mirror of
https://github.com/tc39/test262.git
synced 2025-11-04 13:44:29 +01:00
e9a5a7f918
* [javascriptcore-test262-automation] changes from git@github.com:WebKit/webkit.git at sha 949e26452cfa153a7f4afe593da97e2fe9e1b706 on Tue Jul 03 2018 14:35:15 GMT-0400 (Eastern Daylight Time)
14 lines
617 B
JavaScript
14 lines
617 B
JavaScript
// This tests a bug that occured because we have noInline as a global
|
|
// property then is set to a global variable in the load of standalone-pre.js.
|
|
// Once we get to the DFG we still think that noInline is a global property
|
|
// based on an old global object structure. This would cause a crash when we
|
|
// attempted to create an equivalence condition for the get_from_scope of
|
|
// noInline as the current global object would not have noInline as a property
|
|
// at that point and we would attempt to access the value at an invalid offset.
|
|
|
|
load("resources/standalone-pre.js");
|
|
|
|
noInline();
|
|
|
|
for (i = 0; i < 100000; i++);
|