mirror of
https://github.com/tc39/test262.git
synced 2025-10-31 19:53:50 +01:00
7298a38552
sourceRevisionAtLastExport: 33f2fb0e53d135f0ee17cfccd9d993eb2a6f47de targetRevisionAtLastExport: 31340cbd9add103f586d501b0c3354b7b182abc0
25 lines
524 B
JavaScript
25 lines
524 B
JavaScript
// Copyright 2014 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
var d = {x: undefined, y: undefined};
|
|
|
|
function Crash(left, right) {
|
|
var c = {
|
|
x: right.x - left.x,
|
|
y: right.y - left.y
|
|
};
|
|
return c.x * c.y;
|
|
}
|
|
|
|
var a = {x: 0.5, y: 0};
|
|
var b = {x: 1, y: 0};
|
|
|
|
for (var i = 0; i < 3; i++) Crash(a, b);
|
|
%OptimizeFunctionOnNextCall(Crash);
|
|
Crash(a, b);
|
|
|
|
Crash({x: 0, y: 0.5}, b);
|