src/v8/test/mjsunit/regress/regress-crbug-381534.js

// Copyright 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// Flags: --allow-natives-syntax

var obj = {};

function f(v) {
  var v1 = -(4 / 3);
  var v2 = 1;
  var arr = new Array(
      +0, true, 0, -0, false, undefined, null, '0', obj, v1, -(4 / 3),
      -1.3333333333333, 'str', v2, 1, false);
  assertEquals(10, arr.lastIndexOf(-(4 / 3)));
  assertEquals(9, arr.indexOf(-(4 / 3)));

  assertEquals(10, arr.lastIndexOf(v));
  assertEquals(9, arr.indexOf(v));

  assertEquals(8, arr.lastIndexOf(obj));
  assertEquals(8, arr.indexOf(obj));
};
%PrepareFunctionForOptimization(f);
function g(v, x, index) {
  var arr = new Array({}, x - 1.1, x - 2, x - 3.1);
  assertEquals(index, arr.indexOf(0));
  assertEquals(index, arr.lastIndexOf(0));

  assertEquals(index, arr.indexOf(v));
  assertEquals(index, arr.lastIndexOf(v));
};
%PrepareFunctionForOptimization(g);
f(-(4 / 3));
f(-(4 / 3));
%OptimizeFunctionOnNextCall(f);
f(-(4 / 3));

g(0, 2, 2);
g(0, 3.1, 3);
%OptimizeFunctionOnNextCall(g);
g(0, 1.1, 1);