c3218375c1
The inline allocation sequence in the optimizing compilers cannot deal well with funky types like JSRegExp, which have some magic fields in addition to the inobject properties. In Crankshaft we already use the FastNewObjectStub for %_NewObject in general, so fix TurboFan to the same. Hopefully one day we can kill %_NewObject completely. R=jarin@chromium.org BUG=chromium:609029 LOG=n Review-Url: https://codereview.chromium.org/1943403004 Cr-Commit-Position: refs/heads/master@{#36006}
8 lines
302 B
JavaScript
8 lines
302 B
JavaScript
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --always-opt --function-context-specialization --gc-interval=14
|
|
// Flags: --turbo-filter=match --verify-heap
|
|
"xxx".match();
|