haikuwebkit/LayoutTests/js/map-iterate-first-entry-is-...

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<script src="../resources/js-test-pre.js"></script>
</head>
<body>
<script src="script-tests/map-iterate-first-entry-is-a-hole.js"></script>
<script src="../resources/js-test-post.js"></script>
</body>
</html>
Map.forEach crashes on deleted values https://bugs.webkit.org/show_bug.cgi?id=124017 Reviewed by Ryosuke Niwa. Source/JavaScriptCore: MapData iterator did not consider the case of the first entries being holes. To fix this I've refactored iteration so that we can perform an initialisation increment on construction, whle retaining the useful assertion in MapData::const_iterator::operator++ * runtime/MapData.h: (JSC::MapData::const_iterator::operator++): (JSC::MapData::const_iterator::internalIncrement): (JSC::MapData::const_iterator::const_iterator): LayoutTests: Test case * js/map-iterate-first-entry-is-a-hole-expected.txt: Added. * js/map-iterate-first-entry-is-a-hole.html: Added. * js/script-tests/map-iterate-first-entry-is-a-hole.js: Added. (set map0): Canonical link: https://commits.webkit.org/142235@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@158929 268f45cc-cd09-0410-ab3c-d52691b4dbfc 2013-11-08 18:47:26 +00:00			`<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">`
			`<html>`
			`<head>`
			`<script src="../resources/js-test-pre.js"></script>`
			`</head>`
			`<body>`
			`<script src="script-tests/map-iterate-first-entry-is-a-hole.js"></script>`
			`<script src="../resources/js-test-post.js"></script>`
			`</body>`
			`</html>`