v8/test/mjsunit/field-representation-tracking.js
Igor Sheludko 15c9ff0758 [runtime] Remove --modify-field-representation-inplace flag
which was enabled a long ago and is not supposed to be disabled.

In addition this CL adds Representation::MightCauseMapDeprecation()
predicate and ensures it's consistent with the existing
MostGenericInPlaceChange() and CanBeInPlaceChangedTo().

Bug: v8:11104, v8:8865
Change-Id: Ia8046b76822c9b20fe3ce85de6b98570334aad21
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2527088
Commit-Queue: Igor Sheludko <ishell@chromium.org>
Reviewed-by: Leszek Swirski <leszeks@chromium.org>
Cr-Commit-Position: refs/heads/master@{#71151}
2020-11-12 13:44:15 +00:00

32 lines
794 B
JavaScript

// Copyright 2019 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
// Test that s->t field representation changes are done in-place.
(function() {
function O(x) { this.x = x; }
const a = new O(42);
const b = new O(-8);
assertTrue(%HaveSameMap(a, b));
a.x = null;
assertTrue(%HaveSameMap(a, b));
b.x = null;
assertTrue(%HaveSameMap(a, b));
})();
// Test that h->t field representation changes are done in-place.
(function() {
function O(x) { this.x = x; }
const a = new O(null);
const b = new O("Hello");
assertTrue(%HaveSameMap(a, b));
a.x = 1;
assertTrue(%HaveSameMap(a, b));
b.x = 2;
assertTrue(%HaveSameMap(a, b));
})();