24 lines
665 B
JavaScript
24 lines
665 B
JavaScript
|
// Copyright 2021 the V8 project authors. All rights reserved.
|
||
|
|
// Use of this source code is governed by a BSD-style license that can be
|
||
|
|
// found in the LICENSE file.
|
||
|
|
|
||
|
|
// Flags: --allow-natives-syntax --opt
|
||
|
|
|
||
|
|
// https://bugs.chromium.org/p/v8/issues/detail?id=10816
|
||
|
|
// When V8 sees a deprecated map, update the IC with its target.
|
||
|
|
|
||
|
|
function A() { this.x = 1 }
|
||
|
|
function B() { this.x = 1 }
|
||
|
|
function load(o) { return o.x }
|
||
|
|
%PrepareFunctionForOptimization(load);
|
||
|
|
|
||
|
|
const oldB = new B();
|
||
|
|
(new B()).x = 1.5; // deprecates map
|
||
|
|
|
||
|
|
// Should add the target of the deprecated map to the load IC.
|
||
|
|
load(oldB);
|
||
|
|
|
||
|
|
%OptimizeFunctionOnNextCall(load);
|
||
|
|
load(oldB);
|
||
|
|
assertOptimized(load);
|