c6a16c10dd
With bytecode flushing and lazy feedback allocation, we need to call %PrepareForOptimization before we call %OptimizeFunctionOnNextCall, ideally after declaring the function. Bug: v8:8801, v8:8394, v8:9183 Change-Id: I3fb257282a30f6526a376a3afdedb44786320d34 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1648255 Commit-Queue: Mathias Bynens <mathias@chromium.org> Reviewed-by: Maya Lekova <mslekova@chromium.org> Reviewed-by: Mythri Alle <mythria@chromium.org> Cr-Commit-Position: refs/heads/master@{#62119}
55 lines
1.1 KiB
JavaScript
55 lines
1.1 KiB
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
var m = new Map();
|
|
|
|
function C() {}
|
|
|
|
// Make sure slack tracking kicks in and shrinks the default size to prevent
|
|
// any further in-object properties.
|
|
%CompleteInobjectSlackTracking(new C());
|
|
|
|
function f(o) {
|
|
o.x = true;
|
|
}
|
|
|
|
// Warm up {f}.
|
|
;
|
|
%PrepareFunctionForOptimization(f);
|
|
f(new C());
|
|
f(new C());
|
|
|
|
var o = new C();
|
|
%HeapObjectVerify(o);
|
|
|
|
// We need at least 2 elements in the Map.
|
|
m.set({}, 3);
|
|
// This creates hash code on o.
|
|
m.set(o, 1);
|
|
|
|
// Add an out-of-object property.
|
|
o.x = true;
|
|
%HeapObjectVerify(o);
|
|
// Delete the property (so we have no out-of-object properties).
|
|
delete o.x;
|
|
%HeapObjectVerify(o);
|
|
|
|
|
|
// Ensure that growing the properties backing store in optimized code preserves
|
|
// the hash.
|
|
%OptimizeFunctionOnNextCall(f);
|
|
f(o);
|
|
|
|
%HeapObjectVerify(o);
|
|
assertEquals(1, m.get(o));
|
|
|
|
// Grow the Map and ensure the object is still found.
|
|
for (let i = 0; i < 1000; i++) {
|
|
let object = {};
|
|
m.set(object, object);
|
|
assertEquals(1, m.get(o));
|
|
}
|