e416e3c475
Do not overwrite handle values in AddNamedProperty which could cause invalid handles in combination with CanonicalHandleScope. Bug: chromium:802333 Change-Id: I373ab60579901bba65336ae3814e466e07392e22 Reviewed-on: https://chromium-review.googlesource.com/873032 Reviewed-by: Igor Sheludko <ishell@chromium.org> Commit-Queue: Igor Sheludko <ishell@chromium.org> Cr-Commit-Position: refs/heads/master@{#50890}
27 lines
495 B
JavaScript
27 lines
495 B
JavaScript
// Copyright 2018 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
function deferred_func() {
|
|
class C {
|
|
method1() {
|
|
|
|
}
|
|
}
|
|
}
|
|
|
|
let bound = (a => a).bind(this, 0);
|
|
|
|
function opt() {
|
|
deferred_func.prototype; // ReduceJSLoadNamed
|
|
|
|
return bound();
|
|
}
|
|
|
|
assertEquals(0, opt());
|
|
%OptimizeFunctionOnNextCall(opt);
|
|
|
|
assertEquals(0, opt());
|