v8/test/mjsunit/regress/regress-crbug-489293.js
mstarzinger 7bd2d3e32e [turbofan] Fix over-restictive assertion in code generator.
R=titzer@chromium.org
TEST=mjsunit/regress/regress-crbug-489293
BUG=chromium:489293
LOG=n

Review URL: https://codereview.chromium.org/1142873005

Cr-Commit-Position: refs/heads/master@{#28486}
2015-05-19 16:14:28 +00:00

17 lines
455 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --turbo-filter=f --turbo-deoptimization
// Flags: --noanalyze-environment-liveness
function f() {
var x = 0;
for (var y = 0; y < 0; ++y) {
x = (x + y) | 0;
}
return unbound;
}
%OptimizeFunctionOnNextCall(f);
assertThrows(f, ReferenceError);