b7dc9c580a
With this change, we remember the types of frame state inputs (in a new operator, called TypedStateValues). Instead of inferring the value types when building translations, we used the recorded types. The original approach was not reliable because the passes after simplified lowering can change node types, and this in turn confuses the translation builder. BUG=chromium:468727 LOG=n R=bmeurer@chromium.org Review URL: https://codereview.chromium.org/1015423002 Cr-Commit-Position: refs/heads/master@{#27310}
17 lines
390 B
JavaScript
17 lines
390 B
JavaScript
// Copyright 2015 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --noanalyze-environment-liveness
|
|
|
|
function f() {
|
|
var __v_7 = -126 - __v_3;
|
|
var __v_17 = ((__v_15 & __v_14) != 4) | 16;
|
|
if (__v_17) {
|
|
var __v_11 = 1 << __v_7;
|
|
}
|
|
__v_12 >>= __v_3;
|
|
}
|
|
|
|
assertThrows(f);
|