regress-351261.js 443 Bytes
Newer Older
1 2 3 4
// Copyright 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

5
// Flags: --allow-natives-syntax
6 7 8 9 10 11

function store(a) {
  a[5000000] = 1;
}

function foo() {
12
  var __v_8 = new Object();
13 14 15
  var __v_7 = new Array(4999990);
  store(__v_8);
  store(__v_7);
16 17
};
%PrepareFunctionForOptimization(foo);
18 19 20
foo();
%OptimizeFunctionOnNextCall(foo);
foo();