v8/test/mjsunit/compiler/regress-758096.js
Jaroslav Sevcik 5100a00960 [turbofan] Reland^3 "Polymorphic inlining - try merge map check dispatch with function call dispatch."
This reverts commit ae28e0cff1.

Bug: chromium:758096
Change-Id: I6541bd1ba46cd5dfb942ed3f3d382e047fb1f3e6
Reviewed-on: https://chromium-review.googlesource.com/657401
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Commit-Queue: Jaroslav Sevcik <jarin@chromium.org>
Cr-Commit-Position: refs/heads/master@{#47934}
2017-09-11 04:18:38 +00:00

55 lines
888 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
(function() {
var x = 1;
x.__proto__.f = function() { return 1; }
function g() {}
g.prototype.f = function() { return 3; };
var y = new g();
function f(obj) {
return obj.f();
}
f(x);
f(y);
f(x);
f(y);
%OptimizeFunctionOnNextCall(f);
assertEquals(1, f(x));
assertEquals(3, f(y));
})();
(function() {
function f() { return 1; }
function g() { return 2; }
var global;
function h(s) {
var fg;
var a = 0;
if (s) {
global = 0;
a = 1;
fg = f;
} else {
global = 1
fg = g;
}
return fg() + a;
}
h(0);
h(0);
h(1);
h(1);
%OptimizeFunctionOnNextCall(h);
assertEquals(2, h(0));
})();