v8/test/mjsunit/es6/regress/regress-new-target-context.js
mstarzinger 440a42b741 [fullcode] Switch passing of new.target to register.
This passes the new.target value in a register instead of through a
side-channel via the construct stub. Note that this marks the last
consumer of said side-channel and the special slot in the construct
stub frame can be removed as a follow-up.

R=bmeurer@chromium.org,yangguo@chromium.org
TEST=mjsunit/es6/regress/regress-new-target-context

Review URL: https://codereview.chromium.org/1492793002

Cr-Commit-Position: refs/heads/master@{#32548}
2015-12-03 10:04:35 +00:00

26 lines
845 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Test access of the new.target value in functions that also allocate local
// function contexts of varying sizes, making sure the value is not clobbered.
function makeFun(n) {
var source = "(function f" + n + "() { ";
for (var i = 0; i < n; ++i) source += "var v" + i + "; ";
source += "(function() { 0 ";
for (var i = 0; i < n; ++i) source += "+ v" + i + " ";
source += "})(); return { value: new.target }; })";
return eval(source);
}
// Exercise fast case.
var a = makeFun(4);
assertEquals(a, new a().value);
assertEquals(undefined, a().value);
// Exercise slow case.
var b = makeFun(128);
assertEquals(b, new b().value);
assertEquals(undefined, b().value);