Bug 845569 - Land tests for various bugs. r=terrence
☠☠ backed out by 622278b04c18 ☠ ☠
authorGary Kwong <gary@rumblingedge.com>
Tue, 26 Feb 2013 15:31:04 -0800
changeset 123102 d9d90bf85bcf3322475e8d26c80bdf1e1f3a74e2
parent 123101 4454f18d71bfb145cc1208be1db147a951560970
child 123103 cacfde64decd4de489a5ae5d6b4200d8c1493baa
push id24372
push useremorley@mozilla.com
push dateWed, 27 Feb 2013 13:22:59 +0000
treeherdermozilla-central@0a91da5f5eab [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersterrence
bugs845569
milestone22.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 845569 - Land tests for various bugs. r=terrence
js/src/jit-test/tests/basic/bug836601.js
js/src/jit-test/tests/basic/bug839758.js
js/src/jit-test/tests/ion/bug831424-1.js
js/src/jit-test/tests/ion/bug831424-2.js
new file mode 100644
--- /dev/null
+++ b/js/src/jit-test/tests/basic/bug836601.js
@@ -0,0 +1,8 @@
+// |jit-test| error: InternalError
+let k
+Proxy.createFunction(function() {
+    return {
+        get: Uint32Array
+    }
+}(), decodeURIComponent) & k
+
new file mode 100644
--- /dev/null
+++ b/js/src/jit-test/tests/basic/bug839758.js
@@ -0,0 +1,10 @@
+function f() {
+    try {
+        evalcx("(function(){\
+                    return new function(){arguments.callee.caller()}\
+                })()", newGlobal())
+    } catch (e) {}
+}
+f()
+f()
+
new file mode 100644
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug831424-1.js
@@ -0,0 +1,16 @@
+// |jit-test| error: TypeError
+x = [];
+Object.defineProperty(this, "y", {
+    get: function() {
+        FakeDOMObject.caller
+    }
+});
+Object.defineProperty(x, 3, {
+    get: function() {
+        y[13];
+    }
+});
+(function() {
+    x.shift();
+})();
+
new file mode 100644
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug831424-2.js
@@ -0,0 +1,16 @@
+// |jit-test| error: TypeError
+x = [];
+Object.defineProperty(this, "y", {
+    get: function() {
+        print.caller
+    }
+});
+Object.defineProperty(x, 3, {
+    get: function() {
+        y[13];
+    }
+});
+(function() {
+    x.shift();
+})();
+