15c9ff0758
which was enabled a long ago and is not supposed to be disabled. In addition this CL adds Representation::MightCauseMapDeprecation() predicate and ensures it's consistent with the existing MostGenericInPlaceChange() and CanBeInPlaceChangedTo(). Bug: v8:11104, v8:8865 Change-Id: Ia8046b76822c9b20fe3ce85de6b98570334aad21 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2527088 Commit-Queue: Igor Sheludko <ishell@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/master@{#71151}
83 lines
2.3 KiB
JavaScript
83 lines
2.3 KiB
JavaScript
// Copyright 2019 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
// Flags: --no-always-opt --opt
|
|
|
|
// Test that code embedding accesses to a Smi field gets properly
|
|
// deoptimized if s->t field representation changes are done in-place.
|
|
(function() {
|
|
function O(x) { this.x = x; }
|
|
|
|
function foo(o) { return o.x; }
|
|
%PrepareFunctionForOptimization(foo);
|
|
// We need to keep an instance around to make the GC stress testing work.
|
|
const o1 = new O(1);
|
|
foo(o1);
|
|
foo(new O(2));
|
|
%OptimizeFunctionOnNextCall(foo);
|
|
foo(new O(3));
|
|
assertOptimized(foo);
|
|
|
|
new O(null);
|
|
assertUnoptimized(foo);
|
|
})();
|
|
|
|
// Test that code embedding assignments to a Smi field gets properly
|
|
// deoptimized if s->t field representation changes are done in-place.
|
|
(function() {
|
|
function O(x) { this.x = x; }
|
|
|
|
function foo(o) { o.x = 0; }
|
|
%PrepareFunctionForOptimization(foo);
|
|
// We need to keep an instance around to make the GC stress testing work.
|
|
const o1 = new O(1);
|
|
foo(o1);
|
|
foo(new O(2));
|
|
%OptimizeFunctionOnNextCall(foo);
|
|
foo(new O(3));
|
|
assertOptimized(foo);
|
|
|
|
new O(null);
|
|
assertUnoptimized(foo);
|
|
})();
|
|
|
|
// Test that code embedding accesses to a HeapObject field gets properly
|
|
// deoptimized if h->t field representation changes are done in-place.
|
|
(function() {
|
|
function O(x) { this.x = x; }
|
|
|
|
function foo(o) { return o.x; }
|
|
%PrepareFunctionForOptimization(foo);
|
|
// We need to keep an instance around to make the GC stress testing work.
|
|
const onull = new O(null);
|
|
foo(onull);
|
|
foo(new O("Hello"));
|
|
%OptimizeFunctionOnNextCall(foo);
|
|
foo(new O({}));
|
|
assertOptimized(foo);
|
|
|
|
new O(1);
|
|
assertUnoptimized(foo);
|
|
})();
|
|
|
|
// Test that code embedding assignments to a Smi field gets properly
|
|
// deoptimized if s->t field representation changes are done in-place.
|
|
(function() {
|
|
function O(x) { this.x = x; }
|
|
|
|
function foo(o) { o.x = true; }
|
|
%PrepareFunctionForOptimization(foo);
|
|
// We need to keep an instance around to make the GC stress testing work.
|
|
const onull = new O(null);
|
|
foo(onull);
|
|
foo(new O("Hello"));
|
|
%OptimizeFunctionOnNextCall(foo);
|
|
foo(new O({}));
|
|
assertOptimized(foo);
|
|
|
|
new O(1);
|
|
assertUnoptimized(foo);
|
|
})();
|