blob: df6caed74a458ee65653f1c567284b749b775705 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
function J(i) {
/* Cause a branch to build(?) */
if (i % 3)
[1,2,3]
}
function h(i) {
J(i);
/* Generate a safe point in the method JIT. */
if (1 == 14) { eval(); }
return J(i);
}
function g(i) {
/* Method JIT will try to remove this frame(?) */
if (i == 14) { with ({}); }
return h(i);
}
function f() {
for (var i = 0; i < 9 * 2; i++) {
g(i);
}
}
f();
/* Don't crash. */
|
