v8/test/mjsunit/regress/regress-crbug-502930.js
ishell 47421760f4 Map::ReconfigureProperty() should mark map as unstable when it returns a different map.
BUG=chromium:502930
LOG=N

Review URL: https://codereview.chromium.org/1200003002

Cr-Commit-Position: refs/heads/master@{#29226}
2015-06-23 11:30:58 +00:00

28 lines
746 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
var accessor_to_data_case = (function() {
var v = {};
Object.defineProperty(v, "foo", { get: function() { return 42; }, configurable: true});
var obj = {};
obj["boom"] = v;
Object.defineProperty(v, "foo", { value: 0, writable: true, configurable: true });
return obj;
})();
var data_to_accessor_case = (function() {
var v = {};
Object.defineProperty(v, "bar", { value: 0, writable: true, configurable: true });
var obj = {};
obj["bam"] = v;
Object.defineProperty(v, "bar", { get: function() { return 42; }, configurable: true});
return obj;
})();