Index: test/mjsunit/regress/regress-crbug-349465-2.js |
diff --git a/test/mjsunit/regress/regress-crbug-349465-2.js b/test/mjsunit/regress/regress-crbug-349465-2.js |
new file mode 100644 |
index 0000000000000000000000000000000000000000..6e90c1acc23d2482147f249c327ac4892ee21d81 |
--- /dev/null |
+++ b/test/mjsunit/regress/regress-crbug-349465-2.js |
@@ -0,0 +1,31 @@ |
+// Copyright 2014 the V8 project authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+// Flags: --allow-natives-syntax --debug-code |
+ |
+function __f_5() { |
+ var __v_9 = {}; |
+ var __v_10 = []; |
+ function __f_14(__v_26) { |
+ if (__v_26 | 0 == __v_26) { |
+ __v_26 = __v_26 | 0; |
+ } |
+ if (%_IsSmi(__v_26) && !__v_9[__v_26]) { |
+ __v_10.push(__v_26); |
+ } |
+ } |
+ function __f_10(__v_26) { |
+ %OptimizeFunctionOnNextCall(__f_14); |
+ __f_14(-__v_5); |
+ } |
+ var __v_5 = 10 * 1000 * 1000 * 1000; |
+ for (var __v_6 = 1; __v_6 <= __v_5; __v_6 *= 10) { |
+ for (var __v_8 = 0; __v_8 <= 9; __v_8++) { |
+ for (var __v_4 = -1; __v_4 <= 1; __v_4++) { |
+ __f_10(__v_6 * __v_8 + __v_4); |
+ } |
+ } |
+ } |
+} |
+__f_5(); |