Files
Kmake/deps/v8/test/mjsunit/compiler/regress-385386138.js

28 lines
911 B
JavaScript
Raw Normal View History

2026-05-26 23:36:42 -07:00
// Copyright 2024 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax --turbofan --no-always-turbofan
function foo() {
let val = [];
val.__proto__ = RegExp();
return Math.max(...val);
}
%PrepareFunctionForOptimization(foo);
assertThrows(() => foo(), TypeError,
"Spread syntax requires ...iterable[Symbol.iterator] to be a function");
%OptimizeFunctionOnNextCall(foo);
assertThrows(() => foo(), TypeError,
"Spread syntax requires ...iterable[Symbol.iterator] to be a function");
assertUnoptimized(foo);
%OptimizeFunctionOnNextCall(foo);
assertThrows(() => foo(), TypeError,
"Spread syntax requires ...iterable[Symbol.iterator] to be a function");
// TF should not have speculatively optimized CallWithSpread.
assertOptimized(foo);