nodejs/deps/v8/test/mjsunit/regress/regress-crbug-1455707.js
Michaël Zasso 17a74ddd3d
deps: update V8 to 11.8.172.13
PR-URL: https://github.com/nodejs/node/pull/49639
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2023-10-10 08:25:41 +02:00

50 lines
1.1 KiB
JavaScript

// Copyright 2023 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --jit-fuzzing
for (let v0 = 0; v0 < 5; v0++) {
function f1() {
return v0;
}
function f2() {
return f2;
}
const v3 = f1.prototype;
v3.f = f2;
function f4() {
[v3,v3,v3];
}
function f6() {
function f7(a8, a9, a10) {
const o11 = {
};
const o12 = {
};
o11.__proto__ = o12;
const o13 = {
};
const t21 = o11.__proto__;
t21.__proto__ = o13;
for (let v15 = 0; v15 < 5; v15++) {
}
return a10;
}
f7(v3, f7, v0);
return f4;
}
const t30 = f4.prototype;
t30.f = f6;
const v18 = new f1();
const v19 = new f4();
function f20(a21) {
const t35 = a21.f();
return t35();
}
%PrepareFunctionForOptimization(f20);
f20(v18);
f20(v19);
const v26 = %OptimizeFunctionOnNextCall(f20);
}