mirror of
				https://github.com/tc39/test262.git
				synced 2025-11-03 21:24:30 +01:00 
			
		
		
		
	
		
			
				
	
	
		
			15 lines
		
	
	
		
			546 B
		
	
	
	
		
			JavaScript
		
	
	
	
	
	
			
		
		
	
	
			15 lines
		
	
	
		
			546 B
		
	
	
	
		
			JavaScript
		
	
	
	
	
	
// Copyright 2018 the V8 project authors. All rights reserved.
 | 
						|
// Use of this source code is governed by a BSD-style license that can be
 | 
						|
// found in the LICENSE file.
 | 
						|
 | 
						|
// Previously, spreading in-object properties would always treat double fields
 | 
						|
// as tagged, potentially dereferencing a Float64.
 | 
						|
 | 
						|
// Ensure that we don't fail an assert from --verify-heap when cloning a
 | 
						|
// MutableHeapNumber in the CloneObjectIC handler case.
 | 
						|
var src, clone;
 | 
						|
for (var i = 0; i < 40000; i++) {
 | 
						|
    src = { ...i, x: -9007199254740991 };
 | 
						|
    clone = { ...src };
 | 
						|
}
 |