Add a test

Without the fix, 4 out of 5 runs fail on my machine.

Author: SingleAccretion

src/tests/JIT/opt/ValueNumbering/ExposedLocalsNumbering.cs

@@ -0,0 +1,86 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Threading;
+using System.Runtime.InteropServices;
+using System.Runtime.CompilerServices;
+
+unsafe class ExposedLocalsNumbering
+{
+    private static volatile bool s_mutateIndex;
+    private static volatile bool s_finished;
+    private static int* s_pIndex = (int*)NativeMemory.Alloc(4);
+
+    public static int Main()
+    {
+        const int RetryCount = 100;
+        const int UnsafeIndex = 1;
+
+        new Thread(_ =>
+        {
+            while (!s_finished)
+            {
+                if (s_mutateIndex)
+                {
+                    *s_pIndex = UnsafeIndex;
+                }
+            }
+        }).Start();
+
+        int[] array = new int[UnsafeIndex + 1];
+        array[UnsafeIndex] = 1;
+
+        int safeIndex = 0;
+        for (int i = 0; i < RetryCount; i++)
+        {
+            try
+            {
+                if (RunBoundsChecks(array.AsSpan(0, UnsafeIndex), &safeIndex) != 0)
+                {
+                    s_finished = true;
+                    return 101;
+                }
+            }
+            catch (IndexOutOfRangeException) { }
+        }
+
+        s_finished = true;
+        return 100;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private static int RunBoundsChecks(Span<int> span, int* pSafeIndex)
+    {
+        int result = 0;
+        int index = 0;
+        CaptureIndex(&index);
+
+        result += span[index];
+        result += span[index];
+        result += span[index];
+        result += span[index];
+
+        result += span[index];
+        result += span[index];
+        result += span[index];
+        result += span[index];
+
+        result += span[index];
+        result += span[index];
+        result += span[index];
+        result += span[index];
+
+        s_pIndex = pSafeIndex;
+        s_mutateIndex = false;
+
+        return result;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private static void CaptureIndex(int* pIndex)
+    {
+        s_pIndex = pIndex;
+        s_mutateIndex = true;
+    }
+}

src/tests/JIT/opt/ValueNumbering/ExposedLocalsNumbering.csproj

@@ -0,0 +1,12 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <DebugType>None</DebugType>
+    <Optimize>True</Optimize>
+    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
+  </PropertyGroup>
+  <ItemGroup>
+    <Compile Include="$(MSBuildProjectName).cs" />
+    <CLRTestEnvironmentVariable Include="DOTNET_JitNoCSE" Value="1" />
+  </ItemGroup>
+</Project>