v8/test/mjsunit/regress/regress-crbug-748539.js

23 lines
407 B
JavaScript
Raw Normal View History

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function f1() {}
function f2() {}
var o1 = [];
o1.a = 0;
o1.f = f1;
%HeapObjectVerify(o1);
var o2 = [];
o2.a = 4.2;
o2.f = f2;
%HeapObjectVerify(o2);
o1.a;
%HeapObjectVerify(o1);
%HeapObjectVerify(o2);