v8/test/mjsunit/compiler/globals-freeze-mutable.js
Georg Neis 2869fdfb17 [runtime][compiler] Be less strict about PropertyCell changes
Don't deopt when a PropertyCell changes from readonly to writable.
Turbofan doesn't depend on readonly-ness unless the property is
also non-configurable, in which case such a change can't happen.

Change-Id: I3d1078a8adf1ec1b16d973dd71c4295d71003a8d
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2531791
Commit-Queue: Georg Neis <neis@chromium.org>
Auto-Submit: Georg Neis <neis@chromium.org>
Reviewed-by: Toon Verwaest <verwaest@chromium.org>
Cr-Commit-Position: refs/heads/master@{#71184}
2020-11-13 16:29:03 +00:00

28 lines
604 B
JavaScript

// Copyright 2020 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --opt --no-always-opt
glo = 0;
function write_glo(x) { glo = x }
%PrepareFunctionForOptimization(write_glo);
write_glo({});
write_glo(1);
assertEquals(1, glo);
// At this point, glo has cell type Mutable.
%OptimizeFunctionOnNextCall(write_glo);
write_glo(0);
assertEquals(0, glo);
assertOptimized(write_glo);
Object.freeze(this);
assertUnoptimized(write_glo);
write_glo(1);
assertEquals(0, glo);