v8/test/mjsunit/regress/regress-899115.js
Georg Neis cd629c01ec [turbofan] Serialize receiver prototypes more often.
This just adds calls to SerializePrototype right before we access the
serialized prototype. Eventually we need to do this earlier.

Bug: v8:7790, chromium:899115
Change-Id: I597e95f5f6df8aae608ee295fe9550e7c2a45e6d
Reviewed-on: https://chromium-review.googlesource.com/c/1301475
Reviewed-by: Maya Lekova <mslekova@chromium.org>
Commit-Queue: Georg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#57034}
2018-10-26 14:10:45 +00:00

14 lines
310 B
JavaScript

// Copyright 2018 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function foo() {
Object.getPrototypeOf([]).includes();
}
foo();
%OptimizeFunctionOnNextCall(foo);
foo();