v8/test/mjsunit/regress/regress-1393865.js
Qifan Pan 90fe7dc9ce [turbofan] Fix BigInt shift operations
This CL fixed missing instance type checks for constant shift
amounts and corrected the use info for the lhs.

Bug: chromium:1393865, v8:9407
Change-Id: Id6e65f4e26a0436960b12196f29663429876398b
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4061075
Commit-Queue: Qifan Pan <panq@google.com>
Reviewed-by: Nico Hartmann <nicohartmann@chromium.org>
Cr-Commit-Position: refs/heads/main@{#84596}
2022-12-01 13:24:28 +00:00

29 lines
580 B
JavaScript

// Copyright 2022 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function aux(a, b) {
if (a) {
a >> b;
}
}
function opt() {
let p = Promise;
++p;
// {p} can be anything that evaluates to false but is not inlined.
return aux(p, "number");
}
%PrepareFunctionForOptimization(aux);
aux(1n, 1n);
%OptimizeFunctionOnNextCall(aux);
aux(1n, 1n);
%PrepareFunctionForOptimization(opt);
opt();
%OptimizeFunctionOnNextCall(opt);
opt();