summaryrefslogtreecommitdiff
path: root/js/src/jit-test/tests/jaeger/testSetElem-Indexed.js
blob: 35c371de81e79d897f032294a9e3744bd34b9349 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

function f() {
    return [[], [], [], []];
}

function setelem(obj, key, val) {
    obj[key] = val;
}

// Generate IC
setelem([], 0, "hi");
setelem([], 0, "hi");

// Get some arrays pre-indexing.
var arrays = f();

// Do bad stuff.
Object.defineProperty(Object.prototype, "1", { set: function (v) { this.kettle = v; } });

var k = arrays[0];
setelem(k, 1, 13);
assertEq(k.kettle, 13);
assertEq(k.hasOwnProperty("1"), false);

Object.defineProperty(Array.prototype, "2", { set: function (v) { this.pot = v; } });
k = arrays[1];
setelem(k, 2, "yam");
assertEq(k.pot, "yam");

gc();

// make sure this reset okay.
setelem([], 0, "hi");
setelem([], 0, "hi");