| OLD | NEW |
| 1 // Copyright 2016 the V8 project authors. All rights reserved. | 1 // Copyright 2016 the V8 project authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 // Flags: --allow-natives-syntax | 5 // Flags: --allow-natives-syntax |
| 6 | 6 |
| 7 Array.prototype.__proto__ = null; | 7 var a = [0, ""]; |
| 8 var prototype = Array.prototype; | 8 a[0] = 0; |
| 9 |
| 10 function g(array) { |
| 11 array[1] = undefined; |
| 12 } |
| 13 |
| 9 function f() { | 14 function f() { |
| 10 prototype.lastIndexOf({}); | 15 g(function() {}); |
| 16 g(a); |
| 11 } | 17 } |
| 12 f(); | 18 |
| 13 f(); | 19 f(); |
| 14 %OptimizeFunctionOnNextCall(f); | 20 %OptimizeFunctionOnNextCall(f); |
| 15 f(); | 21 f(); |
| OLD | NEW |