v8/test/mjsunit/regress/regress-crbug-382143.js
bmeurer@chromium.org 0fcd89161b Fix invalid attributes when generalizing because of incompatible map change.
BUG=382143
LOG=y
TEST=mjsunit/regress/regress-382143
R=verwaest@chromium.org

Review URL: https://codereview.chromium.org/324933003

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@21743 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
2014-06-10 12:24:54 +00:00

17 lines
459 B
JavaScript

// Copyright 2013 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
function A() {
Object.defineProperty(this, "x", { set: function () {}, get: function () {}});
this.a = function () { return 1; }
}
function B() {
A.apply( this );
this.a = function () { return 2; }
}
var b = new B();
assertTrue(Object.getOwnPropertyDescriptor(b, "a").enumerable);