Version 3.7.1

test/mjsunit/regress/regress-1229.js

 // Copyright 2011 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 17 matching lines @@
 // Flags: --allow-natives-syntax
 
 // Check that %NewObjectFromBound works correctly when called from optimized
 // frame.
 function foo(x, y, z) {
   assertEquals(1, x);
   assertEquals(2, y);
   assertEquals(3, z);
 }
 
-var bound_arg = [1];
+var foob = foo.bind({}, 1);
 
 function f(y, z) {
-  return %NewObjectFromBound(foo, bound_arg);
+  return %NewObjectFromBound(foob);
 }
 
 // Check that %NewObjectFromBound looks at correct frame for inlined function.
 function g(z, y) {
   return f(y, z); /* f should be inlined into g, note rotated arguments */
 }
 
 // Check that %NewObjectFromBound looks at correct frame for inlined function.
 function ff(x) { }
 function h(z2, y2) {
@@ skipping 26 matching lines @@
 function bar(x, y, z) {
   var non_construct = baz(); /* baz should be inlined */
   assertEquals(non_construct, NON_CONSTRUCT_MARKER);
   var construct = new baz();
   assertEquals(construct, CONSTRUCT_MARKER);
 }
 
 for (var i = 0; i < 5; i++) new bar(1, 2, 3);
 %OptimizeFunctionOnNextCall(bar);
 bar(1, 2, 3);