summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/backup-point-bug1315634.js
diff options
context:
space:
mode:
Diffstat (limited to 'js/src/jit-test/tests/backup-point-bug1315634.js')
-rw-r--r--js/src/jit-test/tests/backup-point-bug1315634.js29
1 files changed, 29 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/backup-point-bug1315634.js b/js/src/jit-test/tests/backup-point-bug1315634.js
new file mode 100644
index 000000000..337bd5b40
--- /dev/null
+++ b/js/src/jit-test/tests/backup-point-bug1315634.js
@@ -0,0 +1,29 @@
+setJitCompilerOption('ion.forceinlineCaches', 1);
+function g(f, x) {
+ for (var j = 0; j < 3; ++j)
+ for (var k = 0; k < 21; ++k)
+ try {
+ f(x[k]);
+ } catch (e) {}
+}
+a0 = y = [];
+function f2() {
+ f1()
+};
+function f1() {
+ switch (abs(abs(3187503207)(134217728) | 0) | 0) {
+ case -2:
+ this.y.splice(NaN, 2, x({}) = 4277)
+ }
+ return
+ 4006901336 | 0
+}
+g(f1, []);
+g(f2, []);
+f1 = (function() {
+ function f() {
+ a0.splice(NaN, 0);
+ }
+ return f;
+})();
+g(f2, []);