Upload Kmake

deps/v8/test/mjsunit/regress/regress-crbug-961709-1.js

@@ -0,0 +1,26 @@
+// Copyright 2019 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --allow-natives-syntax
+
+function foo() {
+  const a = [];
+  a[0] = 1;
+  return a[0];
+}
+
+function bar() {
+  const a = new Array(10);
+  a[0] = 1;
+  return a[0];
+}
+
+Object.setPrototypeOf(Array.prototype, new Int8Array());
+%EnsureFeedbackVectorForFunction(foo);
+assertEquals(undefined, foo());
+assertEquals(undefined, foo());
+
+%EnsureFeedbackVectorForFunction(bar);
+assertEquals(undefined, bar());
+assertEquals(undefined, bar());