| Index: test/mjsunit/regress/regress-crbug-719479.js
|
| diff --git a/test/mjsunit/regress/regress-crbug-719479.js b/test/mjsunit/regress/regress-crbug-719479.js
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..dac49de3b7c1210c3e85b4827d08ba840bd5f6d0
|
| --- /dev/null
|
| +++ b/test/mjsunit/regress/regress-crbug-719479.js
|
| @@ -0,0 +1,24 @@
|
| +// Copyright 2017 the V8 project authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +// Flags: --allow-natives-syntax
|
| +
|
| +function baz(a, b) {
|
| + for (var i = 0; i < a.length; i++) {
|
| + if (a[i], b[i]) return false;
|
| + }
|
| +}
|
| +function bar(expected, found) {
|
| + if (!baz(found, expected)) {
|
| + }
|
| +};
|
| +bar([{}, 6, NaN], [1.8, , NaN]);
|
| +function foo() {
|
| + var a = [1,2,3,4];
|
| + bar(a.length, a.length);
|
| +}
|
| +foo();
|
| +foo();
|
| +%OptimizeFunctionOnNextCall(foo);
|
| +foo();
|
|
|