nodejs/deps/v8/test/mjsunit/regress/regress-1408606.js
Michaël Zasso f226350fcb deps: update V8 to 11.3.244.4
PR-URL: https://github.com/nodejs/node/pull/47251
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
2023-03-31 14:15:23 +00:00

19 lines
444 B
JavaScript

// Copyright 2023 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
var v0 = new Uint8ClampedArray();
function f0(cnt) {
Object.defineProperty(v0, cnt == 0 ? "subarray" : "property", {
})
v0[-7] = -1.5;
v0[-7];
}
%PrepareFunctionForOptimization(f0);
f0(0);
f0();
%OptimizeFunctionOnNextCall(f0);
f0();