diff options
Diffstat (limited to 'deps/v8/test/mjsunit/regress/regress-v8-9267-1.js')
-rw-r--r-- | deps/v8/test/mjsunit/regress/regress-v8-9267-1.js | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/deps/v8/test/mjsunit/regress/regress-v8-9267-1.js b/deps/v8/test/mjsunit/regress/regress-v8-9267-1.js new file mode 100644 index 0000000000..fb3abea634 --- /dev/null +++ b/deps/v8/test/mjsunit/regress/regress-v8-9267-1.js @@ -0,0 +1,23 @@ +// Copyright 2019 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +// Flags: --allow-natives-syntax + +function bar(a) { + return Object.defineProperty(a, 'x', {get() { return 1; }}); +} + +function foo() { + return Array(1); +} + +%NeverOptimizeFunction(bar); +%PrepareFunctionForOptimization(foo); +const o = foo(); // Keep a reference so the GC doesn't kill the map. +bar(o); +const a = bar(foo()); +%OptimizeFunctionOnNextCall(foo); +const b = bar(foo()); + +assertTrue(%HaveSameMap(a, b)); |