v8/test/mjsunit/array-push12.js
jarin 0cd991ebc0 Do not inline array push for arrays with dictionary mode elements.
BUG=chromium:452878
LOG=n

Review URL: https://codereview.chromium.org/880233002

Cr-Commit-Position: refs/heads/master@{#26357}
2015-01-30 13:51:43 +00:00

24 lines
384 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
var a = [];
for (var i = -20; i < 0; ++i) {
a[i] = 0;
}
function g() {
[].push.apply(a, arguments);
}
function f() {
g();
}
g();
g();
%OptimizeFunctionOnNextCall(f);
f();