nodejs/deps/v8/test/mjsunit/regress/regress-crbug-333065494.js
Michaël Zasso 9d7cd9b864
deps: update V8 to 12.8.374.13
PR-URL: https://github.com/nodejs/node/pull/54077
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
2024-08-16 16:03:01 +02:00

28 lines
684 B
JavaScript

// Copyright 2024 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --stress-concurrent-inlining-attach-code
// Flags: --stress-concurrent-inlining --no-maglev-overwrite-budget
// Flags: --no-assert-types
function foo(__v_56, v) {
var bla = {
x: v,
__proto__: __v_56
};
bla.x;
}
%PrepareFunctionForOptimization(foo);
(function() {
foo(arguments, 0);
})();
(function() {
foo(arguments, 0);
// Deprecate bla's map.
foo(arguments, NaN);
})();
// Optimize function with deprecated map in IC
%OptimizeFunctionOnNextCall(foo);
foo();