Bug 845569 - Land tests for various bugs. r=terrence
authorGary Kwong <gary@rumblingedge.com>
Wed, 27 Feb 2013 10:40:01 -0800
changeset 123198 e85c2b64d0ed581189e37f7d4324791fa3590c88
parent 123197 c7cedc21bdf2ef82cbb615cfadbffaa080ef6f9a
child 123199 4bccbdd03dea827b24802a33de75f47b7c3ffc89
push id24373
push userryanvm@gmail.com
push dateThu, 28 Feb 2013 01:36:21 +0000
treeherdermozilla-central@8cb9d6981978 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersterrence
bugs845569
milestone22.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 845569 - Land tests for various bugs. r=terrence
js/src/jit-test/tests/basic/bug836601.js
js/src/jit-test/tests/ion/bug831424-1.js
js/src/jit-test/tests/ion/bug831424-2.js
new file mode 100644
--- /dev/null
+++ b/js/src/jit-test/tests/basic/bug836601.js
@@ -0,0 +1,8 @@
+// |jit-test| error: InternalError
+let k
+Proxy.createFunction(function() {
+    return {
+        get: Uint32Array
+    }
+}(), decodeURIComponent) & k
+
new file mode 100644
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug831424-1.js
@@ -0,0 +1,16 @@
+// |jit-test| error: TypeError
+x = [];
+Object.defineProperty(this, "y", {
+    get: function() {
+        FakeDOMObject.caller
+    }
+});
+Object.defineProperty(x, 3, {
+    get: function() {
+        y[13];
+    }
+});
+(function() {
+    x.shift();
+})();
+
new file mode 100644
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug831424-2.js
@@ -0,0 +1,16 @@
+// |jit-test| error: TypeError
+x = [];
+Object.defineProperty(this, "y", {
+    get: function() {
+        print.caller
+    }
+});
+Object.defineProperty(x, 3, {
+    get: function() {
+        y[13];
+    }
+});
+(function() {
+    x.shift();
+})();
+