31a3cfbc10
BUG=v8:8801 Change-Id: I9d9d9824c6c9ad0176bbfd3723da1b578b17c256 Reviewed-on: https://chromium-review.googlesource.com/c/1495555 Commit-Queue: Ross McIlroy <rmcilroy@chromium.org> Reviewed-by: Mythri Alle <mythria@chromium.org> Cr-Commit-Position: refs/heads/master@{#60001}
32 lines
863 B
JavaScript
32 lines
863 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --expose-gc --allow-natives-syntax
|
|
var notCallable;
|
|
function inferReceiverMapsInDeadCode() {
|
|
var obj = { func() {} };
|
|
gc();
|
|
function wrappedCode() { try { code(); } catch (e) {} }
|
|
%PrepareFunctionForOptimization(wrappedCode);
|
|
function code() {
|
|
obj.a;
|
|
try {
|
|
Object.defineProperty(obj, "func", { get() {} });
|
|
} catch (neverCaught) {}
|
|
for (var i = 0; i < 1; i++) {
|
|
try {
|
|
notCallable(arguments[i]);
|
|
} catch (alwaysCaught) {}
|
|
}
|
|
}
|
|
wrappedCode();
|
|
try {
|
|
%OptimizeFunctionOnNextCall(wrappedCode);
|
|
wrappedCode();
|
|
} catch (e) {}
|
|
}
|
|
inferReceiverMapsInDeadCode();
|
|
inferReceiverMapsInDeadCode();
|
|
inferReceiverMapsInDeadCode();
|