56e1b13ea1
In case the receiver map has an enum cache, %ForInPrepare returns the length of the actual enum cache, which might include properties that are further down the transition tree tho. R=jarin@chromium.org BUG=v8:3650 LOG=n Review URL: https://codereview.chromium.org/1619353002 Cr-Commit-Position: refs/heads/master@{#33469}
24 lines
460 B
JavaScript
24 lines
460 B
JavaScript
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
var a = {}
|
|
var b = {}
|
|
a.x = 1;
|
|
a.y = 1;
|
|
b.x = 1;
|
|
|
|
function foo(c) {
|
|
var s = 0;
|
|
for (var p in c) { s++; }
|
|
return s;
|
|
}
|
|
|
|
assertEquals(2, foo(a));
|
|
assertEquals(1, foo(b));
|
|
%OptimizeFunctionOnNextCall(foo);
|
|
assertEquals(2, foo(a));
|
|
assertEquals(1, foo(b));
|