diff --git a/implementation-contributed/v8/mjsunit/compiler/regress-890057.js b/implementation-contributed/v8/mjsunit/compiler/regress-890057.js new file mode 100644 index 0000000000000000000000000000000000000000..655c4431e9f5dd5ba884bed11661e2fd1747e208 --- /dev/null +++ b/implementation-contributed/v8/mjsunit/compiler/regress-890057.js @@ -0,0 +1,16 @@ +// Copyright 2018 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +// Flags: --allow-natives-syntax + +function f() {} +function g() { + f.prototype = undefined; + f(); + new f(); +} + +// Do not use %OptimizeFunctionOnNextCall here, this particular bug needs +// to trigger truly concurrent compilation. +for (let i = 0; i < 10000; i++) g();