f8465b45f7
This fixes a missing SSA-renaming of the callee value used in the frame state of a call node. An OSR-entry within do-expressions contained in one of the argument expression can trigger that renaming. R=rossberg@chromium.org TEST=mjsunit/regress/regress-crbug-546968 BUG=chromium:546968 LOG=n Review URL: https://codereview.chromium.org/1430483002 Cr-Commit-Position: refs/heads/master@{#31613}
15 lines
345 B
JavaScript
15 lines
345 B
JavaScript
// Copyright 2015 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --harmony-do-expressions
|
|
|
|
function f() {
|
|
print(
|
|
do {
|
|
for (var i = 0; i < 10; i++) { if (i == 5) %OptimizeOsr(); }
|
|
}
|
|
);
|
|
}
|
|
f();
|