| OLD | NEW |
| 1 // Copyright 2015 the V8 project authors. All rights reserved. | 1 // Copyright 2015 the V8 project authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 // Flags: --allow-natives-syntax | 5 // Flags: --allow-natives-syntax |
| 6 | 6 |
| 7 a = {y:1.5}; | 7 var v1 = []; |
| 8 a.y = 1093445778; | 8 var v2 = []; |
| 9 b = a.y; | 9 v1.__proto__ = v2; |
| 10 c = {y:{}}; | |
| 11 | 10 |
| 12 function f() { | 11 function f(){ |
| 13 return {y: b}; | 12 var a = []; |
| 13 for(var i=0; i<2; i++){ |
| 14 a.push([]); |
| 15 a = v2; |
| 16 } |
| 14 } | 17 } |
| 15 | 18 |
| 16 f(); | 19 f(); |
| 20 %OptimizeFunctionOnNextCall(f); |
| 17 f(); | 21 f(); |
| 18 %OptimizeFunctionOnNextCall(f); | |
| 19 assertEquals(f().y, 1093445778); | |
| OLD | NEW |