f8fec66f0b
This fixes the existing workaround in {BytecodeGraphBuilder} where the number of elements in an array literal is unknown just from the bytecode alone and needs to be deduced from the constant elements. Note that this is just a quick fix to prevent calling the fast-clone stub for boilerplates that are too big to fit on a regular page. In the long run we need something more solid here. R=mvstanton@chromium.org TEST=mjsunit/regress/regress-crbug-669850 BUG=chromium:669850 Review-Url: https://codereview.chromium.org/2542633002 Cr-Commit-Position: refs/heads/master@{#41420}
12 lines
409 B
JavaScript
12 lines
409 B
JavaScript
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --turbo
|
|
|
|
eval('function f(a) { return [' + new Array(1 << 17) + ',a] }');
|
|
assertEquals(23, f(23)[1 << 17]);
|
|
assertEquals(42, f(42)[1 << 17]);
|
|
%OptimizeFunctionOnNextCall(f);
|
|
assertEquals(65, f(65)[1 << 17]);
|