deps: update V8 to 8.1.307.20

PR-URL: https://github.com/nodejs/node/pull/32116
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>

1 files changed, 18 insertions, 0 deletions

diff --git a/deps/v8/test/mjsunit/regress/regress-v8-9534.js b/deps/v8/test/mjsunit/regress/regress-v8-9534.js
new file mode 100644
index 0000000000..430a78bff6
--- /dev/null
+++ b/deps/v8/test/mjsunit/regress/regress-v8-9534.js
@@ -0,0 +1,18 @@
+// Copyright 2019 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --allow-natives-syntax --stack-size=50
+
+let i = 0;
+function f() {
+  i++;
+  if (i > 10) {
+    %PrepareFunctionForOptimization(f);
+    %OptimizeFunctionOnNextCall(f);
+  }
+
+  new Promise(f);
+  return f.x;
+}
+f();