d929cc755c
This avoid introduction of {TypeGuard} nodes during load elimination.
Such type guard could lead to contradicting type information where a
constant {NumberConstant} node was guarded to have {ExternalPointer}
type, which would lead to an impossible constraint on representation
selection.
R=jarin@chromium.org
TEST=mjsunit/regress/regress-crbug-752826
BUG=chromium:752826
Change-Id: Ida3815af24ccc8a48474b8d66117b9718f61adda
Reviewed-on: https://chromium-review.googlesource.com/605547
Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Commit-Queue: Michael Starzinger <mstarzinger@chromium.org>
Cr-Commit-Position: refs/heads/master@{#47218}
23 lines
492 B
JavaScript
23 lines
492 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
function h(a) {
|
|
return a[1];
|
|
}
|
|
assertEquals(0, h(new Int8Array(10)));
|
|
assertEquals(0, h(new Int8Array(10)));
|
|
|
|
function g() {
|
|
return h(arguments);
|
|
}
|
|
function f() {
|
|
return g(23, 42);
|
|
}
|
|
assertEquals(42, f());
|
|
assertEquals(42, f());
|
|
%OptimizeFunctionOnNextCall(f);
|
|
assertEquals(42, f());
|