node/deps/v8/test/mjsunit/compiler/regress-621147.js
Ujjwal Sharma f579e11940 deps: update V8 to 7.4.288.13
PR-URL: https://github.com/nodejs/node/pull/26685
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Refael Ackermann <refack@gmail.com>
2019-03-28 16:36:18 -04:00

32 lines
555 B
JavaScript

// Copyright 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --turbo-filter=test2
function test(n) {
return Array(n);
}
function test2() {
return test(2);
}
function test3(a) {
a[0] = 1;
}
%PrepareFunctionForOptimization(test2);
test(0);
var smi_array = [1,2];
smi_array[2] = 3;
test3(smi_array);
%OptimizeFunctionOnNextCall(test2);
var broken_array = test2();
test3(broken_array);
1+broken_array[0];