Index: test/webkit/dfg-inline-arguments-out-of-bounds.js |
diff --git a/test/webkit/concat-while-having-a-bad-time.js b/test/webkit/dfg-inline-arguments-out-of-bounds.js |
similarity index 71% |
copy from test/webkit/concat-while-having-a-bad-time.js |
copy to test/webkit/dfg-inline-arguments-out-of-bounds.js |
index dfda1e08a0b36194b787a44ee12a9693acd8aeaf..23b9184cacacfb4aa3c1bd5fc1dda6fd5c4f7349 100644 |
--- a/test/webkit/concat-while-having-a-bad-time.js |
+++ b/test/webkit/dfg-inline-arguments-out-of-bounds.js |
@@ -22,10 +22,32 @@ |
// SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
description( |
-"Tests the behavior of Array.prototype.concat while the array is having a bad time due to one of the elements we are concatenating." |
+"Tests accessing arguments with an out-of-bounds index in an inlined function when the arguments have not been created but might be." |
); |
-Object.defineProperty(Array.prototype, 0, { writable: false }); |
-shouldBe("[42].concat()", "[42]"); |
+var p = false; |
+function foo() { |
+ if (p) |
+ return arguments; |
+ return arguments[0]; |
+} |
+ |
+function bar() { |
+ return foo(); |
+} |
+ |
+var expected = "\"undefined\""; |
+for (var i = 0; i < 3000; ++i) { |
+ if (i == 1000) { |
+ p = true; |
+ expected = "\"[object Arguments]\""; |
+ } |
+ if (i == 2000) { |
+ p = false; |
+ expected = "\"undefined\""; |
+ } |
+ result = "" + bar(); |
+ shouldBe("result", expected); |
+} |