437a33efd2
This makes sure we only replace load operations for fields on virtual objects. Even though data flow information for non-virtual (escaping) allocations is available, it might be inaccurate in certain situations where object state hasn't been cleared. R=jarin@chromium.org TEST=mjsunit/compiler/regress-escape-analysis-indirect Review-Url: https://codereview.chromium.org/2369953002 Cr-Commit-Position: refs/heads/master@{#39776}
18 lines
503 B
JavaScript
18 lines
503 B
JavaScript
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --turbo --turbo-escape
|
|
|
|
function f(apply) {
|
|
var value = 23;
|
|
apply(function bogeyman() { value = 42 });
|
|
return value;
|
|
}
|
|
function apply(fun) { fun() }
|
|
assertEquals(42, f(apply));
|
|
assertEquals(42, f(apply));
|
|
%NeverOptimizeFunction(apply);
|
|
%OptimizeFunctionOnNextCall(f);
|
|
assertEquals(42, f(apply));
|