v8/test/mjsunit/regress/regress-crbug-645888.js
mstarzinger 85289749f4 [interpreter] Add regression test for bogus OSR entry.
This adds a regression test for a bug where {OsrPoll} instructions
within the bytecode stream ended up outside of actual loops. This has
been fixed already, by merging {OsrPoll} into the backwards branch.

R=rmcilroy@chromium.org
TEST=mjsunit/regress/regress-crbug-645888
BUG=chromium:645888

Review-Url: https://codereview.chromium.org/2337033002
Cr-Commit-Position: refs/heads/master@{#39385}
2016-09-13 13:23:21 +00:00

19 lines
426 B
JavaScript

// Copyright 2016 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --ignition-staging
function f() {
for (var i = 0; i < 3; ++i) {
if (i == 1) {
%OptimizeOsr();
break; // Trigger next loop.
}
}
while (true) {
throw "no loop, thank you";
}
}
assertThrows(f);