summaryrefslogtreecommitdiff
path: root/js/src/tests/js1_8_5/regress/regress-592556-c35.js
diff options
context:
space:
mode:
Diffstat (limited to 'js/src/tests/js1_8_5/regress/regress-592556-c35.js')
-rw-r--r--js/src/tests/js1_8_5/regress/regress-592556-c35.js20
1 files changed, 20 insertions, 0 deletions
diff --git a/js/src/tests/js1_8_5/regress/regress-592556-c35.js b/js/src/tests/js1_8_5/regress/regress-592556-c35.js
new file mode 100644
index 0000000..c2ceb4a
--- /dev/null
+++ b/js/src/tests/js1_8_5/regress/regress-592556-c35.js
@@ -0,0 +1,20 @@
+// Any copyright is dedicated to the Public Domain.
+// http://creativecommons.org/licenses/publicdomain/
+// Contributor: Jason Orendorff <jorendorff@mozilla.com>
+
+var obj = {a: 0, b: 1, c: 2};
+delete obj.b; // switch to dictionary mode
+Object.defineProperty(obj, 'g',
+ {get: function () { return -1; }, configurable: true});
+for (var i = 3; i < 20; i++)
+ obj['x' + i] = i; // get property table
+for (var i = 3; i < 20; i++)
+ delete obj['x' + i]; // add to freelist
+delete obj.g; // must update lastProp->freeslot, to avoid assertion
+
+// extra junk to try to hit the assertion, if freeslot is not updated
+gc();
+obj.d = 3;
+obj.e = 4;
+
+reportCompare(0, 0, 'ok');