spreadcall-not-optimized-dynamic-6a.js (1235B)
1 // Tests when JSOP_OPTIMIZE_SPREADCALL no longer apply after the initial Ion 2 // compilation. 3 4 // JSOP_OPTIMIZE_SPREADCALL can be optimised when the following conditions 5 // are fulfilled: 6 // (1) the argument is an array 7 // (2) the array has no hole 8 // (3) array[@@iterator] is not modified 9 // (4) the array's prototype is Array.prototype 10 // (5) Array.prototype[@@iterator] is not modified 11 // (6) %ArrayIteratorPrototype%.next is not modified 12 13 function add(a, b) { 14 return a + b; 15 } 16 17 // %ArrayIteratorPrototype%'s [[Prototype]] was changed, as a result all properties are marked as unknown. 18 function test() { 19 function maybeInvalidate() { 20 // Use a WithStatement to prevent Ion-inlining. This ensures any 21 // bailouts due to type changes don't occur in this function, but 22 // instead in the caller. 23 with ({}); 24 25 if (i === 1900) { 26 var ArrayIteratorPrototype = Object.getPrototypeOf(Array.prototype[Symbol.iterator]()); 27 Object.setPrototypeOf(ArrayIteratorPrototype, null); 28 } 29 } 30 function fn(...rest) { 31 maybeInvalidate(); 32 return add(...rest); 33 } 34 for (var i = 0; i < 4000; ++i) { 35 assertEq(fn(1, 2), 3); 36 } 37 } 38 test();