node/deps/v8/test/mjsunit/regress/regress-crbug-1082293.js
Michaël Zasso a1d639ba5d
deps: update V8 to 8.6.395
PR-URL: https://github.com/nodejs/node/pull/35415
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
2020-10-18 20:16:47 +02:00

19 lines
500 B
JavaScript

// Copyright 2020 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function f() {
let buffer = new ArrayBuffer(8);
let a32 = new Float32Array(buffer);
let a8 = new Uint32Array(buffer);
let a = { value: NaN };
Object.defineProperty(a32, 0, { value: NaN });
return a8[0];
}
let value = f();
%EnsureFeedbackVectorForFunction(f);
assertEquals(value, f());