haikuwebkit/LayoutTests/js/map-grow-with-holes.html

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<script src="../resources/js-test-pre.js"></script>
</head>
<body>
<script src="script-tests/map-grow-with-holes.js"></script>
<script src="../resources/js-test-post.js"></script>
</body>
</html>
Reproducible crash when using Map (affects Web Inspector) https://bugs.webkit.org/show_bug.cgi?id=123940 Reviewed by Geoffrey Garen. Source/JavaScriptCore: Trivial fix. Once again we get bitten by attempting to be clever when growing while adding entries to indexing maps. Now we simply do a find(), and then add() _after_ we've ensured there is sufficient space in the MapData list. * runtime/MapData.cpp: (JSC::MapData::add): LayoutTests: Add testcases * js/map-grow-with-holes-expected.txt: Added. * js/map-grow-with-holes.html: Added. * js/script-tests/map-grow-with-holes.js: Added. (get map): Canonical link: https://commits.webkit.org/142187@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@158875 268f45cc-cd09-0410-ab3c-d52691b4dbfc 2013-11-07 22:19:58 +00:00			`<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">`
			`<html>`
			`<head>`
			`<script src="../resources/js-test-pre.js"></script>`
			`</head>`
			`<body>`
			`<script src="script-tests/map-grow-with-holes.js"></script>`
			`<script src="../resources/js-test-post.js"></script>`
			`</body>`
			`</html>`