// Copyright 2014 the V8 project authors. All rights reserved.// Use of this source code is governed by a BSD-style license that can be// found in the LICENSE file.// Flags: --allow-natives-syntaxvardummy={foo:"true"};vara={y:0.5};a.y=357;varb=a.y;vard;functionf(){d=357;return{foo:b};}f();f();%OptimizeFunctionOnNextCall(f);varx=f();// With the bug, x is now an invalid object; the code below// triggers a crash.functiong(obj){returnobj.foo.length;}g(dummy);g(dummy);%OptimizeFunctionOnNextCall(g);g(x);