deps: update V8 to 6.0.286.52

PR-URL: https://github.com/nodejs/node/pull/14004
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Franziska Hinkelmann <franziska.hinkelmann@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

1 files changed, 34 insertions, 0 deletions

diff --git a/deps/v8/test/mjsunit/object-keys.js b/deps/v8/test/mjsunit/object-keys.js
new file mode 100644
index 0000000000..29eb85d6aa
--- /dev/null
+++ b/deps/v8/test/mjsunit/object-keys.js
@@ -0,0 +1,34 @@
+// Copyright 2017 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --allow-natives-syntax
+
+// Ensure that mutation of the Object.keys result doesn't affect the
+// enumeration cache for fast-mode objects.
+(function() {
+  const a = {x:1, y:2};
+  let k = Object.keys(a);
+  %HeapObjectVerify(k);
+  assertEquals(2, k.length);
+  assertEquals("x", k[0]);
+  assertEquals("y", k[1]);
+  k[0] = "y";
+  k[1] = "x";
+  k = Object.keys(a);
+  assertEquals(2, k.length);
+  assertEquals("x", k[0]);
+  assertEquals("y", k[1]);
+})();
+
+// Ensure that the copy-on-write keys are handled properly, even in
+// the presence of Symbols.
+(function() {
+  const s = Symbol();
+  const a = {[s]: 1};
+  let k = Object.keys(a);
+  %HeapObjectVerify(k);
+  assertEquals(0, k.length);
+  k.shift();
+  assertEquals(0, k.length);
+})();