nodejs/deps/v8/test/mjsunit/regress/regress-358088.js
Ben Noordhuis 3a280b2034 deps: upgrade v8 to 3.26.33
Signed-off-by: Fedor Indutny <fedor@indutny.com>
2014-06-12 17:46:17 -07:00

19 lines
449 B
JavaScript

// Copyright 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
function f(a) {
a[a.length] = 1;
}
function g(a, i, v) {
a[i] = v;
}
f([]); // f KeyedStoreIC goes to 1.GROW
o = {};
g(o); // We've added property "undefined" to o
o = {}; // A transition on property "undefined" exists from {}
f(o); // Store should go generic.