c7643fe485
This cl also 1. Fixes a bug in effect-control-linearizer where we should have converted fixed array length from Smi to integer 2. Also prints deopt location for the new "bailout" deopt type on --trace-deopt. Bug: v8:10582, v8:9684 Change-Id: Iafc5e8abbca5252a8783a5a1184a1667a7f708a4 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2297460 Commit-Queue: Mythri Alle <mythria@chromium.org> Reviewed-by: Georg Neis <neis@chromium.org> Reviewed-by: Sathya Gunasekaran <gsathya@chromium.org> Cr-Commit-Position: refs/heads/master@{#69115}
33 lines
696 B
JavaScript
33 lines
696 B
JavaScript
// Copyright 2020 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --turboprop --dynamic-map-checks --opt
|
|
// Flags: --no-always-opt
|
|
|
|
function load(obj){
|
|
return obj.x;
|
|
}
|
|
|
|
var o = {x: 10, y:20};
|
|
var o1 = {x:10, y:20, z:30};
|
|
|
|
%PrepareFunctionForOptimization(load);
|
|
// polymorphic with same handler
|
|
load(o);
|
|
load(o1);
|
|
|
|
%OptimizeFunctionOnNextCall(load);
|
|
load(o);
|
|
load(o1);
|
|
assertOptimized(load);
|
|
|
|
var o2 = {y: 10, x:20};
|
|
// deopts but stays optimized
|
|
load(o2);
|
|
assertOptimized(load);
|
|
|
|
// deopts and discard code on wrong handler
|
|
load(o2);
|
|
assertUnoptimized(load);
|