Index: test/mjsunit/regress/regress-631050.js |
diff --git a/test/mjsunit/regress/regress-crbug-614292.js b/test/mjsunit/regress/regress-631050.js |
similarity index 54% |
copy from test/mjsunit/regress/regress-crbug-614292.js |
copy to test/mjsunit/regress/regress-631050.js |
index 3a67c17f6010b3bf60a8b7c9aa019ff369ddfadf..b31c6a2022fcba576f7962322e2d7f64c2f39cb1 100644 |
--- a/test/mjsunit/regress/regress-crbug-614292.js |
+++ b/test/mjsunit/regress/regress-631050.js |
@@ -1,14 +1,15 @@ |
// Copyright 2016 the V8 project authors. All rights reserved. |
// Use of this source code is governed by a BSD-style license that can be |
// found in the LICENSE file. |
+// |
+// Flags: --gc-global --stress-runs=8 |
-// Flags: --allow-natives-syntax |
- |
-function foo() { |
- return [] | 0 && values[0] || false; |
+function __f_3(x, expected) { |
+ var __v_3 = []; |
+ __v_3.length = x; |
+ __f_3(true, 1); |
} |
-%OptimizeFunctionOnNextCall(foo); |
try { |
- foo(); |
+ __f_3(2147483648, 2147483648); |
} catch (e) {} |