Index: test/mjsunit/regress/regress-crbug-480807.js |
diff --git a/test/mjsunit/regress/regress-crbug-480807.js b/test/mjsunit/regress/regress-crbug-480807.js |
new file mode 100644 |
index 0000000000000000000000000000000000000000..c273f20a78bfeb4c7b48cdb2b5fb12fc9d78b5e7 |
--- /dev/null |
+++ b/test/mjsunit/regress/regress-crbug-480807.js |
@@ -0,0 +1,22 @@ |
+// Copyright 2015 the V8 project authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+// Flags: --allow-natives-syntax --use-osr --turbo-osr --noalways-opt |
+ |
+function foo() { |
+ var c = 0; |
+ for (var e = 0; e < 1; ++e) { |
+ for (var a = 1; a > 0; a--) { |
+ c += 1; |
+ } |
+ for (var b = 1; b > 0; b--) { |
+ %OptimizeOsr(); |
+ } |
+ } |
+ return c; |
+} |
+try { |
+ foo(); |
+} catch (e) { |
+} |