X-Git-Url: https://git.saurik.com/apple/javascriptcore.git/blobdiff_plain/4be4e30906bcb8ee30b4d189205cb70bad6707ce..81345200c95645a1b0d2635520f96ad55dfde63f:/tests/stress/tricky-array-bounds-checks.js diff --git a/tests/stress/tricky-array-bounds-checks.js b/tests/stress/tricky-array-bounds-checks.js new file mode 100644 index 0000000..8cfbe1a --- /dev/null +++ b/tests/stress/tricky-array-bounds-checks.js @@ -0,0 +1,28 @@ +function foo(a, i, p) { + if (p || !DFGTrue()) + return [DFGTrue(), a[(i - (DFGTrue() ? 2147483646 : 0)) | 0], a[i], a[(i + (DFGTrue() ? 2147483646 : 0)) | 0], DFGTrue()]; + return [12]; +} + +noInline(foo); + +function arraycmp(a, b) { + if (a.length != b.length) + return false; + for (var i = 0; i < a.length; ++i) { + if (a[i] != b[i]) + return false; + } + return true; +} + +for (var i = 0; i < 100000; ++i) { + var result = foo([42], 0, false); + if (!arraycmp(result, [false, 42, 42, 42, false]) && !arraycmp(result, [12])) + throw "Error: bad result for i = " + i + ": " + result; +} + +var result = foo([1, 2, 3, 4, 5], -2147483646, true); +if (!arraycmp(result, [true, 5, void 0, void 0, false]) + && !arraycmp(result, [false, void 0, void 0, void 0, false])) + throw "Error: bad result for trick: " + result;