HRor and HSar can deoptimize.
BUG=v8:3359 LOG=y R=ishell@chromium.org Review URL: https://codereview.chromium.org/309483002 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@21583 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
This commit is contained in:
parent
f4aa3ab03d
commit
5cd009a004
@ -831,8 +831,6 @@ bool HInstruction::CanDeoptimize() {
|
||||
case HValue::kPushArguments:
|
||||
case HValue::kRegExpLiteral:
|
||||
case HValue::kReturn:
|
||||
case HValue::kRor:
|
||||
case HValue::kSar:
|
||||
case HValue::kSeqStringGetChar:
|
||||
case HValue::kStoreCodeEntry:
|
||||
case HValue::kStoreKeyed:
|
||||
@ -877,6 +875,8 @@ bool HInstruction::CanDeoptimize() {
|
||||
case HValue::kMul:
|
||||
case HValue::kOsrEntry:
|
||||
case HValue::kPower:
|
||||
case HValue::kRor:
|
||||
case HValue::kSar:
|
||||
case HValue::kSeqStringSetChar:
|
||||
case HValue::kShl:
|
||||
case HValue::kShr:
|
||||
|
12
test/mjsunit/regress/regress-3359.js
Normal file
12
test/mjsunit/regress/regress-3359.js
Normal file
@ -0,0 +1,12 @@
|
||||
// Copyright 2014 the V8 project authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style license that can be
|
||||
// found in the LICENSE file.
|
||||
|
||||
// Flags: --allow-natives-syntax
|
||||
|
||||
function f() {
|
||||
return 1 >> Boolean.constructor + 1;
|
||||
}
|
||||
assertEquals(1, f());
|
||||
%OptimizeFunctionOnNextCall(f);
|
||||
assertEquals(1, f());
|
Loading…
Reference in New Issue
Block a user