v8/test/mjsunit/compiler/regress-crbug-1209558.js
Georg Neis 67cac2c51a [compiler] Add regression tests
Bug: chromium:1209558, chromium:1211215
Tbr: ishell@chromium.org, dinfuehr@chromium.org
Change-Id: I0908927b597432376b8e8881d278b80dca08ed8f
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2992723
Reviewed-by: Georg Neis <neis@chromium.org>
Commit-Queue: Georg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#75442}
2021-06-29 15:25:37 +00:00

60 lines
1001 B
JavaScript

// Copyright 2021 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --expose-gc --interrupt-budget=100 --predictable
let GC;
(function () {
let countGC = 0;
GC = function () {
if (countGC++ < 50) gc();
};
})();
var dummy = {};
dummy.index = 1;
delete dummy.index;
GC();
dummy.index = 1;
delete dummy.index;
GC();
dummy.index = 1;
delete dummy.index;
GC();
dummy.index = 1;
delete dummy.index;
GC();
dummy.index = 1;
delete dummy.index;
GC();
function main() {
const obj = {};
const anotherobj = { a: 10 };
obj.d = anotherobj;
try {
delete obj.d;
GC();
} catch (e) {}
try { obj.d = obj; } catch (e) {}
const a = [1];
try {
for (var i = 0; i < 10; i++) {
var s = "";
s.x = function () { if (typeof i == "object") gaga(a); };
try { obj[0] = {}; } catch (e) {}
}
} catch (e) {}
}
for (var i = 0; i < 50; i++) {
main();
}