mirror of
https://github.com/tc39/test262.git
synced 2025-10-31 03:34:08 +01:00
7298a38552
sourceRevisionAtLastExport: 33f2fb0e53d135f0ee17cfccd9d993eb2a6f47de targetRevisionAtLastExport: 31340cbd9add103f586d501b0c3354b7b182abc0
34 lines
684 B
JavaScript
34 lines
684 B
JavaScript
// Copyright 2015 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --expose-gc
|
|
|
|
var inner = new Array();
|
|
inner.a = {x:1};
|
|
inner[0] = 1.5;
|
|
inner.b = {x:2};
|
|
assertTrue(%HasDoubleElements(inner));
|
|
|
|
function foo(o) {
|
|
return o.field.a.x;
|
|
}
|
|
|
|
var outer = {};
|
|
outer.field = inner;
|
|
foo(outer);
|
|
foo(outer);
|
|
foo(outer);
|
|
%OptimizeFunctionOnNextCall(foo);
|
|
foo(outer);
|
|
|
|
// Generalize representation of field "a" of inner object.
|
|
var v = { get x() { return 0x7fffffff; } };
|
|
inner.a = v;
|
|
|
|
gc();
|
|
|
|
var boom = foo(outer);
|
|
print(boom);
|
|
assertEquals(0x7fffffff, boom);
|