v8/test/mjsunit/compiler/deopt-lazy-freeze.js
Juliana Franco 337f38e0ec Deoptimizer tests
Adding (very) small tests for deoptimization.
Some of these tests were failing when the safepoints were not found,
after setting the return address.

BUG=V8:6563

Change-Id: I3af36b193a5982cd73414cc1884c5f0a7a727f5a
Reviewed-on: https://chromium-review.googlesource.com/584751
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Commit-Queue: Juliana Patricia Vicente Franco <jupvfranco@google.com>
Cr-Commit-Position: refs/heads/master@{#46922}
2017-07-27 07:21:46 +00:00

29 lines
646 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file
// Flags: --allow-natives-syntax
var b = false;
var obj = {f: 1, g: 2};
function setMutability() {
if (b) Object.freeze(obj);
}
%NeverOptimizeFunction(setMutability);
function setAndUseObject() {
setMutability(obj);
if (!Object.isFrozen(obj)) {
var t = obj.f;
obj.f = t * 2;
}
return obj.f;
}
assertEquals(setAndUseObject(), 2);
assertEquals(setAndUseObject(), 4);
%OptimizeFunctionOnNextCall(setAndUseObject);
b = true;
assertEquals(setAndUseObject(), 4);