mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
[INFER] Monitor property type for JSOP_INITELEM in methodjit, bug 640098, r=bhackett
This commit is contained in:
parent
2580fc4b31
commit
77a48952fa
15
js/src/jit-test/tests/jaeger/bug640098.js
Normal file
15
js/src/jit-test/tests/jaeger/bug640098.js
Normal file
@ -0,0 +1,15 @@
|
||||
|
||||
eval("(function(){({6953421313:0})})")();
|
||||
|
||||
function f() {
|
||||
var x = {6953421313: 123};
|
||||
assertEq(x[6953421313], 123);
|
||||
|
||||
x[6953421313] = "a";
|
||||
assertEq(x[6953421313], "a");
|
||||
|
||||
var y = {3.3: true};
|
||||
assertEq(y[3.3], true);
|
||||
}
|
||||
f();
|
||||
|
@ -1459,6 +1459,8 @@ stubs::InitElem(VMFrame &f, uint32 last)
|
||||
if (last && !js_SetLengthProperty(cx, obj, (jsuint) (JSID_TO_INT(id) + 1)))
|
||||
THROW();
|
||||
} else {
|
||||
if (!cx->typeMonitorAssign(obj, id, rref))
|
||||
THROW();
|
||||
if (!obj->defineProperty(cx, id, rref, NULL, NULL, JSPROP_ENUMERATE))
|
||||
THROW();
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user