v8/test/mjsunit/compiler/regress-736567.js
jarin bdf1b0a84a [turbofan] Fix an assertion in representation selection for BooleanNot.
BUG=chromium:736567

Review-Url: https://codereview.chromium.org/2962503002
Cr-Commit-Position: refs/heads/master@{#46216}
2017-06-26 13:49:06 +00:00

21 lines
390 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function f(b, x) {
var o = b ? { a : 1 } : undefined;
return o.a + !(x & 1);
}
f(1);
function g() {
f(0, "s");
}
assertThrows(g);
%OptimizeFunctionOnNextCall(g);
assertThrows(g);