DescriptionFix deoptimization at ForInStatement::BodyId()
Full-codegen prepared for the bailout in the wrong place, causing side
effects to be replayed when they shouldn't. Crankshaft and Turbofan are
in agreement about where the deopt should jump to.
TEST=mjsunit/for-in-opt
R=jarin@chromium.org
BUG=v8:4381
LOG=y
Committed: https://crrev.com/cabeb7db3a5be7f802465df2bb1cadb197cc5587
Cr-Commit-Position: refs/heads/master@{#31607}
Patch Set 1 #Patch Set 2 : moar test cases #
Messages
Total messages: 6 (1 generated)
|