7b7e61c1e6
Fail IsInvalid check if the property cell has been invalidated. Bug: chromium:905555 Change-Id: Ia0712b97bd6ba628936b74b3893ddb1c229ee686 Reviewed-on: https://chromium-review.googlesource.com/c/1339863 Commit-Queue: Jaroslav Sevcik <jarin@chromium.org> Reviewed-by: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#57597}
26 lines
647 B
JavaScript
26 lines
647 B
JavaScript
// Copyright 2018 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --block-concurrent-recompilation --noalways-opt
|
|
|
|
global = 1;
|
|
|
|
function boom(value) {
|
|
return global;
|
|
}
|
|
|
|
assertEquals(1, boom());
|
|
assertEquals(1, boom());
|
|
%OptimizeFunctionOnNextCall(boom, "concurrent");
|
|
assertEquals(1, boom());
|
|
|
|
this.__defineGetter__("global", () => 42);
|
|
|
|
%UnblockConcurrentRecompilation();
|
|
|
|
// boom should be deoptimized because the global property cell has changed.
|
|
assertUnoptimized(boom, "sync");
|
|
|
|
assertEquals(42, boom());
|