| Index: test/mjsunit/regress/regress-3380.js
|
| diff --git a/test/mjsunit/regress/regress-349885.js b/test/mjsunit/regress/regress-3380.js
|
| similarity index 62%
|
| copy from test/mjsunit/regress/regress-349885.js
|
| copy to test/mjsunit/regress/regress-3380.js
|
| index dd3e79526041b0362434608b81429d83e18ae8ef..2fae459b3b46e768e4612359bcdc964350a9d5dd 100644
|
| --- a/test/mjsunit/regress/regress-349885.js
|
| +++ b/test/mjsunit/regress/regress-3380.js
|
| @@ -4,12 +4,13 @@
|
|
|
| // Flags: --allow-natives-syntax
|
|
|
| -// The bug 349885
|
| -
|
| function foo(a) {
|
| - a[292755462] = new Object();
|
| + return (a[0] >>> 0) > 0;
|
| }
|
| -foo(new Array(5));
|
| -foo(new Array(5));
|
| +
|
| +var a = new Uint32Array([4]);
|
| +var b = new Uint32Array([0x80000000]);
|
| +assertTrue(foo(a));
|
| +assertTrue(foo(a));
|
| %OptimizeFunctionOnNextCall(foo);
|
| -foo(new Array(10));
|
| +assertTrue(foo(b))
|
|
|