v8/test/mjsunit/regress/regress-460937.js
Jaroslav Sevcik 82a28adf05 Do not set target in deoptimized code in keyed store IC.
BUG=chromium:460937
R=ishell@chromium.org
LOG=n

Review URL: https://codereview.chromium.org/989093002

Cr-Commit-Position: refs/heads/master@{#27064}
2015-03-09 10:11:13 +00:00

20 lines
389 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function f() {
var a = new Array(100000);
var i = 0;
while (!%HasFastDoubleElements(a)) {
a[i] = i;
i += 0.1;
}
a[1] = 1.5;
}
f();
%OptimizeFunctionOnNextCall(f);
f();