blob: 79aaecf6fa31ecb9633d1ae6fcffc6094932e043 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
// Copyright 2018 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function opt() {
try{
Object.seal({})
}finally{
try{
// Carefully crafted by clusterfuzz to alias the temporary object literal
// register with the below dead try block's context register.
(
{
toString(){
}
}
).apply(-1).x( )
}
finally{
if(2.2)
{
return
}
// This code should be dead.
try{
Reflect.construct
}finally{
}
}
}
}
opt();
%OptimizeFunctionOnNextCall(opt);
opt();
|
