| // Copyright 2018 the V8 project authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| // Previously, spreading in-object properties would always treat double fields |
| // as tagged, potentially dereferencing a Float64. |
| |
| // Ensure that we don't fail an assert from --verify-heap when cloning a |
| // MutableHeapNumber in the CloneObjectIC handler case. |
| var src, clone; |
| for (var i = 0; i < 40000; i++) { |
| src = { ...i, x: -9007199254740991 }; |
| clone = { ...src }; |
| } |
