Bug 1779833 - Part 3: Testcase to trace store buffer entries that point to freed memory r=jandem

Differential Revision: https://phabricator.services.mozilla.com/D152039

js/src/jit-test/tests/gc/bug-1779833.js

@@ -0,0 +1,20 @@
+// This failed when run under ASAN.
+
+let size = 6;
+
+let map = new Map();
+assertEq(isNurseryAllocated(map), true);
+for (let i = 0; i < size; i++) {
+  map.set(i, {});
+}
+
+for (let i = 0; i < size - 1; i++) {
+  map.delete(i);
+}
+
+for (let i = 0; i < size - 1; i++) {
+  map.set(i, {});
+}
+
+map = undefined;
+minorgc();