mirror of
				https://github.com/tc39/test262.git
				synced 2025-10-31 11:44:31 +01:00 
			
		
		
		
	sourceRevisionAtLastExport: 33f2fb0e53d135f0ee17cfccd9d993eb2a6f47de targetRevisionAtLastExport: 31340cbd9add103f586d501b0c3354b7b182abc0
		
			
				
	
	
		
			23 lines
		
	
	
		
			498 B
		
	
	
	
		
			JavaScript
		
	
	
	
	
	
			
		
		
	
	
			23 lines
		
	
	
		
			498 B
		
	
	
	
		
			JavaScript
		
	
	
	
	
	
| // Copyright 2015 the V8 project authors. All rights reserved.
 | |
| // Use of this source code is governed by a BSD-style license that can be
 | |
| // found in the LICENSE file.
 | |
| 
 | |
| // Flags:  --allow-natives-syntax --stress-compaction
 | |
| 
 | |
| // To reliably reproduce the crash use --verify-heap --random-seed=-133185440
 | |
| 
 | |
| function __f_2(o) {
 | |
|   return o.field.b.x;
 | |
| }
 | |
| 
 | |
| try {
 | |
|   %OptimizeFunctionOnNextCall(__f_2);
 | |
|   __v_1 = __f_2();
 | |
| } catch(e) { }
 | |
| 
 | |
| function __f_3() { __f_3(/./.test()); };
 | |
| 
 | |
| try {
 | |
| __f_3();
 | |
| } catch(e) { }
 |