v8/test/mjsunit/compiler/deopt-eager-var-mutation-ite.js
Juliana Franco 337f38e0ec Deoptimizer tests
Adding (very) small tests for deoptimization.
Some of these tests were failing when the safepoints were not found,
after setting the return address.

BUG=V8:6563

Change-Id: I3af36b193a5982cd73414cc1884c5f0a7a727f5a
Reviewed-on: https://chromium-review.googlesource.com/584751
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Commit-Queue: Juliana Patricia Vicente Franco <jupvfranco@google.com>
Cr-Commit-Position: refs/heads/master@{#46922}
2017-07-27 07:21:46 +00:00

29 lines
520 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file
// Flags: --allow-natives-syntax
var foo = { x : 0, y : 1 }
function f(b) {
h(b);
return foo.x;
}
function h(b) {
g(b);
return foo.x;
}
function g(b) {
if (b) {
foo = { x : 536 };
} // It should trigger an eager deoptimization when b=true.
}
f(false); f(false);
%OptimizeFunctionOnNextCall(f);
f(false);
assertEquals(f(true), 536);