Index: test/webkit/array-type-speculation.js |
diff --git a/test/webkit/array-type-speculation.js b/test/webkit/array-type-speculation.js |
new file mode 100644 |
index 0000000000000000000000000000000000000000..a5467c05024d89ffccbfd707de4a56bdb22e1c0a |
--- /dev/null |
+++ b/test/webkit/array-type-speculation.js |
@@ -0,0 +1,65 @@ |
+// Copyright 2013 the V8 project authors. All rights reserved. |
+// Copyright (C) 2005, 2006, 2007, 2008, 2009 Apple Inc. All rights reserved. |
+// |
+// Redistribution and use in source and binary forms, with or without |
+// modification, are permitted provided that the following conditions |
+// are met: |
+// 1. Redistributions of source code must retain the above copyright |
+// notice, this list of conditions and the following disclaimer. |
+// 2. Redistributions in binary form must reproduce the above copyright |
+// notice, this list of conditions and the following disclaimer in the |
+// documentation and/or other materials provided with the distribution. |
+// |
+// THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND ANY |
+// EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED |
+// WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE |
+// DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR ANY |
+// DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES |
+// (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; |
+// LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON |
+// ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
+// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS |
+// SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
+ |
+description( |
+"This tests that storing into something that is not array does not crash." |
+); |
+ |
+theCode = "\n\ |
+function storeFooByValOrDoArithmetic(o, p1, p2, v) {\n\ |
+ var x;\n\ |
+ if (p1) {\n\ |
+ x = o.foo;\n\ |
+ } else {\n\ |
+ x = v;\n\ |
+ if (p2) {\n\ |
+ x--;\n\ |
+ } else {\n\ |
+ x++;\n\ |
+ }\n\ |
+ }\n\ |
+ x[5] = \"foo\";\n\ |
+}\n\ |
+\n\ |
+function runTheTest(p1, p2) {\n\ |
+ var o = new Object();\n\ |
+ o.foo = new Object();\n\ |
+ storeFooByValOrDoArithmetic(o, p1, p2, 1);\n\ |
+ return o.foo[5];\n\ |
+}\n"; |
+ |
+function runWithPredicates(predicateArray) { |
+ var myCode = theCode; |
+ |
+ for (var i = 0; i < predicateArray.length; ++i) { |
+ myCode += "result = runTheTest(" + predicateArray[i][0] + ", " + predicateArray[i][1] + ");\n"; |
+ myCode += "shouldBe(\"result\", " + predicateArray[i][2] + ");\n"; |
+ } |
+ |
+ eval(myCode); |
+} |
+ |
+runWithPredicates([[true, true, "\"\\\"foo\\\"\""], [true, false, "\"\\\"foo\\\"\""], [false, true, "\"undefined\""], [false, false, "\"undefined\""]]); |
+runWithPredicates([[false, false, "\"undefined\""], [true, false, "\"\\\"foo\\\"\""], [false, true, "\"undefined\""], [true, true, "\"\\\"foo\\\"\""]]); |
+runWithPredicates([[true, true, "\"\\\"foo\\\"\""], [false, true, "\"undefined\""], [true, false, "\"\\\"foo\\\"\""], [false, false, "\"undefined\""]]); |
+runWithPredicates([[false, false, "\"undefined\""], [false, true, "\"undefined\""], [true, false, "\"\\\"foo\\\"\""], [true, true, "\"\\\"foo\\\"\""]]); |