Files
Kmake/deps/v8/test/mjsunit/compiler/regress-376100382.js
2026-05-26 23:36:42 -07:00

18 lines
486 B
JavaScript

// Copyright 2024 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
Object.prototype["10"] = "unreachable";
function foo() {
return new Int32Array().__proto__["10"];
}
%PrepareFunctionForOptimization(foo);
assertEquals("unreachable", foo());
assertEquals("unreachable", foo());
%OptimizeFunctionOnNextCall(foo);
assertEquals("unreachable", foo());