v8/test/mjsunit/regress/regress-3884.js
mstarzinger 22dd6dc2a6 Fix representation for CompareIC in JSGenericLowering.
R=jarin@chromium.org
TEST=mjsunit/regress/regress-3884
BUG=v8:3884
LOG=N

Review URL: https://codereview.chromium.org/933913002

Cr-Commit-Position: refs/heads/master@{#26702}
2015-02-17 16:37:36 +00:00

28 lines
684 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --expose-gc
function f(x) {
// TurboFan will hoist the CompareIC for x === 'some_string' and spill it.
if (x === 'some_other_string_1' || x === 'some_string') {
gc();
}
if (x === 'some_other_string_2' || x === 'some_string') {
gc();
}
// TurboFan will hoist the CompareIC for x === 1.4 and spill it.
if (x === 1.7 || x === 1.4) {
gc();
}
if (x === 1.9 || x === 1.4) {
gc();
}
}
%OptimizeFunctionOnNextCall(f);
f('some_other_string_1');
f(1.7);