mirror of
https://github.com/nodejs/node.git
synced 2025-05-21 14:39:17 +00:00
ec02b811a8
Pick up latest commit from the 5.4-lkgr branch. deps: edit V8 gitignore to allow trace event copy deps: update V8 trace event to 315bf1e2d45be7d53346c31cfcc37424a32c30c8 deps: edit V8 gitignore to allow gtest_prod.h copy deps: update V8 gtest to 6f8a66431cb592dad629028a50b3dd418a408c87 PR-URL: https://github.com/nodejs/node/pull/8317 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Ali Ijaz Sheikh <ofrobots@google.com>
40 lines
1.1 KiB
JavaScript
40 lines
1.1 KiB
JavaScript
// Copyright 2015 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
function Receiver() { this.receiver = "receiver"; }
|
|
function Proto() { this.proto = "proto"; }
|
|
|
|
function f(a) {
|
|
return a.foo;
|
|
}
|
|
|
|
var rec = new Receiver();
|
|
|
|
// Formerly, this mutated rec.__proto__.__proto__, but
|
|
// the global object prototype chain is now immutable;
|
|
// not sure if this test now hits the original hazard case.
|
|
var proto = rec.__proto__;
|
|
|
|
// Initialize prototype chain dependent IC (nonexistent load).
|
|
assertEquals(undefined, f(rec));
|
|
assertEquals(undefined, f(rec));
|
|
|
|
// Add a new prototype to the end of the chain.
|
|
var p2 = new Proto();
|
|
p2.__proto__ = null;
|
|
proto.__proto__ = p2;
|
|
|
|
// Update the IC.
|
|
assertEquals(undefined, f(rec));
|
|
|
|
// Now modify the most recently added prototype by adding a property...
|
|
p2.foo = "bar";
|
|
assertEquals("bar", f(rec));
|
|
|
|
// ...and removing it again. Due to missing prototype user registrations,
|
|
// this fails to invalidate the IC.
|
|
delete p2.foo;
|
|
p2.secret = "GAME OVER";
|
|
assertEquals(undefined, f(rec));
|