v8/test/mjsunit/compiler/regress-1199345.js
Georg Neis 928da8091f [compiler] Add a few regression tests
Tbr: nicohartmann@chromium.org
Bug: chromium:1198705, chromium:1199345, chromium:1200490
Change-Id: I4a486df636e084279423e6cd3b867137bfe3fd6f
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2939984
Reviewed-by: Georg Neis <neis@chromium.org>
Commit-Queue: Georg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#74945}
2021-06-04 08:37:26 +00:00

47 lines
1.0 KiB
JavaScript

// Copyright 2021 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --opt --no-always-opt
(function() {
function foo(a) {
var x = -0;
if (a) {
x = 0;
}
return x + (x - 0);
}
%PrepareFunctionForOptimization(foo);
assertEquals(0, foo(true));
%OptimizeFunctionOnNextCall(foo);
assertEquals(-0, foo(false));
})();
// The following test already passed before the bugfix.
(function() {
function foo(a) {
var x = 0;
var y = -0;
if (a == 42) x = 2**32 - 1;
if (a == 0) {
x = 0
y = 1;
}
if (a == 2) x = -0;
return x + y;
}
%PrepareFunctionForOptimization(foo);
assertEquals(1, foo(0));
%OptimizeFunctionOnNextCall(foo);
assertEquals(0, foo(1));
// We don't automatically deopt for y = -0 because (x + -0) can only become -0
// for x = -0.
assertOptimized(foo);
assertEquals(-0, foo(2));
assertUnoptimized(foo);
})();