node/deps/v8/test/mjsunit/regress/regress-crbug-1236286.js
Michaël Zasso 62719c5fd2
deps: update V8 to 9.5.172.19
PR-URL: https://github.com/nodejs/node/pull/40178
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2021-10-12 08:07:50 +02:00

21 lines
550 B
JavaScript

// Copyright 2021 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --fuzzing
// Without --fuzzing, %PrepareFunctionForOptimization would fail.
for (let i = 0; i < 2; i++) {
try { new this.invalid(); } catch {}
function invalid(x) {
"use asm";
var y = x.Math.fround;
function foo() {}
return {foo: foo};
}
%PrepareFunctionForOptimization(invalid);
%OptimizeFunctionOnNextCall(invalid);
}