v8/test/mjsunit/regress/regress-object-assign-deprecated-2.js
verwaest 1678bb557c MigrateInstance(target) before Object.assign(target, ...)
If the target is deprecated, the object will be updated on first store. If the source for that store equals the target, this will invalidate the cached representation of the source. Preventively upgrade the target.

BUG=chromium:604300
LOG=n

Review URL: https://codereview.chromium.org/1905933002

Cr-Commit-Position: refs/heads/master@{#35770}
2016-04-25 15:41:21 +00:00

9 lines
298 B
JavaScript

// Copyright 2016 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
var x = {a:1, b:2};
Object.defineProperty(x, "c", {set(v) {}})
var y = {get c() { return {a:1, b:2.5} }};
Object.assign(x, y, x);