node/deps/v8/test/mjsunit/regress/regress-487981.js
Michaël Zasso 48db20f6f5
deps: update V8 to 8.7.220
PR-URL: https://github.com/nodejs/node/pull/35700
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Shelley Vohr <codebytere@gmail.com>
2020-11-15 16:46:54 +01:00

25 lines
518 B
JavaScript

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --stress-compaction
// To reliably reproduce the crash use --verify-heap
function __f_2(o) {
return o.field.b.x;
}
%PrepareFunctionForOptimization(__f_2);
try {
%OptimizeFunctionOnNextCall(__f_2);
__v_1 = __f_2();
} catch (e) { }
function __f_3() { __f_3(/./.test()); };
try {
__f_3();
} catch (e) { }