From 5f8de423f190bbb79a62f804151bc24824fa32d8 Mon Sep 17 00:00:00 2001
From: "Matt A. Tobin" <mattatobin@localhost.localdomain>
Date: Fri, 2 Feb 2018 04:16:08 -0500
Subject: Add m-esr52 at 52.6.0

---
 js/src/jit-test/tests/backup-point-bug1315634.js | 29 ++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 js/src/jit-test/tests/backup-point-bug1315634.js

(limited to 'js/src/jit-test/tests/backup-point-bug1315634.js')

diff --git a/js/src/jit-test/tests/backup-point-bug1315634.js b/js/src/jit-test/tests/backup-point-bug1315634.js
new file mode 100644
index 000000000..337bd5b40
--- /dev/null
+++ b/js/src/jit-test/tests/backup-point-bug1315634.js
@@ -0,0 +1,29 @@
+setJitCompilerOption('ion.forceinlineCaches', 1);
+function g(f, x) {
+    for (var j = 0; j < 3; ++j)
+        for (var k = 0; k < 21; ++k)
+            try {
+                f(x[k]);
+            } catch (e) {}
+}
+a0 = y = [];
+function f2() {
+    f1()
+};
+function f1() {
+    switch (abs(abs(3187503207)(134217728) | 0) | 0) {
+        case -2:
+            this.y.splice(NaN, 2, x({}) = 4277)
+    }
+    return
+    4006901336 | 0
+}
+g(f1, []);
+g(f2, []);
+f1 = (function() {
+    function f() {
+        a0.splice(NaN, 0);
+    }
+    return f;
+})();
+g(f2, []);
-- 
cgit v1.2.3