v8/test/mjsunit/compiler/deopt-lazy-shape-mutation.js
Juliana Franco 337f38e0ec Deoptimizer tests
Adding (very) small tests for deoptimization.
Some of these tests were failing when the safepoints were not found,
after setting the return address.

BUG=V8:6563

Change-Id: I3af36b193a5982cd73414cc1884c5f0a7a727f5a
Reviewed-on: https://chromium-review.googlesource.com/584751
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Commit-Queue: Juliana Patricia Vicente Franco <jupvfranco@google.com>
Cr-Commit-Position: refs/heads/master@{#46922}
2017-07-27 07:21:46 +00:00

24 lines
428 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file
// Flags: --allow-natives-syntax
var b = false;
function change_o() {
if (b) o = { y : 1, x : 0};
}
%NeverOptimizeFunction(change_o);
var o = { x : 1 };
function f() {
change_o();
return o.x;
}
f(); f();
%OptimizeFunctionOnNextCall(f);
b = true;
f();