918fe04351
PR-URL: https://github.com/nodejs/node/pull/58070 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Darshan Sen <raisinten@gmail.com> Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
41 lines
1.5 KiB
JavaScript
41 lines
1.5 KiB
JavaScript
// Copyright 2024 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --turbolev --turbofan
|
|
// Flags: --no-always-turbofan
|
|
|
|
function foo(arr, x) {
|
|
let sum = 0;
|
|
let v = 4.65; // {v} will be a HoleyFloat64 Phi
|
|
for (let i = 0; i < 10; i++) {
|
|
sum += v; // This is a Float64 use of {v} to ensures that it gets untagged.
|
|
v = arr[i]; // HoleyFloat64 input to {v}.
|
|
}
|
|
// {v} is now a Float64 hole (because arr[9] is a hole).
|
|
|
|
// This addition will have Smi feedback, and we'll make it deopt by overflow
|
|
// Smi range. {v} will be passed in the FrameState. If it's marked as Float64
|
|
// MachineRepresentation in the FrameState, then the deoptimizer will
|
|
// materialize a NaN HeapNumber for it, which is wrong. It should instead have
|
|
// HoleyFloat64 MachineRepresentation, and be materialized by the deoptimizer
|
|
// as Undefined.
|
|
let xtimes10 = x * 10;
|
|
|
|
// We mainly care about returning {v} here, but we're also returning the other
|
|
// things so that they aren't dead and optimized out.
|
|
return [ sum, v, xtimes10 ];
|
|
}
|
|
|
|
let arr = [0.0, 1.1, 2.2, 3.3, 4.4, 5.5, 6.6, 7.7, 8.8, /*hole*/, 9.9,
|
|
10.10, 11.11, 12.12, 13.13, 14.14];
|
|
|
|
%PrepareFunctionForOptimization(foo);
|
|
assertEquals(undefined, foo(arr, 42)[1]);
|
|
|
|
%OptimizeFunctionOnNextCall(foo);
|
|
assertEquals(undefined, foo(arr, 42)[1]);
|
|
|
|
// We'll now trigger a deopt.
|
|
assertEquals(undefined, foo(arr, 1000000000)[1]);
|