JavaScriptCore-7600.1.4.9.tar.gz

[apple/javascriptcore.git] / tests / stress / tricky-array-bounds-checks.js

diff --git a/tests/stress/tricky-array-bounds-checks.js b/tests/stress/tricky-array-bounds-checks.js
new file mode 100644 (file)
index 0000000..8cfbe1a
--- /dev/null
+++ b/tests/stress/tricky-array-bounds-checks.js
@@ -0,0 +1,28 @@
+function foo(a, i, p) {
+    if (p || !DFGTrue())
+        return [DFGTrue(), a[(i - (DFGTrue() ? 2147483646 : 0)) | 0], a[i], a[(i + (DFGTrue() ? 2147483646 : 0)) | 0], DFGTrue()];
+    return [12];
+}
+
+noInline(foo);
+
+function arraycmp(a, b) {
+    if (a.length != b.length)
+        return false;
+    for (var i = 0; i < a.length; ++i) {
+        if (a[i] != b[i])
+            return false;
+    }
+    return true;
+}
+
+for (var i = 0; i < 100000; ++i) {
+    var result = foo([42], 0, false);
+    if (!arraycmp(result, [false, 42, 42, 42, false]) && !arraycmp(result, [12]))
+        throw "Error: bad result for i = " + i + ": " + result;
+}
+
+var result = foo([1, 2, 3, 4, 5], -2147483646, true);
+if (!arraycmp(result, [true, 5, void 0, void 0, false])
+    && !arraycmp(result, [false, void 0, void 0, void 0, false]))
+    throw "Error: bad result for trick: " + result;