2425885552
Bug: v8:8801,v8:8394,v8:9183 Change-Id: I5ceaf731a1b2720f086e6791fe08caaaa55de030 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1662568 Commit-Queue: Ross McIlroy <rmcilroy@chromium.org> Commit-Queue: Mythri Alle <mythria@chromium.org> Reviewed-by: Mythri Alle <mythria@chromium.org> Auto-Submit: Ross McIlroy <rmcilroy@chromium.org> Cr-Commit-Position: refs/heads/master@{#62224}
39 lines
871 B
JavaScript
39 lines
871 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
class A extends Object {
|
|
constructor(arg) {
|
|
super();
|
|
superclass_counter++;
|
|
if (superclass_counter === 3) {
|
|
return 1;
|
|
}
|
|
}
|
|
}
|
|
|
|
class B extends A {
|
|
constructor() {
|
|
let x = super(123);
|
|
return x.a;
|
|
}
|
|
}
|
|
|
|
var superclass_counter = 0;
|
|
var observer = new Proxy(A, {
|
|
get(target, property, receiver) {
|
|
if (property === 'prototype') {
|
|
%DeoptimizeFunction(B);
|
|
}
|
|
return Reflect.get(target, property, receiver);
|
|
}
|
|
});
|
|
|
|
%PrepareFunctionForOptimization(B);
|
|
Reflect.construct(B, [], observer);
|
|
Reflect.construct(B, [], observer);
|
|
%OptimizeFunctionOnNextCall(B);
|
|
assertThrows(() => Reflect.construct(B, [], observer), TypeError);
|