bae0d6c8dc
BUG=chromium:571064 LOG=Y TBR=jkummerow@chromium.org Review URL: https://codereview.chromium.org/1548363003 Cr-Commit-Position: refs/heads/master@{#33058}
20 lines
530 B
JavaScript
20 lines
530 B
JavaScript
// Copyright 2015 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --enable-slow-asserts
|
|
|
|
Array.prototype.__proto__ = null;
|
|
var func = Array.prototype.push;
|
|
var prototype = Array.prototype;
|
|
function CallFunc(a) {
|
|
func.call(a);
|
|
}
|
|
function CallFuncWithPrototype() {
|
|
CallFunc(prototype);
|
|
}
|
|
CallFunc([]);
|
|
CallFunc([]);
|
|
%OptimizeFunctionOnNextCall(CallFuncWithPrototype);
|
|
CallFuncWithPrototype();
|