d66ed1176f
BUG=405517 LOG=N TEST=mjsunit/regress/regress-crbug-405517.js R=bmeurer@chromium.org Review URL: https://codereview.chromium.org/552333002 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@23828 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
20 lines
455 B
JavaScript
20 lines
455 B
JavaScript
// Copyright 2014 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
function __f_6() {
|
|
var __v_7 = [0];
|
|
%PreventExtensions(__v_7);
|
|
for (var __v_6 = -2; __v_6 < 19; __v_6++) __v_7.shift();
|
|
__f_7(__v_7);
|
|
}
|
|
__f_6();
|
|
__f_6();
|
|
%OptimizeFunctionOnNextCall(__f_6);
|
|
__f_6();
|
|
function __f_7(__v_7) {
|
|
__v_7.push(Infinity);
|
|
}
|