7aa6a7e659
This CL fixes the types of JSUnaryOps with BigInt input. Bug: chromium:1376930, v8:9407 Change-Id: I7a6603db08d3af1e40d440fe4c499e7f825b59d1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3971119 Reviewed-by: Nico Hartmann <nicohartmann@chromium.org> Commit-Queue: Qifan Pan <panq@google.com> Cr-Commit-Position: refs/heads/main@{#83853}
21 lines
578 B
JavaScript
21 lines
578 B
JavaScript
// Copyright 2022 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --turbofan --no-always-turbofan
|
|
|
|
function f() {
|
|
let a = 42n;
|
|
// JSDecrement should be typed as BigInt.
|
|
let b = a--;
|
|
let c = -42n && 42n;
|
|
// JSDecrement was typed as Numeric instead of BigInt so the node could not
|
|
// be eliminated because of possible deoptimization.
|
|
let d = c & a;
|
|
};
|
|
|
|
%PrepareFunctionForOptimization(f);
|
|
f();
|
|
%OptimizeFunctionOnNextCall(f);
|
|
f();
|