| // jitcode which uses objects of one type might not be invalidated when that | |
| // object changes type, if the object isn't accessed in any way. | |
| function foo(x) { | |
| return x.f; | |
| } | |
| function bar() { | |
| with({}){} | |
| var a = {}; | |
| var b = { f: a }; | |
| foo(b); | |
| a.__proto__ = null; | |
| foo(b); | |
| } | |
| bar(); |