// Copyright 2013 the V8 project authors. All rights reserved. // Copyright (C) 2005, 2006, 2007, 2008, 2009 Apple Inc. All rights reserved. // // Redistribution and use in source and binary forms, with or without // modification, are permitted provided that the following conditions // are met: // 1. Redistributions of source code must retain the above copyright // notice, this list of conditions and the following disclaimer. // 2. Redistributions in binary form must reproduce the above copyright // notice, this list of conditions and the following disclaimer in the // documentation and/or other materials provided with the distribution. // // THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND ANY // EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED // WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE // DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR ANY // DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES // (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; // LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON // ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS // SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. description( "This tests that speculation recovery of destructive additions on unboxed integers works." ); function destructiveAddForBoxedInteger(a,b,c) { var a_ = a.x; var d = a_ + b; return c + d + b; } // warm-up foo to be integer for (var i = 0; i < 100; ++i) { destructiveAddForBoxedInteger({x:1}, 2, 3); } shouldBe("destructiveAddForBoxedInteger({x:1}, 2, 4)", "9"); shouldBe("destructiveAddForBoxedInteger({x:2147483647}, 2, 4)", "2147483655"); shouldBe("destructiveAddForBoxedInteger({x:2}, 2147483647, 4)", "4294967300"); shouldBe("destructiveAddForBoxedInteger({x:2147483647}, 2147483647, 4)", "6442450945"); shouldBe("destructiveAddForBoxedInteger({x:1}, 2, 2147483647)", "2147483652");