6b7146df6c
R=mvstanton@chromium.org Bug: chromium:992684, v8:7790 Change-Id: Ia5e77873f4b96d9f6d9a1468a83a64206f1498ee Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1748692 Reviewed-by: Michael Stanton <mvstanton@chromium.org> Commit-Queue: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#63180}
27 lines
569 B
JavaScript
27 lines
569 B
JavaScript
// Copyright 2019 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --no-lazy-feedback-allocation
|
|
|
|
function* g(h) {
|
|
return yield* h;
|
|
}
|
|
|
|
var f = Object.getPrototypeOf(function*(){}).prototype;
|
|
var t = f.throw;
|
|
const h = (function*(){})();
|
|
h.next = function () { return { }; };
|
|
const x = g(h);
|
|
x.next();
|
|
delete f.throw;
|
|
|
|
try {
|
|
t.bind(x)();
|
|
} catch (e) {}
|
|
|
|
%PrepareFunctionForOptimization(g);
|
|
g();
|
|
%OptimizeFunctionOnNextCall(g);
|
|
g();
|