12 lines
364 B
JavaScript
12 lines
364 B
JavaScript
|
// Copyright 2015 the V8 project authors. All rights reserved.
|
||
|
|
// Use of this source code is governed by a BSD-style license that can be
|
||
|
|
// found in the LICENSE file.
|
||
|
|
|
||
|
|
function foo(a, s) { a[s] = 35; }
|
||
|
|
var x = { bilbo: 3 };
|
||
|
|
var y = { frodo: 3, bilbo: 'hi' };
|
||
|
|
foo(x, "bilbo");
|
||
|
|
foo(x, "bilbo");
|
||
|
|
// Without the fix for 4495, this will crash on ia32:
|
||
|
|
foo(y, "bilbo");
|