v8/test/mjsunit/regress/regress-crbug-551287.js
jkummerow 3cb3a6fe4a [crankshaft] Fix crash when case labels inline endless loops
The fix is to bail out of compilation in that case.

BUG=chromium:551287
LOG=n
R=yangguo@chromium.org

Review URL: https://codereview.chromium.org/1483373002

Cr-Commit-Position: refs/heads/master@{#32454}
2015-12-01 12:17:31 +00:00

18 lines
358 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function f() { do { } while (true); }
function boom(x) {
switch(x) {
case 1:
case f(): return;
}
}
%OptimizeFunctionOnNextCall(boom)
boom(1);