node/deps/v8/test/mjsunit/compiler/regress-621147.js
Ben Noordhuis 245ac302f5 deps: update V8 to 5.1.281.75
Pick up the latest branch-head for V8 5.1.  Introduces a semver-minor
overload of v8::Function::New() for use by v8_inspector.

Refs: https://github.com/nodejs/node/pull/7586
PR-URL: https://github.com/nodejs/node/pull/7615
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
Reviewed-By: Michaël Zasso <mic.besace@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
2016-07-09 09:13:15 +02:00

30 lines
514 B
JavaScript

// Copyright 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --turbo-filter=test2
function test(n) {
return Array(n);
}
function test2() {
return test(2);
}
function test3(a) {
a[0] = 1;
}
test(0);
var smi_array = [1,2];
smi_array[2] = 3;
test3(smi_array);
%OptimizeFunctionOnNextCall(test2);
var broken_array = test2();
test3(broken_array);
1+broken_array[0];