diff options
Diffstat (limited to 'deps/v8/test/mjsunit/regress/regress-1416697.js')
-rw-r--r-- | deps/v8/test/mjsunit/regress/regress-1416697.js | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/deps/v8/test/mjsunit/regress/regress-1416697.js b/deps/v8/test/mjsunit/regress/regress-1416697.js new file mode 100644 index 0000000000..1930bb826b --- /dev/null +++ b/deps/v8/test/mjsunit/regress/regress-1416697.js @@ -0,0 +1,44 @@ +// Copyright 2023 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +// Flags: --allow-natives-syntax + +function __isPropertyOfType() { + return typeof type === 'undefined' || typeof desc.value === type; +} + +function __getProperties(obj) { + let properties = []; + for (let name of Object.getOwnPropertyNames(obj)) { + if (__isPropertyOfType()) properties.name; + } +} + +function __getRandomProperty(obj) { + let properties = __getProperties(obj); +} + +var obj = {}; +Object.defineProperty(obj, "length", {}); + +function foo(x) { + try { + for (let i = 0; i < x; ++i) { + delete obj[__getRandomProperty(obj)](); + } + } catch (e) {} +} + +function test() { + let result = 0.9999; + for (let i = 0; i < 50; ++i) { + result += foo(i); + } +} + +%PrepareFunctionForOptimization(test); +test(); +test(); +%OptimizeFunctionOnNextCall(test); +test(); |