8eaf1cde4a
Inside of LoopPeeler::PeelInnerLoopsOfTree we call the typer, which inspects heap objects, so we need to unpark the local heap. Reverted in https://chromium-review.googlesource.com/c/v8/v8/+/2502333 Original change's description: > [compiler] Replace Symbol with direct reads > > Bug: v8:7790 > Change-Id: I49120a6349777fd992a97d697940e79b2e71dbd1 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2400988 > Commit-Queue: Santiago Aboy Solanes <solanes@chromium.org> > Reviewed-by: Georg Neis <neis@chromium.org> > Cr-Commit-Position: refs/heads/master@{#69812} Bug: v8:7790, chromium:1137594 Change-Id: I8539175002e19b04b84009eb6b2cc5ced4ee53c9 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2502339 Commit-Queue: Santiago Aboy Solanes <solanes@chromium.org> Reviewed-by: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#70872}
18 lines
397 B
JavaScript
18 lines
397 B
JavaScript
// Copyright 2020 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
v = { symbol: Symbol() };
|
|
function f() {
|
|
for (var i = 0; i < 1; ++i) {
|
|
try { v.symbol(); } catch (e) {}
|
|
}
|
|
}
|
|
|
|
%PrepareFunctionForOptimization(f);
|
|
f();
|
|
%OptimizeFunctionOnNextCall(f);
|
|
f();
|