24 lines
505 B
JavaScript
24 lines
505 B
JavaScript
|
// Copyright 2017 the V8 project authors. All rights reserved.
|
||
|
|
// Use of this source code is governed by a BSD-style license that can be
|
||
|
|
// found in the LICENSE file.
|
||
|
|
|
||
|
|
// Flags: --allow-natives-syntax
|
||
|
|
|
||
|
|
function baz(obj, store) {
|
||
|
|
if (store === true) obj[0] = 1;
|
||
|
|
}
|
||
|
|
function bar(store) {
|
||
|
|
baz(Object.prototype, store);
|
||
|
|
baz(this.arguments, true);
|
||
|
|
}
|
||
|
|
bar(false);
|
||
|
|
bar(false);
|
||
|
|
%OptimizeFunctionOnNextCall(bar);
|
||
|
|
bar(true);
|
||
|
|
|
||
|
|
function foo() { [].push(); }
|
||
|
|
foo();
|
||
|
|
foo();
|
||
|
|
%OptimizeFunctionOnNextCall(foo);
|
||
|
|
foo();
|