v8/test/mjsunit/compiler/regress-to-number-binop-deopt.js
jarin 0b8063cec8 [turbofan] Avoid ToNumber conversions if they could deoptimize.
BUG=chromium:454158
LOG=n
R=bmeurer@chromium.org

Review URL: https://codereview.chromium.org/922623002

Cr-Commit-Position: refs/heads/master@{#26661}
2015-02-16 12:59:20 +00:00

26 lines
580 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function deopt(f) {
return { valueOf : function() { %DeoptimizeFunction(f); return 1.1; } };
}
function or_zero(o) {
return o|0;
}
function multiply_one(o) {
return +o;
}
function multiply_one_symbol() {
return +Symbol();
}
assertThrows(multiply_one_symbol, TypeError);
assertEquals(1, or_zero(deopt(or_zero)));
assertEquals(1.1, multiply_one(deopt(multiply_one)));