blob: 09713c2f9710ca6a268b23eadd1e1c4b895dde3d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
/* -*- indent-tabs-mode: nil; js-indent-level: 4 -*- */
/*
* Any copyright is dedicated to the Public Domain.
* http://creativecommons.org/licenses/publicdomain/
*/
function f() {
return function(a) {
// This eval must take place before the block is cloned, when the
// call object is still not marked as a delegate. The scope chain
// purge for the JSOP_DEFVAR will not change the global's shape,
// and the property cache entry will remain valid.
eval(a);
{
let c = 3;
// This eval forces the block to be cloned, so its shape gets
// used as the property cache key shape.
eval('');
return b;
};
};
}
var b = 1;
var g1 = f();
var g2 = f();
/* Call the lambda once, caching a reference to the global b. */
g1('');
/*
* If this call sees the above cache entry, then it will erroneously use the
* global b.
*/
assertEq(g2('var b=2'), 2);
reportCompare(true, true);
|
