v8/test/mjsunit/compiler/regress-1063661.js
Georg Neis 33306c4ee7 [turbofan] Fix NumberMin and NumberMax typings
For some input types containing -0 but not +0, the result type of
NumberMin and NumberMax would unnecessarily include +0. However, for
some larger inputs, the result type would not include the spurious +0,
thus breaking monotonicity.

The CL fixes this and addresses a TODO as well.

Bug: chromium:1063661
Change-Id: Icd56d6102fbea12a2d96aa063a803b1052c714b8
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2116199
Commit-Queue: Georg Neis <neis@chromium.org>
Reviewed-by: Tobias Tebbi <tebbi@chromium.org>
Cr-Commit-Position: refs/heads/master@{#66854}
2020-03-25 11:19:13 +00:00

19 lines
474 B
JavaScript

// Copyright 2020 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --interrupt-budget=1024
function main() {
const v1 = [];
for (let v11 = 0; v11 < 7; v11++) {
for (let v16 = 0; v16 != 100; v16++) {}
for (let v18 = -0.0; v18 < 7; v18 = v18 || 13.37) {
const v21 = Math.max(-339,v18);
v1.fill();
undefined % v21;
}
}
}
main();