deps/v8/test/mjsunit/regress/regress-crbug-930948.js


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

// Copyright 2019 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// Flags: --verify-heap --allow-natives-syntax

// This checks that TransitionAndStoreNumberElement silences NaNs.
function foo() {
  return [undefined].map(Math.asin);
}
foo();
foo();
%OptimizeFunctionOnNextCall(foo);
foo();

// This checks that TransitionAndStoreElement silences NaNs.
function bar(b) {
  return [undefined].map(x => b ? Math.asin(x) : "string");
}
bar(true);
bar(false);
bar(true);
bar(false);
%OptimizeFunctionOnNextCall(bar);
bar(true);