994db73210
Bug: v8:8801,v8:8394,v8:9183 Change-Id: I55027b3ba0c78f40d82aaf2d160aaf957d02cab5 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1662292 Auto-Submit: Ross McIlroy <rmcilroy@chromium.org> Commit-Queue: Mythri Alle <mythria@chromium.org> Reviewed-by: Mythri Alle <mythria@chromium.org> Cr-Commit-Position: refs/heads/master@{#62214}
29 lines
639 B
JavaScript
29 lines
639 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
function C() { }
|
|
|
|
function f(b) {
|
|
var o = new C();
|
|
// Create out-of-object properties only on one branch so that escape
|
|
// analysis does not analyze the property array away.
|
|
if (b) o.t = 1.1;
|
|
%_DeoptimizeNow();
|
|
return o.t;
|
|
}
|
|
%PrepareFunctionForOptimization(f);
|
|
|
|
// Finish slack tracking for C.
|
|
for (var i = 0; i < 1000; i++) new C();
|
|
|
|
f(true);
|
|
f(true);
|
|
f(false);
|
|
|
|
%OptimizeFunctionOnNextCall(f);
|
|
|
|
assertEquals(1.1, f(true));
|