JavaScriptCore-7601.1.46.3.tar.gz

[apple/javascriptcore.git] / tests / stress / for-in-base-reassigned-later-and-change-structure.js

diff --git a/tests/stress/for-in-base-reassigned-later-and-change-structure.js b/tests/stress/for-in-base-reassigned-later-and-change-structure.js
new file mode 100644 (file)
index 0000000..1b087d5
--- /dev/null
+++ b/tests/stress/for-in-base-reassigned-later-and-change-structure.js
@@ -0,0 +1,18 @@
+function foo(o_) {
+    var o = o_;
+    var result = 0;
+    for (var s in o) {
+        result += o[s];
+        if (result >= 3)
+            o = {0:1, 1:2, b:4, a:3};
+    }
+    return result;
+}
+
+noInline(foo);
+
+for (var i = 0; i < 10000; ++i) {
+    var result = foo({0:0, 1:1, a:2, b:3});
+    if (result != 7)
+        throw "Error: bad result: " + result;
+}