Andrew Top | ef837fa | 2017-10-04 22:44:25 -0700 | [diff] [blame] | 1 | // Copyright 2014 the V8 project authors. All rights reserved. |
| 2 | // Use of this source code is governed by a BSD-style license that can be |
| 3 | // found in the LICENSE file. |
| 4 | |
| 5 | // Flags: --allow-natives-syntax |
| 6 | |
| 7 | var d = {x: undefined, y: undefined}; |
| 8 | |
| 9 | function Crash(left, right) { |
Andrew Top | 63c7ad4 | 2019-11-25 16:10:13 -0800 | [diff] [blame] | 10 | var c = {x: right.x - left.x, y: right.y - left.y}; |
Andrew Top | ef837fa | 2017-10-04 22:44:25 -0700 | [diff] [blame] | 11 | |
Andrew Top | 63c7ad4 | 2019-11-25 16:10:13 -0800 | [diff] [blame] | 12 | return c.x * c.y; |
| 13 | }; |
| 14 | %PrepareFunctionForOptimization(Crash); |
Andrew Top | ef837fa | 2017-10-04 22:44:25 -0700 | [diff] [blame] | 15 | var a = {x: 0.5, y: 0}; |
| 16 | var b = {x: 1, y: 0}; |
| 17 | |
| 18 | for (var i = 0; i < 3; i++) Crash(a, b); |
| 19 | %OptimizeFunctionOnNextCall(Crash); |
| 20 | Crash(a, b); |
| 21 | |
| 22 | Crash({x: 0, y: 0.5}, b); |