v8/test/mjsunit/compiler/regress-crbug-1228407.js
Georg Neis db9c2e058b [compiler] Add some regression tests
Bug: chromium:1228407, chromium:1234764, chromium:1234770, chromium:1247763
Change-Id: I1e8ffaa04eeda22b71ece2f59038e5c92861fde0
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3172751
Commit-Queue: Georg Neis <neis@chromium.org>
Commit-Queue: Maya Lekova <mslekova@chromium.org>
Auto-Submit: Georg Neis <neis@chromium.org>
Reviewed-by: Maya Lekova <mslekova@chromium.org>
Cr-Commit-Position: refs/heads/main@{#76955}
2021-09-21 09:17:38 +00:00

25 lines
474 B
JavaScript

// Copyright 2021 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --interrupt-budget=100
function foo() {
return function bar() {
a.p = 42;
for (let i = 0; i < 100; i++) this.p();
this.p = a;
};
}
var a = foo();
var b = foo();
a.prototype = { p() {} };
b.prototype = { p() {
this.q = new a();
for (let i = 0; i < 200; i++) ;
}};
new b();