05670b63bf
We should check for overflow for each inlined property getter; otherwise, we can get an overflow from inlining property getter while still having pending overflow exception from some previous inlined getter (in the same polymorphic access). R=verwaest@chromium.org TEST=test/mjsunit/regress/regress-inline-getter-near-stack-limit.js Review URL: https://codereview.chromium.org/220813003 git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@20588 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
25 lines
593 B
JavaScript
25 lines
593 B
JavaScript
// Copyright 2014 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
//
|
|
// Flags: --allow-natives-syntax
|
|
|
|
function runNearStackLimit(f) {
|
|
function t() {
|
|
try { t(); } catch(e) { f(); }
|
|
};
|
|
try { t(); } catch(e) {}
|
|
}
|
|
|
|
function g(x) { return x.bar; }
|
|
function f1() { }
|
|
function f2() { }
|
|
|
|
var x = Object.defineProperty({}, "bar", { get: f1 });
|
|
g(x);
|
|
g(x);
|
|
var y = Object.defineProperty({}, "bar", { get: f2 });
|
|
g(y);
|
|
%OptimizeFunctionOnNextCall(g);
|
|
runNearStackLimit(function() { g(y); });
|