test262/implementation-contributed/javascriptcore/stress/licm-pre-header-cannot-exit-nested.js

//@ runFTLNoCJIT("--createPreHeaders=false")

function foo(object, predicate) {
    for (var j = 0; j < 10; ++j) {
        var result = 0;
        var i = 0;
        if ($vm.dfgTrue())
            predicate = 42;
        while (predicate >= 42) {
            result += object.array[i++];
            if (i >= object.array.length)
                break;
        }
    }
    return result;
}

noInline(foo);

for (var i = 0; i < 10000; ++i)
    foo({array: [1, 2, 3]}, {valueOf: function() { return 42; }});