v8/test/mjsunit/regress/regress-crbug-571370.js
ishell c1aded3c4b [ic] Fixed receiver_map register trashing in KeyedStoreIC megamorphic.
BUG=chromium:571370
LOG=Y

Review URL: https://codereview.chromium.org/1546323002

Cr-Commit-Position: refs/heads/master@{#33057}
2015-12-29 12:52:13 +00:00

11 lines
279 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
var val = [0.5];
var arr = [0.5];
for (var i = -1; i < 1; i++) {
arr[i] = val;
}
assertEquals(val, arr[-1]);