summaryrefslogtreecommitdiff
path: root/deps/v8/test/mjsunit/regress/regress-5262.js
blob: 06932a2f0f6e6cbf333936168609d04e8781040c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
// Copyright 2016 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// Flags: --ignition-osr --allow-natives-syntax

function g() { return 23 }
function h() { return 42 }
function boom(o) { o.g = h }
function f(osr_and_recurse) {
  if (osr_and_recurse) {
    for (var i = 0; i < 3; ++i) {
      if (i == 1) %OptimizeOsr();
    }
    %OptimizeFunctionOnNextCall(f);
    f(false);     // Trigger tier-up due to recursive call.
    boom(this);   // Causes a deopt due to below dependency.
    var x = g();  // Install dependency on the {g} function.
    return x;
  }
  return 65;
}
assertEquals(65, f(false));
assertEquals(65, f(false));
assertEquals(42, f(true));