node/deps/v8/test/mjsunit/ic-migrated-map-update-when-deprecated.js
Michaël Zasso 6bd756d7c6
deps: update V8 to 10.7.193.13
PR-URL: https://github.com/nodejs/node/pull/44741
Fixes: https://github.com/nodejs/node/issues/44650
Fixes: https://github.com/nodejs/node/issues/37472
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
2022-10-11 07:24:33 +02:00

28 lines
819 B
JavaScript

// Copyright 2021 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --turbofan
// https://bugs.chromium.org/p/v8/issues/detail?id=10816
// When V8 sees a deprecated map, update the IC with its target.
function A() { this.x = 1 }
function B() { this.x = 1 }
function load(o) { return o.x }
%PrepareFunctionForOptimization(load);
// Initialize the load IC with the map of A before we deprecate it.
load(new A());
const oldB = new B();
(new A()).x = 1.5; // deprecates map already in FV
(new B()).x = 1.5; // deprecates map for oldB
// Should update the load IC with the target of the deprecated map.
load(oldB);
%OptimizeFunctionOnNextCall(load);
load(oldB);
assertOptimized(load);