7682837501
This makes sure 32-bit constants that are used as {MachineType::Uint32}
by the deoptimization translation are also interpreted as such when the
literals are collected.
R=jarin@chromium.org
TEST=mjsunit/regress/regress-crbug-681983
BUG=chromium:681983
Review-Url: https://codereview.chromium.org/2646463002
Cr-Commit-Position: refs/heads/master@{#42493}
19 lines
366 B
JavaScript
19 lines
366 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
function g(a) {
|
|
a = a >>> 0;
|
|
%_DeoptimizeNow();
|
|
return a;
|
|
}
|
|
|
|
function f() {
|
|
return g(-1);
|
|
}
|
|
|
|
%OptimizeFunctionOnNextCall(f);
|
|
assertEquals(4294967295, f());
|