| Index: test/mjsunit/regress/regress-crbug-345820.js
|
| diff --git a/test/mjsunit/regress/regress-crbug-345820.js b/test/mjsunit/regress/regress-crbug-345820.js
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..bdd0af9b12db3340263c47f40e3d0b5f1eb84172
|
| --- /dev/null
|
| +++ b/test/mjsunit/regress/regress-crbug-345820.js
|
| @@ -0,0 +1,18 @@
|
| +// Copyright 2014 the V8 project authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +// Flags: --allow-natives-syntax --debug-code
|
| +
|
| +var __v_6 = {};
|
| +__v_6 = new Int32Array(5);
|
| +for (var i = 0; i < __v_6.length; i++) __v_6[i] = 0;
|
| +
|
| +function __f_7(N) {
|
| + for (var i = -1; i < N; i++) {
|
| + __v_6[i] = i;
|
| + }
|
| +}
|
| +__f_7(1);
|
| +%OptimizeFunctionOnNextCall(__f_7);
|
| +__f_7(__v_6.length);
|
|
|