v8/test/mjsunit/check-bounds-array-index.js

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

32 lines
613 B
JavaScript
Raw Normal View History

// Copyright 2019 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
//
// Flags: --allow-natives-syntax --opt --no-always-opt
let arr = [1, 2, 3];
function f(useArrayIndex) {
let index = useArrayIndex ? '1': '4294967296';
return arr[index];
}
%PrepareFunctionForOptimization(f);
f(true);
f(true);
%OptimizeFunctionOnNextCall(f);
f(false);
assertUnoptimized(f);
%PrepareFunctionForOptimization(f);
f(true);
f(true);
%OptimizeFunctionOnNextCall(f);
f(true);
// no deopt here
f(false);
assertOptimized(f);