder != set[(i + 1) % set.length].placeholder)
+                y += 1;
+        }
+
+        // If we bailout in the inner loop, then x will have a smaller value
+        // than the number of iterations.
+        cont = assertEqIf(lastX > 0, x, set.length);
+        lastX = x;
+        x = 0;
+    }
+    return y;
+}
+
+// Set 1, Non existing properties.
+f = eval(template.toSource().replace(".placeholder", ".foo"));
+f(testSet1);
+
+// Set 2, Non existing properties.
+f = eval(template.toSource().replace(".placeholder", ".foo"));
+f(testSet2);
+
+// Set 1, Existing properties.
+f = eval(template.toSource().replace(".placeholder", ".bar"));
+f(testSet1);
+
+// Set 2, Existing properties.
+f = eval(template.toSource().replace(".placeholder", ".bar"));
+f(testSet2);